last executing test programs: 7.722823026s ago: executing program 0 (id=434): syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) socketpair(0xa, 0x80000, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x65, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000080)=0x800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) creat(0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x407ff, 0x38fa8b00d923ddd5, 0x0, 0xfd}, 0x9c) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x50, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491}}, {0x4, 0x1b}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 7.379910436s ago: executing program 1 (id=436): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x4]}, 0x8, 0x80800) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00@a\t\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.367675942s ago: executing program 4 (id=439): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000b40)={@initdev, 0x0}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x8, 0x3, 0x3, @local, @remote, 0x10, 0x700, 0x40000000, 0xffffffff}}) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001100)=0x14) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001140)={@dev, @loopback, 0x0}, &(0x7f0000001180)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000011c0)={@local, @private, 0x0}, &(0x7f0000001200)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x18c, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) write$uinput_user_dev(r4, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) (async) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) (async) r16 = dup(r4) ioctl$UI_SET_EVBIT(r16, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r16, 0x5501) write$uinput_user_dev(r16, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) io_uring_register$IORING_UNREGISTER_FILES(r16, 0x3, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x418}) 5.792647705s ago: executing program 4 (id=441): r0 = memfd_secret(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f00000000c0)=0xfa) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x5c, 0x160, 0x0, 0x3e0, 0x230, 0x228, 0x25a, 0x230, 0x228, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x120, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8104, 0x300}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r6 = getpgid(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x55, 0x1000, &(0x7f0000000080)="b4602cb5f111874eb578e8c6e750701c5f844b7ca1652b61ad47c5c14257a8d49752c44ca16dd7cfd756019cf908dc0c792fa98e231727cec9884095295395d0d73f7c5f911541a0ecddcec96cff4491c7a17c2b77", &(0x7f00000011c0)=""/4096, 0x9, 0x0, 0x73, 0x0, &(0x7f00000001c0)="fdb1a88701bc5e4bc5600b0c582ecf52d6c85548a2b7b288b848140f823eabb55c549a049c72a0f81cdf3394210812909551c78cba45483358e5f9ddf56195eb618be5f9e8be03464df05f8e4e90e3992c72668933ff1825a043326bb34bf33ae8b2190e63ce397a058907e9de5b1f4bf854bc", &(0x7f0000000240), 0x7, 0x0, 0xe}, 0x50) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r4, &(0x7f0000001180)={r4, r4, 0x8000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000010c0)='./file0\x00') preadv(r4, &(0x7f0000001200), 0x0, 0x3f, 0x6a76) memfd_secret(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f00000000c0)=0xfa) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x5c, 0x160, 0x0, 0x3e0, 0x230, 0x228, 0x25a, 0x230, 0x228, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x120, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) ppoll(&(0x7f0000000000)=[{r1, 0x8104, 0x300}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) (async) ftruncate(r0, 0x51a9497) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)) (async) getpgid(0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x55, 0x1000, &(0x7f0000000080)="b4602cb5f111874eb578e8c6e750701c5f844b7ca1652b61ad47c5c14257a8d49752c44ca16dd7cfd756019cf908dc0c792fa98e231727cec9884095295395d0d73f7c5f911541a0ecddcec96cff4491c7a17c2b77", &(0x7f00000011c0)=""/4096, 0x9, 0x0, 0x73, 0x0, &(0x7f00000001c0)="fdb1a88701bc5e4bc5600b0c582ecf52d6c85548a2b7b288b848140f823eabb55c549a049c72a0f81cdf3394210812909551c78cba45483358e5f9ddf56195eb618be5f9e8be03464df05f8e4e90e3992c72668933ff1825a043326bb34bf33ae8b2190e63ce397a058907e9de5b1f4bf854bc", &(0x7f0000000240), 0x7, 0x0, 0xe}, 0x50) (async) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r4, &(0x7f0000001180)={r4, r4, 0x8000}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000010c0)='./file0\x00') (async) preadv(r4, &(0x7f0000001200), 0x0, 0x3f, 0x6a76) (async) 5.544451828s ago: executing program 1 (id=442): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, 0x0, 0x0, 0x2, 0x100006dd}) getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000180)=""/80, &(0x7f0000000240)=0x50) write$UHID_INPUT(r2, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000100)=0x80000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x169a7c, 0x41) copy_file_range(r7, 0x0, r7, 0x0, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB, @ANYBLOB="93d2ff486865ad2f97c008429eeae2da27924de1f99d87030b0fdb39fb1098cbf827d6204ddcf1340ea485e31cdef0253f5accb0feadd81784fb6c35f6a80b21c5740fcd3bf44290fc07dc2c45d9839534a4c5c2ee103d325c89a3a0a9", @ANYRES8=r5, @ANYRES16=r7, @ANYRESOCT=r7], 0x58) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x3, 0xe6, &(0x7f0000000280)="a2b387e7a01609b94097533da580cd27baf6d288bad4cc6b53097b4af85321aa5f9c3bbafb85b0835efd904aba2abdeba67467a3f17f78424ae6e336e36e2aa4329ffda7fcfbd2abb178071ee077544a474a259bc50d226c8676ab169ee10f4d60aec4a98796829f749701370b559252f4488ec89188d4205aabd401e95774b24de816902d9ef60f4c2c36954a9167a5e9c236b972ba0b253ab27f49e18a28a32191a1e4b7dfc07784e661635a17a3551a37d18df253a6dafe7acd5a985c190140067a8710e4403b9c06d6c26f6ffc54bcee247e05c85e218d005f327148239cdca8062c0f68", 0x0, 0x1}]}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x25, 0xa, 0x0) bind$can_raw(r9, &(0x7f0000000140), 0x10) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.368890203s ago: executing program 4 (id=444): r0 = semget(0x1, 0x4, 0x482) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000000000)=""/49) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/172) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/90) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5, 0x1010, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$inet(0x2, 0x5, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x6a, 0x0, @fd, 0x3, {}, 0x9, 0xb, 0x0, {0x0, r2, r3}}) r4 = semget$private(0x0, 0x2, 0x15) semctl$GETNCNT(r4, 0x0, 0xe, &(0x7f00000001c0)=""/156) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:11 1', 0x1b) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@canfd={0xd, {{0x707a, 0x1, 0x1}, 0x35, 0x0, 0x0, 0x0, "ef1fa176f5a684ae5d7f16ee5b895139467021c01fc9895c37722679a97ed59c7eb3c830a672d5dbeeb4770a41a5a1a667e1c0a9f9fed427b176b4db422cf1ac"}}}}, &(0x7f0000000340)={0x1, 0x4, [0x4d2, 0x433, 0xc28, 0x95c]}) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x939fada337ab5baa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'virt_wifi0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r6, 0x1, 0x6, @remote}, 0x10) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000b1c000/0x3000)=nil, 0x3000, 0x1000007, 0x4000010, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x769e, &(0x7f0000000440)={0x0, 0x4978, 0x2000, 0x2, 0x3c6}, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f00000008c0)=@IORING_OP_WRITEV={0x2, 0x8, 0x6003, @fd_index=0x5, 0xaa, &(0x7f0000000840)=[{&(0x7f0000000540)="06e29b0ae400574e2a7fbe63f25bd65bc2c0d9c9b1a88a509db8babd05156b4f52bb231fe1cb80e83eba64874f6ee1a7e476027b1eedb9f0262f7b37ee4c527da951ba667273e8fd8662b2aebaa082284a328c9b1d96c7dd15fc457c97d906296cac3476fff3fe6a411f00e7a3f507ce3c0bdd1910e05ed20068438d91e4328418d5e1f002ae1947a3efe7fff90d", 0x8e}, {&(0x7f0000000600)="c22ad244e4555e7ca23d17cceab3f1b895897a", 0x13}, {&(0x7f0000000640)}, {&(0x7f0000000680)="510ba7f0be1d9fff818d5862d27016399c71da0448b8837cd4a59f7b8afad0d42db545fd94d570770931ae0b26f30204e2840919a52f0f016056f1920a183a8896e1bb4210ea2108b3c6c82df56b7429613dfb34f85044c9514882f3c7574a1d58878e7dc5e40fd7c9816c11cc578d47911db7", 0x73}, {&(0x7f0000000700)="de597220b9d0490145433c681b842c59aadc0d5c6551ed41070744c0bec1945b51624c9ef9d1b6e99698055726a2c35dbf4ef260cd533492f78537da6031555e6a772338a25d357c36e7029f9f9600bffa3428d805a10e7fb12f7ac69898dc3dd9be6888870e55301d855dc0c0f8b14744fafabc859f5a009b11c1237c2356f1703d86e5c1b17a7501f49b824d6513b5bb290aba6a6f7a72e8ba4cac5648c3e3881e081fafdb39fad1e102b23bf72a12ea1f9c1f9ddbd23e3057378edd7040bd00a21c43b07ca4759d81d2c1491a251cee77cdcd1258af", 0xd7}, {&(0x7f0000000800)="dde92e76bea3c289a22ce784f76245acd8d419eb13dbbee5a011364b208a797ca1", 0x21}], 0x6, 0x7, 0x0, {0x1, r10}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000900)=[0x1, 0x1fe0000], 0x2) semtimedop(r0, &(0x7f0000000940)=[{0x2, 0x4, 0x800}, {0x3, 0x2, 0x1000}, {0x3, 0xfff, 0x1000}, {0x1, 0x7ff, 0x1400}, {0x0, 0x6}, {0x3, 0x9, 0x1800}, {0x3, 0x8, 0x800}, {0x3, 0x3493, 0x1800}, {0x1, 0x5, 0x1000}], 0x9, &(0x7f0000000980)={0x0, 0x989680}) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0x2711, @host}, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000a00)=""/195, &(0x7f0000000b00)=0xc3) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0xf0, 0xa6, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x9, 0x45, 0x1, {0x22, 0x5c0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x9, 0x2}}}}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x200, 0x2, 0x1, 0x7, 0x20, 0x40}, 0x5, &(0x7f0000000bc0)={0x5, 0xf, 0x5}, 0x7, [{0x6e, &(0x7f0000000c00)=@string={0x6e, 0x3, "f0bd56eebf26563eccbfc1d52f8d48b5c03ce288953f28b7be87f03bd354f15d529106103612a37bdc15b25de604bfb3c707bc325d7f1fec73b5b8c283cd9dd11c7bab63c7d7c9b4c7ef9e9459ab03748eb7f4b1281a5f00764895350f568419bf84d998e2ad6f6ed4ab1f7c"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x100a}}, {0xf9, &(0x7f0000000cc0)=@string={0xf9, 0x3, "fa5bea5cacd112be1cb1060e1668633913d3c81b75c649ca262d76906185b143bfc0c4e8309a845ceaa34123c8ae09107553e0baab8e6982c4fe2b29215a7934205cb4f62fc1c5e7459a4a459c36dc02aa0700b7012894d8f0d497072fe7225456bce121d2cf57209ab0900262c05362c212494fc35d583a327df8581d15a9af833bb51c7c9c1bafaf8ea709946c2b360723a1a2d7e3b5c8404fccf6dd640025d29e667d0ce24203a34ebf9d4eb803dd091a0b486cffd39f92814f6aaa8dbfa033ed2386e5b83a934015b7a7c6dfc65adb7e5b57a864e1e49cc082b3c364d4860318db5e322bc727455c5ac6947edf3dd52e8d9fc6d17b"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x500a}}, {0xf3, &(0x7f0000000e40)=@string={0xf3, 0x3, "242f609c8ec1a28bcb667017e186bfa61cbff51d0aa5215947afb4e6cf4e28ed617ebf01cfee46f7341d67f6ce73f7443ea7f8745393a7403ac10e15d8cdf064b4754e42d2425b10fda01f5792303ab463b183cb23dde86a1eeda8ad15b8730369e023e66d511c689c9ea6b4bcbe74af613bb86cc74aedcf9268b51cef237167a5a4105c53c33fd8a29aad0edd097e7f3fdf1722c4f0fef3c85ba2781862ad8c59634f462934902bbae8035661fbb3b3394cda1ecc0e1c047170b4326919193154aac984e6ac3ec564ab620a97ae144e1df5a0804d739bafe6c88b0a9230e37dd559167073e9bb1253c3d9b08dc0737de8"}}, {0x52, &(0x7f0000000f40)=@string={0x52, 0x3, "a696fc5d1fc8731ac3d98b69a0fb304c646365a5380c2cc4e72f0b2beb92f90ee08efe801f329aaf2390c2976a59e4e26fd620364e483f7a519c7b1873702aea4d466d7cb39c0625f71003c380915600"}}]}) r11 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$6lowpan_control(r11, &(0x7f0000001080)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) fsopen(&(0x7f0000001100)='incremental-fs\x00', 0x0) syz_usb_connect$cdc_ecm(0x2, 0xf4, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x1, 0x1, 0x4, 0xc0, 0x4, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "9b09d6"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3c2, 0x3a, 0x78, 0x61}, [@mdlm_detail={0xa4, 0x24, 0x13, 0xf7, "876b62ee48f923cca150f4d4730f8db1b941e692d0c416cba71f8e9b5fb1b0b107a58bc846b9555bdbd44b88f0ec9851892c1dc566572745c3d3b272c068bc0d5ad7c8977b94c050444b2dbeb96873eefb94807307a297f9d5df07ef09282275fb1c796e825ecfabeebdba533f89929bc52ba0b20f54389dacfa822c0d5fdebcdcffde52e84a0a165b87ca3f56e05eabf1cdd76d9b4de418efe24072b216c8f9"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x9, 0xb8}}}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x300, 0x68, 0x7, 0x7f, 0x8, 0x8}, 0x17, &(0x7f0000001280)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x8, 0x6, 0x9, 0xf8}]}, 0x1, [{0x8f, &(0x7f00000012c0)=@string={0x8f, 0x3, "c6ec9cb8632220663a0fa4e1780e00255fbaf7c7b65143b493c3cbd9b4751de54320260d6f4e8498656af97bf9691967b5be1779ccbc37c7ac2241e7848b1939b83adb95a0248094c49094315ce9394beaee07b7a3ee38d3d25764993f5f64893ff4900d9b5e5edc0f998d75780da280b56cacaf2c0095f93a0d52bf38c8fd8c600d2ac0f98345ad2d5d7b4257"}}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000013c0), 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0x98, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x98}}, 0x4810) 4.663224318s ago: executing program 3 (id=445): syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000140)={0xa, 0x4e24, 0x8b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="c6070aa906fb184817e1b351ac7f7c2fe3efb576bbab0a13549dce0d43afad55c77b723104ed3a229c08c06d0cff659f6c3006bf89d602bc584b477d5772ce0bbb8e17e1d8c224a36f58cf5b83ef277bae3cc89690c98fa199f82a9df1bbb7a9c0186a9dd1bdfaac6abdb9141870d437b17cd66bbfa793d051eac761faf03d99ecb0fe4de30919360f5e8ad1d9fc91127de1d5a8b7dcd3", 0x97}, {&(0x7f0000000180)="5c4641b14faf74513c9f5e57ea29bc54a21115f09ee1b83b15fe7e3804e430e62adbb591af5ea6c9464539c60eb614b3d93fa02e1f563884594edbafd5743b0e2d12af1d86ab9bd9631eb4ee29b0a4d2f6fcaa869cb2e79662", 0x59}], 0x2, &(0x7f0000000380)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x84, 0x8, 0x0, 0x6b, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}}}, @hopopts={{0x50, 0x29, 0x36, {0x3a, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x56}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x6af8}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x7f}, @pad1]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x2e, 0x3, '\x00', [@generic={0x8, 0xb, "d847c11e941f5f800107f8"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x49c}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts={{0x38, 0x29, 0x36, {0x2b, 0x3, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x38b6}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x81}}], 0x160}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r2]}}], 0x38}}], 0x1, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8202, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) 4.171941787s ago: executing program 0 (id=447): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x11, 0x7efffeff00000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000500)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000000001081179808000000000001090224000100000000090400"], 0x0) 4.142240478s ago: executing program 2 (id=448): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006f7366001c0002800800034000e90001080001400000000305000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_clone3(&(0x7f0000000340)={0x208020080, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbf1}}, './file0\x00'}) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x8, 0xb, 0x3, 0xa, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd2a, 0x3502}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0x1}, @sadb_lifetime={0x4, 0x4, 0x1000, 0xc, 0x8, 0xff}]}, 0x50}}, 0x40040) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x1}) r5 = fsopen(&(0x7f0000001080)='hugetlbfs\x00', 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x10, r2, 0x0) 3.6564628s ago: executing program 2 (id=449): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000002340)={0x6d, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x9}}, 0x50) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) (async) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) (async) recvmmsg(r5, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) userfaultfd(0x0) (async) socket(0x10, 0x3, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd", 0x21) r6 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRES16=r7], 0x0) (async) inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 3.351994196s ago: executing program 2 (id=450): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001640)=""/100, 0x64}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001300)=""/52, 0x34}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f0000001200)=""/45, 0x2d}}], 0x3, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001640)=""/100, 0x64}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001300)=""/52, 0x34}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2, &(0x7f0000001200)=""/45, 0x2d}}], 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001280)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xd) 3.34205571s ago: executing program 4 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x32e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b04af72024d05a5ea9160102030109021c0301000050000904e700050801000009050602ff03b302044911675ca184fb9bf74d8f18720d9e556046"], 0x0) (async, rerun: 64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) (async, rerun: 64) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x69, 0x0, 0x100, 0x3, 0xc}) (async) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x5, r3}) (async, rerun: 32) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.220572402s ago: executing program 2 (id=452): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x0) 3.183520002s ago: executing program 2 (id=453): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="000f01000000e931d0ab0076ace860b6049a5797f40b5249b2c20e6ee3d97a15b36630464ee34bb719f6e81081a1619b6f5707e070d3f1968dae06a7ae424c3c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xfffd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x78, 0x0, r5, {0x7, 0x0, 0x0, {0x0, 0x0, 0x52, 0x800000000000000, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0xa000}}}, 0x78) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x42, 0x4, 0x2e0, 0xffffffff, 0x100, 0x100, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0xee00, 0x1, 0x4}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010502, 0x0, 0x0, 'erspan0\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xe0800, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc) getsockopt$netlink(r8, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0x300) fsetxattr$system_posix_acl(r7, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) syz_emit_ethernet(0x60, &(0x7f00000003c0)={@remote, @random="e43f6642531e", @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x3, 0x9, 0x4a, 0x68, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x8, [{@multicast2, 0x9}, {@empty, 0x7}, {@remote, 0x7f}]}]}}, @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x3, 0x2, 0x800, 0x0, 0x2, 0x7, 0x4, 0x0, 0xab, 0x5, 0x2, 0x4e24, 0x4e20}}, [0x0, 0x0]}}}}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000403605a8a440000102030109021b00010100000009040000020701010009040002"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) openat2(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x20, 0x2c}, 0x18) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c100}, 0x20000054) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r6, 0x0) 3.114357775s ago: executing program 4 (id=454): pipe2(&(0x7f0000000440), 0x4000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x3, 0x8, {0xffffffffffffffff, 0x180, 0xff, 0x7, 0x102, 0x7cf4, 0x9, 0x7ffffffd, 0x7, 0x8000, 0x7, 0xee00, 0x0, 0x3ff, 0x20001}}, {0x0, 0x11}}}, 0xa0) (async) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mlockall(0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x9}], 0x1, 0x43, 0x0, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) 3.011060846s ago: executing program 3 (id=455): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x6, [0xb, 0x5e0, 0x341, 0x3, 0xf, 0x3]}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) 2.860569336s ago: executing program 1 (id=456): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 2.807749837s ago: executing program 3 (id=457): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="1a915443a70af31d9542ef342258d4820e6f6c70c907dd6c246601236893a54b8bbe14ed1a7174aeb18ba65cfa65feb751fd85db2d52d9e2dc42bdf615583b7203e9133bec14b2b12d5e461c3737400169349fe26b5a18f6cc997476ed2bdfe70f5f9c6cb535d69e849c0e9915f4fa471adaad3c82051b69e5213714ae5b5beaea4760bb7e55975f53fd0a1ffd", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @remote}, 0xffffffffffffffd7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x1) shutdown(r3, 0x1) shutdown(r3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x44051) rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000000)={0x28, 0xe, 0x9}) 2.593180466s ago: executing program 0 (id=458): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x600, 0x0}) 2.012481735s ago: executing program 0 (id=459): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x1}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xdc9, 0x4) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2017be01}) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, 0xffffffffffffffff, 0x80000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) ioperm(0x5, 0x1, 0x3) 1.452024103s ago: executing program 3 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x35b043, 0x13) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r5, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x44}}, 0x0) 1.231859192s ago: executing program 0 (id=461): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {0x35}, {0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.184574296s ago: executing program 4 (id=462): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000400)=[{0x8, 0x10, 0x0, 0x0}, {0x3, 0x8001, 0x0, 0x0}], 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usbip_server_init(0x3) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x22, 0x0, 0x0) 1.037227171s ago: executing program 3 (id=463): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x11, 0x190}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x7358, 0x200, 0xffffffff, 0x8}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x20, 0x0, 0x0) r7 = dup(r4) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r12, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x58da, &(0x7f00000000c0)={0x0, 0xde00, 0x200, 0x2, 0x378}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x80, &(0x7f00000001c0)=0x2, 0x0, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x80}}, 0x48080) 984.556287ms ago: executing program 1 (id=464): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x13, r0, 0xa29ac000) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b1eb03000000000000000000431def647f78c92328a4b8ba8f26a388b72dad1d200f3b1e98797be8114a2e7c37144fe918c6c7d29c4580b8d6", @ANYRESHEX=r0, @ANYBLOB="80420000000000001400f9ffb4ba37b560c0776c616e5000000000000300000000000400"], 0x3c}}, 0x0) 872.370212ms ago: executing program 1 (id=465): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000010c0)=""/229, 0xe5) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_int(r1, 0x29, 0x3, 0x0, &(0x7f00000000c0)) (async) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$fuse(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2006, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x7800, 0x700, 0xe9, 0x9, {{0x5, 0x4, 0x2, 0x25, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) (async) getxattr(0x0, 0x0, 0x0, 0x0) 828.41205ms ago: executing program 1 (id=466): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000751c4110e60f00989ad1010203010902240001000000000904290202b48cbb0008050002109009a3aa45673b79d6961bc7d1b30000fa000905820240000000005c829fb15bb4b64921722aab420d9adfe9cef432832f59badba56c2c204c076cbbff03911769c5b6c947b5191c10c61fd962ea4672dc20333573891a54c8c77b87d7cc3fb9fda1ad335db0ca55c97b3349ea48687663cae1b86fa24698e5652a791e00a97e909fcc1fc356de9da15b42c68712906ac3bb167aa6c4"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@bridge_setlink={0x2d4, 0x13, 0x20, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x19c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x4, 0x18}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xfc, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x68, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2d4}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=@migrate={0x188, 0x21, 0x400, 0x70bd2b, 0x25dfdbfd, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x77cd, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x3b, r2, r4}, 0x6e6bb4, 0x2}, [@mark={0xc, 0x15, {0x35075d, 0xfff}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010100, @in=@broadcast, 0x4e21, 0x0, 0x4e22, 0x9518, 0xa, 0x20, 0x0, 0x87, 0x0, r5}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, {0x2, 0x6, 0xfffffffffffff7c6, 0x1, 0x9, 0x0, 0x8d2c, 0x8}, {0xfff, 0x401, 0x5}, {0x2, 0x6, 0x3ff}, 0x70bd2a, 0x3503, 0x2, 0x2, 0x5, 0x2}}, @lifetime_val={0x24, 0x9, {0x0, 0x5eeb3e0, 0x7, 0x7}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @offload={0xc, 0x1c, {r6, 0x2}}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2a, 0x4}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804012000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804012000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r10, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x40, 0x7, 0x8d, {0x8d, 0x7, "e009d011c96e33d64af022df51836cf0c9b5cd222efa6e553123c38c72f14ac495fd57efd47ebee15bac113de70882682d1f9e2b5f3d854ab0494aedfd83207929c914b865749231e9c242c46b96207c57dead209abbe54ff38b50244c60a83287594f18de26bf734ad1ed34ceaff8bc60e3b42d3749757ec77d7c5d223de073462984b4ccb1a1c7a57852"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x44, &(0x7f00000009c0)={0x20, 0xf, 0x2, 'hx'}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0xfff, 0x4, 0x3, 0x10, 0xa, 0x6, 0xfff7, 0x9, 0x8, 0x8001, 0x80, 0xe}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4, 0x7ff}, &(0x7f0000000b00)={0x20, 0x83, 0x2}, &(0x7f0000000e40)={0x20, 0x87, 0x2, 0xfff8}, &(0x7f0000000e80)={0x20, 0x89, 0x2, 0x1}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1c, &(0x7f0000000f40)="8680b59176641050a94f7e3923a4f88f257815cf7502da7f6f64d22bd8f9b9b77d8246266795989ba5afc6c695be2ae7e615d8fe1fe789a408ce7826d4fd80e5ee5a67e6512cf054d74850e23255f8e147d04cb6486e945610bddc635988bedc394238392cb039ba3d7291951c7cb5d36824be67998795f039530b354d0b43dfda324dc68efaa1abb4b666ec1cce6b852d50a9302b44d9971093aab2106378d9", 0xa0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x21, 0x2, 0x7, 0x1, 0x1, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x0, 0x0, 0x10, 0xbe}, 0xb3, &(0x7f0000000140)={0x5, 0xf, 0xb3, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x1, 0x0, 0x6, [0x3f0f, 0x0, 0x0, 0xffc000, 0xcf]}, @generic={0x8e, 0x10, 0x2, "3ffc5c5fb664c725408040a5130fb4ea3ffcb339ddf9ca70d288d1f2f9399f145a8a60513667f1d069ef3101932772892ae3b5ca12c17e3abca6ad66dafd2f3679286db78a9392555e24b28cde7860b9557a9cd57999a8e466e0ce9d33f7825dff4eb702ad534435b9583f9133af472bcf6d7e90569cb6eb786044d2a6466453c3b6be55591a6652970d19"}]}, 0x1, [{0xcf, &(0x7f0000000200)=@string={0xcf, 0x3, "4f9d4bd96834daa4b31b9e40298c478cb2ebeb632689d2c5b9517e9d5d9c2df97951f5c92f5d1fbcc8af548eef8c29f458eee5578f9295a729e80858aac9cdf54b742ec9cd1907bbe48c7df7cb87e2f88a3c391fc6da696cc41a160a0af0d03b2a93c93d18b774167085338d84fe457c18bb96ae07c7ce94f364d3dadd9f877728cb5191399421df1c26add2345cbc56fbfcb7caf56290269cd0860c1649653333ed4a98a94412039e62bb1ce8f03a05b2bb820acbbf1fe8ef045d302fc7ab6ac313b51f01f65c37169455d377"}}]}) socket$nl_rdma(0x10, 0x3, 0x14) 755.84098ms ago: executing program 2 (id=467): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210000000122f8040905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000080)="f732fdf485937841b81da8eae4acffa59fae3653f4811c5f27815db0b99fdfd93762a4dd1fffba0f39e914796bb55f8c00919b67f178c5cb729c9d97d2a8654097ad24393a97c8085f46be59833102b10b381a384d8fd503130b8428e558ead9c7bb808e8e6c9876d3726f942f0b69dcba6d1e43014efcc3a34b43da19051e17de272c69b2e4a7f3e0748ddef5f1fcd5b7db85d97df574", 0x97}, {&(0x7f0000000200)="17627d584f1c80eef12401d739a9e39b692e584688de58d81fb84d6bcf1ca9236568803bcfed92487a0f2e1fb16994c9adb0795a0ebcfc2e5169891e8fd57a2d2851734be138201fdcedbceecdf362c796fc70c7ef4b45d4d9364ee492f60d5c8cc15bdc0edff8d7168749142cc7af75ef16a7ebff4f2014044e10fc4e9d15d06a1f0531cc062a43004da91bfa6500a027f288c9de183066257e0178cc6e532b433b94602af62622077a8d8906f1769d9bb0d7553dac7a64229c0b59c05dc93337012f8fb18c633d9e381eeb596fa6ee6cc9d1515f55879380ee123010acde6bdcda2afa4a140aca2941", 0xea}, {&(0x7f0000000380)="a3421615a555df7914432880223c1b10f3fbc8e7835f4166436eb44531a11746b54baa87e8d03f6f9267b87e8d21fca80edd1ed2e7416f3504cf91323d868463da4031bbb7ed9355f2ada241c19edbef680f28550cb90bc4c858bbedc34c0bb735cb4ddea9e208bc4814b753c8c94e6a143b5895494eee0c5981f76dab577fbe3a68b5c701e4c7daa834ea0f8a5d037262e4d2d14b7f53647f86481a96575bb55dd49cd4bacaff062175e0419d8c065ea704409bbf6cb80d92ae527e7d8515ed666dbe1a15cebb9409", 0xc9}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000140)="92683ed5d38423bbcf2667001d4885e6bd2629d803b7ce2419f5a9102cded54c92bf5c5f33547f1e", 0x28}, {&(0x7f0000000180)="25c09ed65e87e559033c2e1c", 0xc}, {&(0x7f0000001500)="770227e962e6be55c1cc8273fdf28fe645f14299fa471edd06c042de436f7f4ceff529eb53e2d22371cf57a78374f528c7cbd87d12398b4f1d5295f1216922ca41a5525613d55b7169c99cf82bbaf75f066ba184410a6871ea93c83e23f8daf72d9e5955fdd64ebcf4eb764c83ca1728a3af76732fa3dc19258714c13f4e1e7df55c65cacae913943001ee4f6314fc57dddebfb6a84784", 0x97}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="c3e7df3eaa0cf9eceebd887490af261c6307a4dcb8959638232dde5e3db69442bce5fa1d946c47348e5885e3dd5b1ceb7399b6b42c2007aa25b9802c8fc58455848a9d7618a98ee5c3a5dd3418f127f6da9db2cd42eed59334413e6f672a0602e52e8037e83250e799d8e129469da02bd84e8232f2c5b3281c14a528e9474144f3ab51f6a14069649fe2d64bb7e0618c765fe72c6a90547cecd4cc2bb21fe99eb3133bbcdb71d55c0b84e6e8fccf43c8bec590a00f35fcd829fc639a76675b29830ecc95c804cfe697d13fabf5c9ff9bcea5c37be2ba3c66", 0xd8}, {&(0x7f00000026c0)="b5a784836101ea605bec49a7d0549dee5b1508ad2e7df27e3cb6069f3db2c010534bd16e10c7f8a188bb10376ce83d66119aad82c6583150d630361b9449a0e1ecefe0bcb4a52ef0d6e3f6", 0x4b}], 0xa, &(0x7f0000002800)=[@iv={0xd0, 0x117, 0x2, 0xb8, "8c5786289de3e31e3e2e011cbfea2761fdf2d1f3c926c9472e37970d58f0d275db6691081f1f478ccd511e249f89c4fd36d1a6773da08f2c2704ea9fe8fef9c456f725e0a7f98897fe24ad8635a24a70f9fe302e7e2080306b9d6d8c0de1f61c48891dd4eae2f1b250630da040f3c965ba569e4659666c2e59ef9d678ef664be78865822e128d85eeb2b06ce11f50c2a471681453198c20a52f6adfb31be93958ec62b3888e54dee0083f60e2c570d2ad3189d6f25d41b3a"}, @op={0x18, 0x117, 0x3, 0xfd2091484c6210bc}, @assoc={0x18, 0x117, 0x4, 0x54}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6ec3}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}], 0x260, 0x8800}, 0x4008000) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa2d, 0x18, 0xfa00, {0x100400000000000, 0x0}}, 0x20) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x40840, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000002a80)={"62764911e6b49e72d7ed4a8a8f9107084b8a6c309317a54e2e56f91f61165040", r3}) 155.927394ms ago: executing program 0 (id=468): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x21c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "8dd37291b6cab868f69bd24ed100a7c21426fb7ff343133ff4159173819b0931dacfba19526fd270f202056fb102ff8ca2b17216e32aade2a325cf7e292dac5ffe24b2a130057d88c253fbe2d292eaaa630dcbdc8662a30ec668fb156e06c1d898b555453d88dbf88b7c2f4493c31133ababe218407381c61339e539bac6946c05b7be3f452e4d52eb2453d08647d83b9563d8064ed05cc23455f4e437872793e2146a096daaaf389527a6147c83591011f5a4dd32c43d61a66437127e5f7a1c7732802d750573596233aa1d4fcbd206640ca05e136d7e75db6d0c8706844bf077516d55125e004b6b9d6d2730beddd783d1ed9bfbf5da79c9e0b36d7099de12"}, @TCA_CHOKE_STAB={0x104, 0x2, "f6d7252825a5c87dc6a0b88eec6b7816d476145995889524742eb365ea459c3e286982afc8bb90cdeff96bfd37f4dc3cd8d7d39cfbaaa5d7e1039588f7d1a2b1fcd085b7153e9df673d6b340d500ccbb73e6e6d7c580b24aa09e72882daca248d04e2204b4bcee439d73cb82a5bb33f2f23df4b073552bee926f277c01b396ab6a73055f11edff464b89cf4efbc51e6b804eb41a0fa54e4b54adc4f68493fdab4005ce3619b111611ba2daa3506a4d648273d9b3bb234237fbe10c5ed4caf962d2659c934999ccc62dc2da44a2fff3ce4c5d32884e6a55064b4a46dd12176c141b00b071b73614180954750c3dfadf11b98fe6a04b6f11520c5946651770bca6"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x24c}}, 0x20000805) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x9) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200110"], 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000b, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=469): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015200200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000050000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) kernel console output (not intermixed with test programs): xe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6838e929 code=0x7ffc0000 [ 129.255194][ T5907] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 129.261335][ T30] audit: type=1326 audit(1749904996.267:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ffb6838e929 code=0x7ffc0000 [ 129.265271][ T5927] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 129.324201][ T30] audit: type=1326 audit(1749904996.267:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.2.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6838e929 code=0x7ffc0000 [ 129.336701][ T5927] usb 2-1: USB disconnect, device number 7 [ 129.455066][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 129.466727][ T5907] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 129.477519][ T5907] usb 1-1: config 0 has no interface number 0 [ 129.486882][ T5907] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 129.503411][ T5907] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 129.514334][ T5907] usb 1-1: config 0 interface 126 has no altsetting 0 [ 129.532141][ T5907] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 129.542569][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.555745][ T5907] usb 1-1: Product: syz [ 129.559991][ T5907] usb 1-1: Manufacturer: syz [ 129.574332][ T5907] usb 1-1: SerialNumber: syz [ 129.595634][ T5907] usb 1-1: config 0 descriptor?? [ 129.601459][ T6433] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.611737][ T6433] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 129.626104][ T5928] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.645114][ T6446] macvlan0: entered promiscuous mode [ 129.660650][ T6446] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 129.672614][ T6446] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 129.715794][ T6445] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 129.723609][ T6445] netlink: 'syz.2.141': attribute type 2 has an invalid length. [ 129.775121][ T5928] usb 5-1: device descriptor read/64, error -71 [ 129.860039][ T6453] netlink: 52 bytes leftover after parsing attributes in process `syz.1.143'. [ 130.025132][ T5928] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.045113][ T5906] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 130.094112][ T6463] x_tables: unsorted underflow at hook 2 [ 130.175386][ T5928] usb 5-1: device descriptor read/64, error -71 [ 130.205118][ T5906] usb 4-1: device descriptor read/64, error -71 [ 130.285690][ T5928] usb usb5-port1: attempt power cycle [ 130.375166][ T5926] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 130.459204][ T5906] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 130.605225][ T5906] usb 4-1: device descriptor read/64, error -71 [ 130.636875][ T5928] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 130.680883][ T5928] usb 5-1: device descriptor read/8, error -71 [ 130.725423][ T5906] usb usb4-port1: attempt power cycle [ 131.225103][ T5928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 131.255061][ T5976] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.346123][ T5906] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 131.357318][ T5928] usb 5-1: device descriptor read/8, error -71 [ 131.366143][ T5906] usb 4-1: device descriptor read/8, error -71 [ 131.465840][ T5928] usb usb5-port1: unable to enumerate USB device [ 131.502739][ T5976] usb 3-1: config 0 has no interfaces? [ 131.514238][ T5976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.523748][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.535857][ T5976] usb 3-1: Product: syz [ 131.540151][ T5976] usb 3-1: Manufacturer: syz [ 131.544854][ T5976] usb 3-1: SerialNumber: syz [ 131.559199][ T5976] usb 3-1: config 0 descriptor?? [ 131.635368][ T5906] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 131.685910][ T5906] usb 4-1: device descriptor read/8, error -71 [ 131.796445][ T5906] usb usb4-port1: unable to enumerate USB device [ 131.917823][ T5907] ir_usb 1-1:0.126: IR Dongle converter detected [ 131.944892][ T5907] usb 1-1: IRDA class descriptor not found, device not bound [ 131.994212][ T5907] usb 1-1: USB disconnect, device number 18 [ 132.640610][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.650298][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.899664][ T5907] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.935200][ T5906] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 133.091013][ T5906] usb 1-1: not running at top speed; connect to a high speed hub [ 133.101268][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0 [ 133.112585][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 133.151374][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.182360][ T5907] usb 5-1: config 0 has no interfaces? [ 133.200191][ T5907] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.211925][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.228511][ T5907] usb 5-1: Product: syz [ 133.234925][ T5906] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 133.275547][ T5907] usb 5-1: Manufacturer: syz [ 133.286031][ T5907] usb 5-1: SerialNumber: syz [ 133.309448][ T5907] usb 5-1: config 0 descriptor?? [ 133.314956][ T5906] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 133.364610][ T5906] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 133.559726][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.576632][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.612053][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.623964][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.703645][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 133.915814][ T5926] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.985186][ T6472] delete_channel: no stack [ 134.031339][ T5976] usb 3-1: USB disconnect, device number 9 [ 134.115121][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 134.191861][ T5926] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.209610][ T5926] usb 2-1: config 179 has no interface number 0 [ 134.259814][ T5906] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 134.286079][ T5926] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 134.337705][ T5926] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 134.356925][ T5906] usb 1-1: USB disconnect, device number 19 [ 134.387170][ T5926] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 134.399694][ T5906] usblp0: removed [ 134.446910][ T5926] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 134.532659][ T5926] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.603160][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 134.620138][ T5926] usb 2-1: config 179 interface 65 has no altsetting 0 [ 134.639646][ T5926] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 134.700991][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.770636][ T5926] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 134.829053][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.845561][ T5189] input input11: unable to receive magic message: -110 [ 134.853872][ T5189] input input11: unable to receive magic message: -32 [ 134.885113][ T5189] input input11: unable to receive magic message: -32 [ 134.902728][ T5189] input input11: unable to receive magic message: -32 [ 134.912016][ T980] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 134.933018][ T5189] input input11: unable to receive magic message: -32 [ 134.966799][ T6492] netlink: 'syz.1.153': attribute type 1 has an invalid length. [ 134.987325][ T5189] input input11: unable to receive magic message: -32 [ 134.996058][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 135.001760][ T5189] input input11: unable to receive magic message: -32 [ 135.010553][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.021575][ T9] usb 3-1: config 0 has no interfaces? [ 135.038786][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.048459][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.062109][ T9] usb 3-1: Product: syz [ 135.082177][ T980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.091204][ T9] usb 3-1: Manufacturer: syz [ 135.100893][ T980] usb 4-1: not running at top speed; connect to a high speed hub [ 135.113148][ T9] usb 3-1: SerialNumber: syz [ 135.126229][ T980] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 135.145162][ T9] usb 3-1: config 0 descriptor?? [ 135.152395][ T980] usb 4-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.177933][ T5976] usb 2-1: USB disconnect, device number 9 [ 135.177960][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.196816][ T5976] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.215053][ T980] usb 4-1: config 1 interface 0 has no altsetting 0 [ 135.242546][ T980] usb 4-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 135.255137][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.278185][ T980] usb 4-1: Product: syz [ 135.282411][ T980] usb 4-1: Manufacturer: syz [ 135.299415][ T980] usb 4-1: SerialNumber: syz [ 135.318851][ T6515] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 135.567343][ T980] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12 [ 135.611115][ T5189] bcm5974 4-1:1.0: could not read from device [ 135.633554][ T5189] bcm5974 4-1:1.0: could not read from device [ 135.644130][ T980] usb 4-1: USB disconnect, device number 19 [ 135.667301][ T5189] bcm5974 4-1:1.0: could not read from device [ 135.955590][ T980] usb 5-1: USB disconnect, device number 16 [ 136.089664][ T6534] netlink: 14 bytes leftover after parsing attributes in process `syz.4.164'. [ 136.835178][ T5907] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 136.951755][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 136.995490][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 137.013311][ T5907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 137.031410][ T6561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'. [ 137.037919][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.060887][ T5907] usb 5-1: Product: syz [ 137.065607][ T5907] usb 5-1: Manufacturer: syz [ 137.070351][ T5907] usb 5-1: SerialNumber: syz [ 137.078037][ T5907] usb 5-1: config 0 descriptor?? [ 137.285071][ T980] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 137.288872][ T5907] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.406765][ T9] usb 3-1: USB disconnect, device number 10 [ 137.447236][ T980] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 137.472214][ T980] usb 1-1: config 0 has no interface number 0 [ 137.490666][ T980] usb 1-1: too many endpoints for config 0 interface 96 altsetting 239: 101, using maximum allowed: 30 [ 137.502621][ T980] usb 1-1: config 0 interface 96 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 137.516358][ T5976] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 137.529942][ T980] usb 1-1: config 0 interface 96 has no altsetting 0 [ 137.537492][ T980] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.548481][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.559153][ T980] usb 1-1: config 0 descriptor?? [ 137.685144][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 137.703837][ T5976] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 137.713343][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.723212][ T5976] usb 2-1: Product: syz [ 137.731538][ T5976] usb 2-1: Manufacturer: syz [ 137.737131][ T5976] usb 2-1: SerialNumber: syz [ 137.763165][ T5976] usb 2-1: config 0 descriptor?? [ 137.784582][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.786313][ T5976] gspca_main: sq930x-2.14.0 probing 2770:930c [ 137.799831][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.812700][ T980] usb 1-1: string descriptor 0 read error: -71 [ 137.829429][ T980] cp210x 1-1:0.96: cp210x converter detected [ 137.842851][ T980] cp210x 1-1:0.96: failed to get vendor val 0x370b size 1: -71 [ 137.852605][ T980] cp210x 1-1:0.96: querying part number failed [ 137.872466][ T980] usb 1-1: cp210x converter now attached to ttyUSB0 [ 137.885832][ T5926] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 137.902682][ T980] usb 1-1: USB disconnect, device number 20 [ 137.934500][ T6545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.945780][ T6545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.961342][ T5907] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 137.980440][ T980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.989760][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.991156][ T5907] usb 5-1: USB disconnect, device number 17 [ 138.004718][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.046521][ T980] cp210x 1-1:0.96: device disconnected [ 138.065667][ T5926] usb 3-1: device descriptor read/64, error -71 [ 138.217455][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.229758][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.246966][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.257187][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.305407][ T5926] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.445083][ T5926] usb 3-1: device descriptor read/64, error -71 [ 138.465549][ T5976] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 138.505298][ T980] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 138.556388][ T5926] usb usb3-port1: attempt power cycle [ 138.665103][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 138.680663][ T980] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 138.689308][ T5976] gspca_sq930x: Sensor ov9630 not yet treated [ 138.696704][ T5976] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 138.704491][ T980] usb 4-1: config 0 has no interface number 0 [ 138.715527][ T980] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 138.730053][ T980] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 138.741795][ T5976] usb 2-1: USB disconnect, device number 10 [ 138.758956][ T980] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 138.781765][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.792069][ T980] usb 4-1: Product: syz [ 138.796899][ T980] usb 4-1: Manufacturer: syz [ 138.804270][ T980] usb 4-1: SerialNumber: syz [ 138.811775][ T980] usb 4-1: config 0 descriptor?? [ 138.818254][ T6578] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 138.827055][ T6578] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 138.836095][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 138.863893][ T980] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4e:68:8e:08:3a:db [ 138.907976][ T5926] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.935551][ T5926] usb 3-1: device descriptor read/8, error -71 [ 139.005255][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 139.022945][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.048186][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.073392][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 139.085101][ T5928] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 139.112553][ T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 139.128318][ T9] usb 5-1: Product: syz [ 139.145843][ T9] usb 5-1: Manufacturer: syz [ 139.150477][ T9] usb 5-1: SerialNumber: syz [ 139.205236][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.220033][ T9] appletouch 5-1:1.0: Could not find int-in endpoint [ 139.233387][ T5926] usb 3-1: device descriptor read/8, error -71 [ 139.244302][ T9] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 139.255166][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 139.265750][ T9] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 139.276986][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.301488][ T5928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.341219][ T5928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.359959][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.375735][ T5926] usb usb3-port1: unable to enumerate USB device [ 139.393256][ T5928] usb 1-1: Product: syz [ 139.398872][ T5928] usb 1-1: Manufacturer: syz [ 139.406440][ T5928] usb 1-1: SerialNumber: syz [ 139.632520][ T5928] usb 1-1: 0:2 : does not exist [ 139.659802][ T5928] usb 1-1: USB disconnect, device number 21 [ 139.738721][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.225450][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 140.626717][ T5976] usb 4-1: USB disconnect, device number 20 [ 140.658800][ T6629] x_tables: duplicate underflow at hook 1 [ 140.672370][ T5976] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 141.109839][ T6638] syzkaller1: entered promiscuous mode [ 141.147163][ T6638] syzkaller1: entered allmulticast mode [ 141.194914][ T6644] fuse: Bad value for 'rootmode' [ 141.911211][ T5907] usb 5-1: USB disconnect, device number 18 [ 142.095043][ T5928] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 142.329054][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 142.355582][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.362286][ T5928] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 142.392079][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.443596][ T5928] usb 4-1: config 0 descriptor?? [ 142.453864][ T6679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.461510][ T6679] IPv6: NLM_F_CREATE should be set when creating new route [ 142.609657][ T6682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.673335][ T6679] netlink: 72 bytes leftover after parsing attributes in process `syz.4.196'. [ 142.746667][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 142.757546][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.872845][ T6679] netlink: 72 bytes leftover after parsing attributes in process `syz.4.196'. [ 142.909872][ T6679] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 142.925059][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 142.936198][ T6685] veth1_to_hsr: entered allmulticast mode [ 142.943659][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 142.962077][ T9] usb 3-1: config 0 has no interface number 0 [ 142.972883][ T6685] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 142.999077][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 143.045032][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 143.125060][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 143.154891][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 143.173644][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.195020][ T9] usb 3-1: Product: syz [ 143.212144][ T9] usb 3-1: Manufacturer: syz [ 143.239178][ T9] usb 3-1: SerialNumber: syz [ 143.290472][ T9] usb 3-1: config 0 descriptor?? [ 143.298179][ T5928] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 143.322569][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.347470][ T5928] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 143.364087][ T5928] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 143.365398][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.410467][ T6691] x_tables: duplicate underflow at hook 1 [ 143.428497][ T5928] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 143.465435][ T5928] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 143.548198][ T5928] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 143.675510][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.715237][ T6680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.011223][ T5928] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -110 [ 144.082361][ T5928] usb 4-1: USB disconnect, device number 21 [ 144.444538][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 144.655112][ T5926] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.835112][ T5926] usb 4-1: device descriptor read/64, error -71 [ 145.086541][ T5926] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 145.163996][ T6711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.204'. [ 145.265118][ T5926] usb 4-1: device descriptor read/64, error -71 [ 145.385471][ T5926] usb usb4-port1: attempt power cycle [ 145.735115][ T5926] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 145.785839][ T5926] usb 4-1: device descriptor read/8, error -71 [ 145.813199][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 145.824333][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 145.843257][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 145.855185][ T5928] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 145.863999][ T9] usb 3-1: USB disconnect, device number 15 [ 146.025099][ T5926] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 146.059315][ T5926] usb 4-1: device descriptor read/8, error -71 [ 146.135224][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 146.150759][ T6729] FAULT_INJECTION: forcing a failure. [ 146.150759][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 146.165984][ T6729] CPU: 1 UID: 0 PID: 6729 Comm: syz.0.207 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 146.166013][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.166024][ T6729] Call Trace: [ 146.166031][ T6729] [ 146.166039][ T6729] dump_stack_lvl+0x189/0x250 [ 146.166075][ T6729] ? __pfx____ratelimit+0x10/0x10 [ 146.166104][ T6729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.166133][ T6729] ? __pfx__printk+0x10/0x10 [ 146.166165][ T6729] ? __pfx___might_resched+0x10/0x10 [ 146.166193][ T6729] ? fs_reclaim_acquire+0x7d/0x100 [ 146.166219][ T6729] should_fail_ex+0x414/0x560 [ 146.166249][ T6729] should_failslab+0xa8/0x100 [ 146.166270][ T6729] __kmalloc_noprof+0xcb/0x4f0 [ 146.166285][ T6729] ? kfree+0x4d/0x440 [ 146.166310][ T6729] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.166336][ T6729] tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.166359][ T6729] ? tomoyo_domain+0xd9/0x130 [ 146.166384][ T6729] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.166401][ T6729] tomoyo_path_number_perm+0x1e8/0x5a0 [ 146.166420][ T6729] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.166449][ T6729] ? __lock_acquire+0xab9/0xd20 [ 146.166501][ T6729] ? __fget_files+0x2a/0x420 [ 146.166521][ T6729] ? __fget_files+0x2a/0x420 [ 146.166537][ T6729] ? __fget_files+0x3a0/0x420 [ 146.166552][ T6729] ? __fget_files+0x2a/0x420 [ 146.166572][ T6729] security_file_ioctl+0xcb/0x2d0 [ 146.166591][ T6729] __se_sys_ioctl+0x47/0x170 [ 146.166616][ T6729] do_syscall_64+0xfa/0x3b0 [ 146.166630][ T6729] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.166653][ T6729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.166668][ T6729] ? clear_bhb_loop+0x60/0xb0 [ 146.166686][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.166701][ T6729] RIP: 0033:0x7fc67778e929 [ 146.166714][ T6729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.166727][ T6729] RSP: 002b:00007fc678612038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.166743][ T6729] RAX: ffffffffffffffda RBX: 00007fc6779b6160 RCX: 00007fc67778e929 [ 146.166754][ T6729] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000010 [ 146.166763][ T6729] RBP: 00007fc678612090 R08: 0000000000000000 R09: 0000000000000000 [ 146.166773][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.166781][ T6729] R13: 0000000000000000 R14: 00007fc6779b6160 R15: 00007fc677adfa28 [ 146.166814][ T6729] [ 146.166876][ T6729] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.436662][ T5926] usb usb4-port1: unable to enumerate USB device [ 146.443286][ T6729] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 146.845221][ T5926] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 147.042361][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 147.151543][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.224126][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.251253][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.308434][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.350645][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.408582][ T5926] usb 5-1: config 0 descriptor?? [ 147.418455][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 147.427986][ T5926] hub 5-1:0.0: USB hub found [ 147.456258][ T5928] usb 1-1: can't read configurations, error -71 [ 147.485292][ T5907] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 147.511805][ C1] raw-gadget.3 gadget.2: ignoring, device is not running [ 147.668599][ T5907] usb 3-1: device descriptor read/64, error -32 [ 147.694727][ T6738] tipc: Started in network mode [ 147.724584][ T6738] tipc: Node identity 0000000000000000000000625f953d01, cluster identity 4711 [ 147.758417][ T6738] tipc: Enabling of bearer rejected, failed to enable media [ 147.854182][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 147.941638][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.975348][ T5907] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 147.994502][ T6759] vivid-000: disconnect [ 148.015539][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.034909][ T6759] vivid-000: reconnect [ 148.122799][ T5926] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 148.171658][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 148.195867][ T5927] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 148.247102][ T5907] usb 3-1: config 0 has no interfaces? [ 148.252740][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.301497][ T5907] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 148.337803][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.357256][ T5926] usb 5-1: USB disconnect, device number 19 [ 148.405507][ T5907] usb 3-1: Product: syz [ 148.409754][ T5907] usb 3-1: Manufacturer: syz [ 148.497155][ T5927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.532680][ T5907] usb 3-1: SerialNumber: syz [ 148.561524][ T5927] usb 4-1: config 6 has an invalid interface number: 144 but max is 0 [ 148.599198][ T5907] usb 3-1: config 0 descriptor?? [ 148.621262][ T5927] usb 4-1: config 6 has no interface number 0 [ 148.660659][ T5927] usb 4-1: config 6 interface 144 altsetting 1 endpoint 0x3 has an invalid bInterval 113, changing to 10 [ 148.700398][ T5927] usb 4-1: config 6 interface 144 has no altsetting 0 [ 148.809523][ T5927] usb 4-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2 [ 148.818852][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.849959][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.861205][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.892768][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.903503][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.943036][ T5927] usb 4-1: Product: syz [ 148.963561][ T5927] usb 4-1: Manufacturer: syz [ 148.973010][ T5927] usb 4-1: SerialNumber: syz [ 149.465339][ T5907] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 149.645255][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 149.666304][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.675426][ T5907] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 149.703599][ T5907] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 149.711645][ T5907] usb 1-1: can't read configurations, error -61 [ 149.855564][ T5907] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 150.075836][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 150.134247][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.142097][ T5926] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 150.154901][ T5907] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 150.224779][ T5907] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 150.233539][ T5907] usb 1-1: can't read configurations, error -61 [ 150.240283][ T5907] usb usb1-port1: attempt power cycle [ 150.306701][ T5926] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 150.319771][ T5926] usb 2-1: config 0 has no interface number 0 [ 150.330787][ T5926] usb 2-1: config 0 interface 29 has no altsetting 0 [ 150.353888][ T5926] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 150.368760][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.379545][ T5926] usb 2-1: Product: syz [ 150.383723][ T5926] usb 2-1: Manufacturer: syz [ 150.417648][ T5926] usb 2-1: SerialNumber: syz [ 150.439906][ T5926] usb 2-1: config 0 descriptor?? [ 150.605622][ T5907] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 150.662606][ T5926] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 150.679435][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 150.815233][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.141793][ T5907] usb 1-1: too many configurations: 155, using maximum allowed: 8 [ 151.180225][ T5926] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 151.446438][ T5926] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 151.543679][ T5907] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 151.545308][ T9] usb 3-1: USB disconnect, device number 17 [ 151.555074][ T5926] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 151.602930][ T5907] usb 1-1: can't read configurations, error -61 [ 151.935222][ T5907] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 151.957483][ T5926] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -22 [ 151.985103][ T5926] usb 2-1: USB disconnect, device number 11 [ 152.027177][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.062180][ T5927] usb 4-1: MIDIStreaming interface descriptor not found [ 152.126140][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 152.268531][ T5927] usb 4-1: USB disconnect, device number 26 [ 152.406183][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.452053][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.144/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.519240][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.611442][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.618764][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 152.651974][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.691900][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.729834][ T9] usb 3-1: SerialNumber: syz [ 152.755757][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.086542][ T9] usb 3-1: 0:2 : does not exist [ 153.142892][ T9] usb 3-1: unit 5: unexpected type 0x0a [ 153.163739][ T5907] usb 1-1: device descriptor read/8, error -71 [ 153.286042][ T9] usb 3-1: USB disconnect, device number 18 [ 153.288572][ T5907] usb usb1-port1: unable to enumerate USB device [ 153.458186][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.635328][ T5907] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 153.745696][ T5906] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.753361][ T5927] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 153.886708][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.971144][ T9] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 153.995057][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 154.002822][ T5906] usb 2-1: config 0 has no interfaces? [ 154.010217][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.040957][ T5907] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 154.060127][ T5927] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 154.068742][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.077986][ T5927] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 154.098197][ T5906] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.134314][ T5907] usb 1-1: config 0 descriptor?? [ 154.139568][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.151067][ T9] usb 5-1: string descriptor 0 read error: -22 [ 154.157844][ T5927] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 154.180321][ T5906] usb 2-1: Product: syz [ 154.184599][ T5906] usb 2-1: Manufacturer: syz [ 154.189444][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 154.237792][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.257721][ T5906] usb 2-1: SerialNumber: syz [ 154.266669][ T5927] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 154.283690][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.291516][ T5906] usb 2-1: config 0 descriptor?? [ 154.317445][ T5927] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 154.335064][ T5927] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 154.344191][ T5927] usb 4-1: Product: syz [ 154.352277][ T5927] usb 4-1: Manufacturer: syz [ 154.358774][ T5927] usb 4-1: SerialNumber: syz [ 154.378914][ T9] usb 5-1: config 0 descriptor?? [ 154.394351][ T5927] usb 4-1: config 0 descriptor?? [ 154.403931][ T5927] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.424204][ T5927] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.444801][ T9] usbtest 5-1:0.0: FX2 device [ 154.504047][ T9] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 154.639985][ T5907] lenovo 0003:17EF:60EE.0004: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 154.687273][ T9] usb 5-1: USB disconnect, device number 20 [ 154.802945][ T5907] usb 1-1: USB disconnect, device number 28 [ 154.881975][ T5906] usb 4-1: USB disconnect, device number 27 [ 154.891415][ T6821] fido_id[6821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.913612][ T5906] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 155.205189][ T5976] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 155.365177][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 155.389534][ T5976] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 155.417825][ T5976] usb 3-1: config 0 has no interface number 0 [ 155.504276][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 155.570418][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 155.685195][ T5976] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.812721][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.831332][ T5976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 155.840729][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.861296][ T5976] usb 3-1: config 0 descriptor?? [ 155.879262][ T5976] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 155.925116][ T5906] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 155.955298][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 155.981583][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 155.982429][ T30] audit: type=1400 audit(1749905023.027:158): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=6834 comm="syz.0.240" [ 156.131753][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 156.169676][ T5906] usb 5-1: config 0 has no interfaces? [ 156.179724][ T5906] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.192747][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 156.204712][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.254580][ T5906] usb 5-1: Product: syz [ 156.264491][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.283810][ T5928] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 156.301715][ T5906] usb 5-1: Manufacturer: syz [ 156.321080][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.466031][ T5927] usb 2-1: USB disconnect, device number 12 [ 156.507353][ T5906] usb 5-1: SerialNumber: syz [ 156.521593][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.561939][ T5906] usb 5-1: config 0 descriptor?? [ 156.760834][ T9] usb 3-1: USB disconnect, device number 19 [ 156.775563][ T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 156.849099][ T5928] usb 4-1: config 0 descriptor?? [ 156.955129][ T5976] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 157.039114][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.051237][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.065864][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.105034][ T5976] usb 2-1: Using ep0 maxpacket: 16 [ 157.115811][ T5976] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 157.124228][ T5976] usb 2-1: config 0 has no interface number 0 [ 157.130658][ T5976] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 157.145391][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.161068][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.180061][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.195135][ T5976] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.245096][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.284961][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.334788][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.365655][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.385930][ T5976] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 157.407944][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.425788][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.494893][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.536351][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.573272][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.637441][ T5928] ath6kl: Failed to submit usb control message: -71 [ 157.650948][ T5976] usb 2-1: Product: syz [ 157.663389][ T5928] ath6kl: unable to send the bmi data to the device: -71 [ 157.678379][ T5928] ath6kl: Unable to send get target info: -71 [ 157.705987][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 157.722665][ T5928] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 157.754172][ T5976] usb 2-1: Manufacturer: syz [ 157.774807][ T5928] usb 4-1: USB disconnect, device number 28 [ 157.783183][ T5976] usb 2-1: SerialNumber: syz [ 157.800369][ T5976] usb 2-1: config 0 descriptor?? [ 157.810768][ T6841] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 158.052308][ T5976] usb 2-1: USB disconnect, device number 13 [ 158.158249][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 158.185272][ T5926] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 158.305771][ T9] usb 1-1: device descriptor read/64, error -71 [ 158.410612][ T5926] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 158.428026][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.538768][ T5926] usb 3-1: config 0 has no interface number 0 [ 158.545325][ T5926] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.555416][ T5926] usb 3-1: config 0 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 158.570994][ T5926] usb 3-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice= 2.38 [ 158.580573][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.585217][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 158.597499][ T5926] usb 3-1: Product: syz [ 158.601837][ T5926] usb 3-1: Manufacturer: syz [ 158.606957][ T5926] usb 3-1: SerialNumber: syz [ 158.623993][ T5926] usb 3-1: config 0 descriptor?? [ 158.653144][ T5926] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 158.664842][ T5926] dw2102: su3000_power_ctrl: 1, initialized 0 [ 158.671570][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 158.713150][ T5926] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 158.728403][ T9] usb 1-1: device descriptor read/64, error -71 [ 158.729759][ T5926] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 158.858869][ T9] usb usb1-port1: attempt power cycle [ 158.863095][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.242'. [ 159.148927][ T6873] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.169838][ T6873] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 159.215104][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 159.245744][ T9] usb 1-1: device descriptor read/8, error -71 [ 159.485102][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 159.505833][ T9] usb 1-1: device descriptor read/8, error -71 [ 159.576075][ T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 159.581507][ T5928] usb 5-1: USB disconnect, device number 21 [ 159.615400][ T9] usb usb1-port1: unable to enumerate USB device [ 159.744549][ T980] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.760431][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.768897][ T980] usb 2-1: Product: syz [ 159.773218][ T980] usb 2-1: Manufacturer: syz [ 159.778189][ T980] usb 2-1: SerialNumber: syz [ 159.803916][ T980] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.833276][ T5976] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 160.025154][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 160.197471][ T9] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 160.213874][ T9] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.234184][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.241831][ T9] usb 4-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 160.251652][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.260947][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.270280][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.331564][ T9] usb 4-1: config 0 descriptor?? [ 160.616525][ T10] usb 3-1: USB disconnect, device number 20 [ 160.683833][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.757619][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.866878][ T9] pantherlord 0003:0810:0002.0005: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.3-1/input0 [ 161.031024][ T6883] netlink: 'syz.3.252': attribute type 1 has an invalid length. [ 161.106620][ T9] pantherlord 0003:0810:0002.0005: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 161.188941][ T9] usb 4-1: USB disconnect, device number 29 [ 161.375214][ T5926] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 161.445267][ T5927] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 161.535236][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 161.555514][ T5976] usb 2-1: Service connection timeout for: 256 [ 161.556336][ T5926] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 161.577203][ T5926] usb 3-1: config 0 has no interface number 0 [ 161.582294][ T5976] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 161.583439][ T5926] usb 3-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 161.583483][ T5926] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 161.640523][ T5976] ath9k_htc: Failed to initialize the device [ 161.655508][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 161.691350][ T5976] usb 2-1: ath9k_htc: USB layer deinitialized [ 161.708660][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.729792][ T5926] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 161.745310][ T5927] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 161.771916][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.788659][ T5926] usb 3-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 161.801039][ T9] usb 2-1: USB disconnect, device number 14 [ 161.807899][ T5927] usb 1-1: Product: syz [ 161.830518][ T5927] usb 1-1: Manufacturer: syz [ 161.836274][ T5927] usb 1-1: SerialNumber: syz [ 161.840987][ T5926] usb 3-1: config 0 interface 41 has no altsetting 0 [ 161.853568][ T5926] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 161.870846][ T5927] usb 1-1: config 0 descriptor?? [ 161.889407][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.906904][ T5927] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.913524][ T5927] hub 1-1:0.0: probe with driver hub failed with error -5 [ 161.920879][ T5926] usb 3-1: Product: syz [ 161.927891][ T5926] usb 3-1: Manufacturer: syz [ 161.939156][ T5926] usb 3-1: SerialNumber: syz [ 161.945254][ T5927] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 161.959072][ T5926] usb 3-1: config 0 descriptor?? [ 161.967201][ T6900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.974499][ T6900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.085583][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 162.114059][ T6902] ======================================================= [ 162.114059][ T6902] WARNING: The mand mount option has been deprecated and [ 162.114059][ T6902] and is ignored by this kernel. Remove the mand [ 162.114059][ T6902] option from the mount to silence this warning. [ 162.114059][ T6902] ======================================================= [ 162.154092][ T6902] fuse: Bad value for 'fd' [ 162.217711][ T6900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.237475][ T6900] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.246442][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 162.264573][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.278140][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.289360][ T5928] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 162.310186][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.333376][ T5928] usb 4-1: config 0 descriptor?? [ 162.510194][ T6918] netlink: 'syz.1.264': attribute type 21 has an invalid length. [ 162.673823][ T6921] Cannot find del_set index 2 as target [ 162.786556][ T5928] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 162.874903][ T5926] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 162.969236][ T5928] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 163.076031][ T5926] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 163.123140][ T5926] usb 3-1: USB disconnect, device number 21 [ 163.188591][ T5928] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 163.275115][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 163.392776][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.422939][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.501056][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.520231][ T5928] ft260 0003:0403:6030.0006: failed to retrieve status: -71, no wakeup [ 163.561506][ T5928] ft260 0003:0403:6030.0006: failed to retrieve status: -71 [ 163.611436][ T5928] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 163.645841][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 163.650827][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 163.687792][ T5928] usb 4-1: USB disconnect, device number 30 [ 163.826131][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.272'. [ 163.856127][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 163.865743][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 163.873760][ T10] usb 5-1: SerialNumber: syz [ 163.943375][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 164.087182][ T10] usb-storage 5-1:1.0: USB Mass Storage device detected [ 164.192004][ T10] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 164.213666][ T5928] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 164.252968][ T6962] binder: 6959:6962 ioctl 4018620d 0 returned -22 [ 164.324296][ T10] scsi host1: usb-storage 5-1:1.0 [ 164.334577][ T6965] binder: 6959:6965 ioctl c018620c 0 returned -14 [ 164.415114][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.477712][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.548893][ T5928] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.714952][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.753370][ T5928] usb 4-1: config 0 descriptor?? [ 164.837678][ T5189] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 164.985597][ T5189] usb 1-1: device descriptor read/64, error -71 [ 165.215199][ T5928] usb 4-1: string descriptor 0 read error: -71 [ 165.231634][ T5928] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 165.361508][ T5928] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 165.455084][ T5189] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 165.486703][ T5928] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 165.587582][ T5928] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 165.771233][ T5928] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 165.786544][ T5189] usb 1-1: device descriptor read/64, error -71 [ 165.857377][ T5928] usb 4-1: USB disconnect, device number 31 [ 166.055129][ T5189] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 166.200488][ T5189] usb 1-1: device descriptor read/8, error -71 [ 166.476319][ T5189] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 166.566472][ T5189] usb 1-1: device descriptor read/8, error -71 [ 166.697815][ T9] usb 1-1: USB disconnect, device number 33 [ 166.971306][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 167.086973][ T5928] usb 5-1: USB disconnect, device number 22 [ 167.132741][ T6965] binder: 6959:6965 ioctl c0306201 2000000001c0 returned -14 [ 167.133125][ T6962] binder: 6959:6962 ioctl c0306201 2000000000c0 returned -14 [ 167.149239][ T9] usb 1-1: device descriptor read/64, error -71 [ 167.496549][ T7000] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 167.552608][ T7004] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20003 [ 167.589198][ T7000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.595502][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 167.657740][ T7000] bond1: (slave veth0_to_bond): making interface the new active one [ 167.708373][ T7000] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 167.767527][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 167.786132][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.797643][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.808836][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.817455][ T10] usb 4-1: Product: syz [ 167.821826][ T10] usb 4-1: Manufacturer: syz [ 167.827244][ T10] usb 4-1: SerialNumber: syz [ 167.836874][ T10] usb 4-1: config 0 descriptor?? [ 167.850536][ T10] usb 4-1: selecting invalid altsetting 0 [ 168.039258][ T7013] trusted_key: syz.1.288 sent an empty control message without MSG_MORE. [ 168.115723][ T9] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 168.321095][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.330053][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 168.345023][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.347292][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.379420][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.384722][ T9] usb 1-1: Product: syz [ 168.407915][ T9] usb 1-1: Manufacturer: syz [ 168.421150][ T9] usb 1-1: SerialNumber: syz [ 168.446269][ T9] usb 1-1: config 0 descriptor?? [ 168.498648][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.545204][ T5907] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.551105][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.569956][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.669591][ T9] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 168.704476][ T9] peak_usb 1-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 168.745375][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 168.763000][ T5907] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 168.776553][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.845580][ T9] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 168.877803][ T9] usb 1-1: USB disconnect, device number 35 [ 168.887205][ T5907] usb 3-1: config 0 has no interfaces? [ 168.917728][ T5907] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 168.932425][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.960980][ T5907] usb 3-1: Product: syz [ 168.974948][ T5907] usb 3-1: Manufacturer: syz [ 169.018479][ T5907] usb 3-1: SerialNumber: syz [ 169.109747][ T5907] usb 3-1: config 0 descriptor?? [ 169.501387][ T7035] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 169.577395][ T7018] xt_CT: No such helper "snmp_trap" [ 169.629974][ T7035] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 169.674893][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'. [ 169.689169][ T5907] usb 3-1: USB disconnect, device number 22 [ 170.106179][ T5928] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 170.267139][ T5928] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 170.326394][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 170.378492][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is -1 [ 170.401750][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.473172][ T5928] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 170.521244][ T5928] usb 1-1: config 0 has no interface number 0 [ 170.542327][ T5928] usb 1-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.583788][ T5928] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.637499][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.662032][ T5928] usb 1-1: Product: syz [ 170.674500][ T5928] usb 1-1: Manufacturer: syz [ 170.690708][ T5928] usb 1-1: SerialNumber: syz [ 170.736235][ T5928] usb 1-1: config 0 descriptor?? [ 170.992099][ T5928] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 171.015241][ T5928] usb 1-1: MIDIStreaming interface descriptor not found [ 171.035308][ T5907] usb 4-1: USB disconnect, device number 32 [ 171.153414][ T5928] usb 1-1: USB disconnect, device number 36 [ 171.240453][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 171.265859][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 171.353602][ T7065] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.409589][ T5906] IPVS: starting estimator thread 0... [ 171.465893][ T9] usb 3-1: device descriptor read/64, error -71 [ 171.575308][ T7068] IPVS: using max 41 ests per chain, 98400 per kthread [ 171.725072][ T5906] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 171.749366][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 171.907097][ T9] usb 3-1: device descriptor read/64, error -71 [ 171.925163][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 171.934011][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.947545][ T5906] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 171.956980][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.971189][ T5906] usb 4-1: Product: syz [ 172.038617][ T5906] usb 4-1: Manufacturer: syz [ 172.080110][ T9] usb usb3-port1: attempt power cycle [ 172.241051][ T5928] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 172.249088][ T5906] usb 4-1: SerialNumber: syz [ 172.269242][ T5906] usb 4-1: config 0 descriptor?? [ 172.310222][ T5906] gs_usb 4-1:0.0: Required endpoints not found [ 172.405092][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 172.413456][ T5928] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 172.421901][ T5928] usb 1-1: config 0 has no interface number 0 [ 172.428169][ T5928] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.461578][ T5928] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 172.488228][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.499138][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 172.515399][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.525752][ T5928] usb 1-1: Product: syz [ 172.530029][ T5928] usb 1-1: SerialNumber: syz [ 172.566076][ T5928] usb 1-1: config 0 descriptor?? [ 172.572821][ T5907] usb 4-1: USB disconnect, device number 33 [ 172.585215][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 172.616580][ T9] usb 3-1: device descriptor read/8, error -71 [ 172.617496][ T5928] cm109 1-1:0.8: invalid payload size 9, expected 4 [ 172.662840][ T5928] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 172.820038][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 172.855161][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 172.886297][ T9] usb 3-1: device descriptor read/8, error -71 [ 173.008510][ T9] usb usb3-port1: unable to enumerate USB device [ 173.543550][ T7094] input: syz0 as /devices/virtual/input/input16 [ 173.895700][ T5929] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 174.115134][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 174.122291][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.211742][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 174.288484][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.302098][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.371240][ T5929] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.402688][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.433686][ T5929] usb 4-1: config 0 descriptor?? [ 174.459081][ T7096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.463736][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.489920][ T5929] hub 4-1:0.0: USB hub found [ 174.618346][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.699145][ T5929] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 174.729891][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.737752][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.744937][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.755403][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.763418][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.771100][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.778496][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.785883][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.793047][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.800220][ T5928] usb 1-1: USB disconnect, device number 37 [ 174.806164][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 174.806181][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 174.877338][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.890643][ T5928] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 174.908559][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 174.938627][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 174.982982][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.310'. [ 175.015696][ T5929] usb 4-1: USB disconnect, device number 34 [ 175.325586][ T7108] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.311'. [ 175.357701][ T13] bridge_slave_1: left allmulticast mode [ 175.394821][ T13] bridge_slave_1: left promiscuous mode [ 175.416753][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.462029][ T13] bridge_slave_0: left allmulticast mode [ 175.481930][ T13] bridge_slave_0: left promiscuous mode [ 175.587057][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.168553][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.178790][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.188027][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.198223][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.205999][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.525145][ T5907] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 176.719707][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.771496][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 176.814259][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 176.833808][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 176.850089][ T5907] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 176.885861][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.906339][ T5907] usb 4-1: Product: syz [ 176.924757][ T5907] usb 4-1: Manufacturer: syz [ 176.939617][ T5907] usb 4-1: SerialNumber: syz [ 176.970307][ T5907] usb 4-1: config 0 descriptor?? [ 176.984824][ T5907] usb 4-1: ucan: probing device on interface #0 [ 177.000815][ T5907] usb 4-1: ucan: invalid endpoint configuration [ 177.019869][ T5907] usb 4-1: ucan: probe failed; try to update the device firmware [ 177.209473][ T5907] usb 4-1: USB disconnect, device number 35 [ 177.280481][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.308524][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.346140][ T13] bond0 (unregistering): Released all slaves [ 177.624619][ T13] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 177.660967][ T13] bond1 (unregistering): Released all slaves [ 178.045707][ T13] tipc: Left network mode [ 178.154733][ T4310] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 178.275485][ T5836] Bluetooth: hci1: command tx timeout [ 178.481382][ T7179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.328'. [ 178.533431][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 179.156847][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 179.849421][ T5906] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 179.935401][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 180.053334][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 180.077299][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.105218][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.156415][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.185077][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.266287][ T5906] usb 1-1: config 0 descriptor?? [ 180.365030][ T5836] Bluetooth: hci1: command tx timeout [ 180.513051][ T7218] sctp: [Deprecated]: syz.2.334 (pid 7218) Use of int in maxseg socket option. [ 180.513051][ T7218] Use struct sctp_assoc_value instead [ 180.712603][ T5906] HID 045e:07da: Invalid code 65791 type 1 [ 180.795597][ T5906] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input17 [ 180.810933][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.874596][ T7221] batadv_slave_0: entered promiscuous mode [ 180.883949][ T7225] loop2: detected capacity change from 0 to 7 [ 180.890466][ T5906] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 180.987314][ T7225] Dev loop2: unable to read RDB block 7 [ 180.995104][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 181.004799][ T7225] loop2: unable to read partition table [ 181.013960][ T7225] loop2: partition table beyond EOD, truncated [ 181.028238][ T7225] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 181.091553][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.194026][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.225292][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 181.415858][ T13] hsr_slave_0: left promiscuous mode [ 181.454723][ T13] hsr_slave_1: left promiscuous mode [ 181.465113][ T10] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 181.481491][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.509445][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.588693][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.612747][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.647148][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 181.679119][ T10] usb usb3-port1: attempt power cycle [ 181.721847][ T13] veth1_macvtap: left promiscuous mode [ 181.738859][ T5976] usb 1-1: USB disconnect, device number 38 [ 181.751377][ T13] veth0_macvtap: left promiscuous mode [ 181.760758][ T13] veth1_vlan: left promiscuous mode [ 181.766964][ T13] veth0_vlan: left promiscuous mode [ 182.086535][ T10] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 182.116296][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 182.247192][ T10] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 182.264405][ T5976] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.295479][ T10] usb 3-1: Invalid ep0 maxpacket: 64 [ 182.301279][ T10] usb usb3-port1: unable to enumerate USB device [ 182.415101][ T5976] usb 2-1: Using ep0 maxpacket: 16 [ 182.429998][ T5976] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 182.438610][ T5836] Bluetooth: hci1: command tx timeout [ 182.454288][ T5976] usb 2-1: config 0 has no interface number 0 [ 182.467081][ T5976] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.477207][ T5976] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 182.491233][ T5976] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 182.500479][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.508511][ T5976] usb 2-1: Product: syz [ 182.512807][ T5976] usb 2-1: Manufacturer: syz [ 182.517549][ T5976] usb 2-1: SerialNumber: syz [ 182.523314][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 182.554705][ T5976] usb 2-1: config 0 descriptor?? [ 182.576245][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.583608][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.826717][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.834036][ T7240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.865565][ T5907] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 183.025273][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 183.036988][ T5907] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.067080][ T5907] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.094160][ T5907] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.153692][ T5907] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 183.164833][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.192365][ T5907] usb 1-1: config 0 descriptor?? [ 183.278594][ T13] team0 (unregistering): Port device team_slave_1 removed [ 183.320107][ T13] team0 (unregistering): Port device team_slave_0 removed [ 183.424579][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.449240][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.591815][ T7259] kvm: pic: non byte write [ 183.626827][ T7259] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 183.878380][ T5907] vrc2 0003:07C0:1125.0009: fixing up VRC-2 report descriptor [ 183.917359][ T7244] vlan2: entered allmulticast mode [ 183.939712][ T5907] input: HID 07c0:1125 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:07C0:1125.0009/input/input18 [ 184.072355][ T5907] vrc2 0003:07C0:1125.0009: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.0-1/input0 [ 184.160914][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.204113][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.243794][ T10] usb 1-1: USB disconnect, device number 39 [ 184.256806][ T7129] bridge_slave_0: entered allmulticast mode [ 184.264625][ T7129] bridge_slave_0: entered promiscuous mode [ 184.320898][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.342678][ T7266] fido_id[7266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 184.379606][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.405204][ T7129] bridge_slave_1: entered allmulticast mode [ 184.438645][ T7129] bridge_slave_1: entered promiscuous mode [ 184.519244][ T5836] Bluetooth: hci1: command tx timeout [ 184.766209][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.898265][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.229525][ T7129] team0: Port device team_slave_0 added [ 185.277187][ T7129] team0: Port device team_slave_1 added [ 185.315193][ T9] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 185.505438][ T9] usb 1-1: device descriptor read/64, error -71 [ 185.653048][ T5976] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0003: -71 [ 185.691006][ T5976] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 185.707406][ T5976] asix 2-1:0.251: probe with driver asix failed with error -5 [ 185.722899][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.730506][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.792175][ T9] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 186.081853][ T5976] usb 2-1: USB disconnect, device number 15 [ 186.135905][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.180826][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.190606][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.205131][ T9] usb 1-1: device descriptor read/64, error -71 [ 186.283698][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.326058][ T9] usb usb1-port1: attempt power cycle [ 186.361475][ T7300] fuse: Bad value for 'group_id' [ 186.375286][ T7300] fuse: Bad value for 'group_id' [ 186.443137][ T7129] hsr_slave_0: entered promiscuous mode [ 186.454844][ T7129] hsr_slave_1: entered promiscuous mode [ 186.463918][ T7129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.473060][ T7129] Cannot create hsr debugfs directory [ 186.681975][ T5929] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 186.745091][ T9] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 186.780390][ T9] usb 1-1: device descriptor read/8, error -71 [ 186.845729][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 186.859306][ T5929] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.905264][ T5929] usb 3-1: config 0 has no interface number 0 [ 186.911415][ T5929] usb 3-1: config 0 interface 1 has no altsetting 0 [ 186.956989][ T5929] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 186.970766][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.983705][ T5929] usb 3-1: Product: syz [ 186.988138][ T5929] usb 3-1: Manufacturer: syz [ 187.003647][ T5929] usb 3-1: SerialNumber: syz [ 187.027085][ T5929] usb 3-1: config 0 descriptor?? [ 187.065654][ T9] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 187.206181][ T9] usb 1-1: device descriptor read/8, error -71 [ 187.285234][ T5929] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 187.337879][ T9] usb usb1-port1: unable to enumerate USB device [ 187.481636][ T7322] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.490498][ T7322] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 187.520665][ T7322] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 187.533817][ T5928] usb 3-1: USB disconnect, device number 31 [ 187.567249][ T7322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.575218][ T7322] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.612305][ T7322] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.642453][ T7322] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.656030][ T7322] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.690096][ T7322] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.722568][ T7322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.732849][ T7322] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 187.868372][ T7322] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 187.914239][ T7322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.927842][ T7322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.950531][ T7322] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.303903][ T7337] [U] .h0FwZ,iqgҏV2sO [ 188.331972][ T7337] [U] ` w*BBOLhU [ 188.336524][ T7337] [U] w$n|#%o.z\̧mРw [ 188.356576][ T7337] [U] R{ꫢ S [ 188.645763][ T5906] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 188.709135][ T7129] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.726927][ T7129] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.749981][ T7129] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.792145][ T7129] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.837275][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.866679][ T5906] usb 3-1: not running at top speed; connect to a high speed hub [ 188.897489][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.932470][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.004519][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.040061][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.089789][ T5906] usb 3-1: Product: syz [ 189.094026][ T5906] usb 3-1: Manufacturer: syz [ 189.131173][ T5906] usb 3-1: SerialNumber: syz [ 189.135292][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.258106][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.278286][ T7366] netlink: 'syz.1.362': attribute type 5 has an invalid length. [ 189.333633][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.340854][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.364525][ T7335] [U] [ 189.401730][ T5906] usb 3-1: 0:2 : does not exist [ 189.425127][ T5906] usb 3-1: unit 4 not found! [ 189.427557][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.437503][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.508245][ T5906] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 189.569153][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.639536][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.652408][ T5906] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 189.715343][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.798645][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.844445][ T5906] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 189.884347][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.897301][ T7393] netlink: 68 bytes leftover after parsing attributes in process `syz.1.368'. [ 189.909653][ T30] audit: type=1326 audit(1749905056.947:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 189.958963][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.959710][ T5906] usb 3-1: USB disconnect, device number 32 [ 190.082274][ T30] audit: type=1326 audit(1749905056.947:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.105810][ T7129] veth0_vlan: entered promiscuous mode [ 190.178029][ T7129] veth1_vlan: entered promiscuous mode [ 190.189420][ T30] audit: type=1326 audit(1749905056.947:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.218306][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.297800][ T7129] veth0_macvtap: entered promiscuous mode [ 190.311333][ T30] audit: type=1326 audit(1749905056.947:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.330949][ T7129] veth1_macvtap: entered promiscuous mode [ 190.335122][ T980] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 190.420591][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.427105][ T30] audit: type=1326 audit(1749905056.947:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.499374][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.520227][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.537373][ T30] audit: type=1326 audit(1749905056.947:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.559687][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 190.572746][ T980] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 190.591672][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.610056][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.629149][ T30] audit: type=1326 audit(1749905056.947:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.653968][ T980] usb 4-1: config 0 descriptor?? [ 190.663673][ T980] gspca_main: sunplus-2.14.0 probing 041e:400b [ 190.694813][ T30] audit: type=1326 audit(1749905056.947:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.725349][ T5906] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 190.771921][ T7129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.800981][ T30] audit: type=1326 audit(1749905056.947:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 190.839660][ T7129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.881929][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.890939][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.921070][ T5906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.929787][ T5906] usb 3-1: config 0 has no interface number 0 [ 190.943698][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.966274][ T7129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.979595][ T980] gspca_sunplus: reg_w_riv err -71 [ 190.984843][ T980] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 190.994448][ T30] audit: type=1326 audit(1749905056.997:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.1.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fe58e929 code=0x7ffc0000 [ 191.037334][ T7129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.071229][ T5906] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.091450][ T5906] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 191.091464][ T980] usb 4-1: USB disconnect, device number 36 [ 191.393624][ T7258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.421920][ T7419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.371'. [ 191.472064][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.487948][ T7258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.549665][ T7258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.570701][ T7258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.635626][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.696367][ T5906] usb 3-1: config 0 descriptor?? [ 191.715262][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.795460][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.875242][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.059349][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.151897][ T5906] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.000A/input/input19 [ 192.467198][ T5906] holtek_kbd 0003:04D9:A055.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 192.585128][ T5907] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 192.616485][ T5927] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 192.767199][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 192.786690][ T5927] usb 2-1: device descriptor read/64, error -71 [ 192.802954][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.841953][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.884438][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.917533][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.947937][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.968033][ T5907] usb 5-1: config 0 descriptor?? [ 193.065057][ T5927] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 193.205246][ T5927] usb 2-1: device descriptor read/64, error -71 [ 193.325517][ T5927] usb usb2-port1: attempt power cycle [ 193.401668][ T5907] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 193.429488][ T5907] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 193.465992][ T5907] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 193.473278][ T5907] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 193.531950][ T5907] microsoft 0003:045E:07DA.000B: unbalanced collection at end of report description [ 193.557370][ T5907] microsoft 0003:045E:07DA.000B: parse failed [ 193.575284][ T5907] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 193.616411][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.647844][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.715609][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.730109][ T5927] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 193.744501][ T9] usb 5-1: USB disconnect, device number 23 [ 193.795140][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.849447][ T5927] usb 2-1: device descriptor read/8, error -71 [ 193.875306][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.955221][ T5836] Bluetooth: hci4: command 0x0c1a tx timeout [ 194.025070][ T980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 194.041783][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.048214][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.116682][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.190076][ T5929] usb 3-1: USB disconnect, device number 33 [ 194.290479][ T5927] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 194.341817][ T5927] usb 2-1: device descriptor read/8, error -71 [ 194.471347][ T5927] usb usb2-port1: unable to enumerate USB device [ 194.746993][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 195.149579][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 195.164208][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.209502][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.239260][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.258198][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.269907][ T9] usb 5-1: Product: syz [ 195.282903][ T9] usb 5-1: Manufacturer: syz [ 195.295134][ T9] usb 5-1: SerialNumber: syz [ 196.624255][ T5976] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.735154][ T980] usb 1-1: device descriptor read/64, error -71 [ 196.820513][ T5976] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 196.864288][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.916938][ T5976] usb 2-1: config 0 descriptor?? [ 197.455078][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 197.635218][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 197.652605][ T7510] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 197.673855][ T5976] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 197.805677][ T9] usb 5-1: 0:2 : does not exist [ 197.817981][ T5976] usb 2-1: USB disconnect, device number 20 [ 197.863278][ T9] usb 5-1: USB disconnect, device number 24 [ 197.979924][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.427013][ T7538] netlink: 60 bytes leftover after parsing attributes in process `syz.4.391'. [ 198.476710][ T5976] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 198.635277][ T5976] usb 4-1: device descriptor read/64, error -71 [ 198.905134][ T5976] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 199.115509][ T5976] usb 4-1: device descriptor read/64, error -71 [ 199.333023][ T5976] usb usb4-port1: attempt power cycle [ 199.333710][ T7550] bond0: entered promiscuous mode [ 199.355162][ T5907] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 199.364829][ T7550] bond_slave_0: entered promiscuous mode [ 199.377899][ T7550] bond_slave_1: entered promiscuous mode [ 199.509201][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.517847][ T5907] usb 2-1: not running at top speed; connect to a high speed hub [ 199.527464][ T5907] usb 2-1: config 4 has an invalid interface number: 156 but max is 0 [ 199.541423][ T5907] usb 2-1: config 4 has no interface number 0 [ 199.571057][ T5907] usb 2-1: config 4 interface 156 has no altsetting 0 [ 199.603965][ T5907] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 199.614368][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.630252][ T5907] usb 2-1: Product: syz [ 199.636452][ T5907] usb 2-1: Manufacturer: syz [ 199.652944][ T5907] usb 2-1: SerialNumber: syz [ 199.726919][ T5976] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 199.776694][ T5976] usb 4-1: device descriptor read/8, error -71 [ 199.925931][ T7546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.935193][ T7546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.963661][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 200.075083][ T5976] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 200.101503][ T5907] usb 2-1: USB disconnect, device number 21 [ 200.117140][ T5976] usb 4-1: device descriptor read/8, error -71 [ 200.235449][ T5976] usb usb4-port1: unable to enumerate USB device [ 200.459930][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.478035][ T5927] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 200.504358][ T5927] usb 3-1: can't read configurations, error -71 [ 200.925103][ T5927] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 201.105630][ T980] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 201.107002][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.144321][ T5927] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 201.175162][ T5927] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.185070][ T5976] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 201.212583][ T5927] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.238125][ T5927] usb 3-1: config 1 interface 1 has no altsetting 0 [ 201.254818][ T5927] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.286407][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.316597][ T5927] usb 3-1: Product: syz [ 201.337309][ T5927] usb 3-1: Manufacturer: syz [ 201.341950][ T5927] usb 3-1: SerialNumber: syz [ 201.344056][ T980] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 201.359772][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 201.370948][ T7586] vivid-002: disconnect [ 201.378807][ T980] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 201.410843][ T7585] vivid-002: reconnect [ 201.411198][ T5976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.434923][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.452640][ T980] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 201.474892][ T5976] usb 5-1: Product: syz [ 201.484602][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.494527][ T5976] usb 5-1: Manufacturer: syz [ 201.504025][ T5976] usb 5-1: SerialNumber: syz [ 201.514688][ T980] usb 2-1: Product: syz [ 201.529708][ T980] usb 2-1: Manufacturer: syz [ 201.544633][ T980] usb 2-1: SerialNumber: syz [ 201.556177][ T5976] usb 5-1: config 0 descriptor?? [ 201.565345][ T980] usb 2-1: config 0 descriptor?? [ 201.579662][ T980] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 201.616729][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.636420][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.668314][ T5927] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 201.690065][ T5927] usb 3-1: MIDIStreaming interface descriptor not found [ 201.825126][ T5927] usb 3-1: USB disconnect, device number 35 [ 201.983125][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 202.011164][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 202.049301][ T5976] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.365882][ T5928] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 202.495194][ T5927] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 202.505145][ T5928] usb 4-1: device descriptor read/64, error -71 [ 202.645051][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 202.657824][ T5927] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 202.679673][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.692641][ T5927] usb 3-1: Product: syz [ 202.698310][ T5927] usb 3-1: Manufacturer: syz [ 202.703376][ T5927] usb 3-1: SerialNumber: syz [ 202.722475][ T5927] usb 3-1: config 0 descriptor?? [ 202.732362][ T5976] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 202.733186][ T5927] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 202.762490][ T5976] usb 5-1: USB disconnect, device number 25 [ 202.781049][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 202.935086][ T5928] usb 4-1: device descriptor read/64, error -71 [ 202.947679][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.963546][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.974835][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.987071][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.055374][ T5928] usb usb4-port1: attempt power cycle [ 203.205093][ T5927] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 203.281072][ T7610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.355156][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 203.364606][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.380565][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.391107][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 203.404364][ T5928] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 203.412172][ T5927] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 203.421700][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.432001][ T5927] usb 1-1: config 0 descriptor?? [ 203.438219][ T5928] usb 4-1: device descriptor read/8, error -71 [ 203.653409][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'. [ 203.669018][ T7605] netlink: 72 bytes leftover after parsing attributes in process `syz.0.410'. [ 203.682048][ T7605] loop8: detected capacity change from 0 to 7 [ 203.692705][ T5947] Dev loop8: unable to read RDB block 7 [ 203.698647][ T5947] loop8: unable to read partition table [ 203.704689][ T5947] loop8: partition table beyond EOD, truncated [ 203.714624][ T7605] Dev loop8: unable to read RDB block 7 [ 203.715832][ T5928] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 203.722563][ T7605] loop8: unable to read partition table [ 203.733935][ T7605] loop8: partition table beyond EOD, truncated [ 203.749523][ T5928] usb 4-1: device descriptor read/8, error -71 [ 203.751196][ T7605] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 203.751196][ T7605] ) failed (rc=-5) [ 203.848969][ T5926] usb 2-1: USB disconnect, device number 22 [ 203.874154][ T5928] usb usb4-port1: unable to enumerate USB device [ 204.096703][ T7623] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 204.104559][ T7623] netlink: 'syz.4.415': attribute type 8 has an invalid length. [ 204.114897][ T7623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.415'. [ 204.200344][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 204.219126][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 204.235904][ T5927] usb 1-1: USB disconnect, device number 46 [ 204.295172][ T5926] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.725054][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 204.732112][ T5926] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 204.742996][ T5926] usb 2-1: config 0 has no interface number 0 [ 204.750884][ T5926] usb 2-1: too many endpoints for config 0 interface 116 altsetting 105: 111, using maximum allowed: 30 [ 204.763907][ T5926] usb 2-1: config 0 interface 116 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 204.778352][ T5926] usb 2-1: config 0 interface 116 has no altsetting 0 [ 204.785681][ T5926] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 204.795187][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.816598][ T5926] usb 2-1: config 0 descriptor?? [ 205.025531][ T7630] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 205.038688][ T5926] usb 2-1: string descriptor 0 read error: -32 [ 205.055718][ T5926] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 205.101963][ T5926] gspca_sonixj: reg_r err -32 [ 205.106948][ T5926] sonixj 2-1:0.116: probe with driver sonixj failed with error -32 [ 205.335165][ T5928] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 205.498633][ T5928] usb 1-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 205.515017][ T5928] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.528327][ T5928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 205.550502][ T5928] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 205.561547][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=2 [ 205.569965][ T5928] usb 1-1: Product: syz [ 205.574210][ T5928] usb 1-1: Manufacturer: syz [ 205.579109][ T5928] usb 1-1: SerialNumber: syz [ 205.749239][ T9] usb 3-1: USB disconnect, device number 36 [ 205.791347][ T7630] binder: 7629:7630 ioctl c0306201 200000000080 returned -14 [ 205.830211][ T5927] usb 2-1: USB disconnect, device number 23 [ 205.853026][ T5928] pxrc 1-1:1.0: Could not find endpoint [ 205.886300][ T5928] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 205.921373][ T5928] usb 1-1: USB disconnect, device number 47 [ 206.025028][ T5926] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 206.195355][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 206.210058][ T5926] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.225013][ T5926] usb 5-1: config 0 has no interface number 0 [ 206.241486][ T5926] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.261900][ T5926] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.283576][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.315088][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 206.326212][ T5926] usb 5-1: config 0 descriptor?? [ 206.346450][ T5926] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 206.519231][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.531641][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.536658][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.573138][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 206.594541][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.699033][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 206.756795][ T7664] netlink: 'syz.1.425': attribute type 10 has an invalid length. [ 206.774793][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.829028][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.841969][ T7664] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.856295][ T7660] netlink: 'syz.1.425': attribute type 10 has an invalid length. [ 206.869456][ T7660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.425'. [ 206.880444][ T7660] batadv0: entered promiscuous mode [ 206.886764][ T7660] batadv0: entered allmulticast mode [ 206.932730][ T9] usb 3-1: config 0 descriptor?? [ 206.940540][ T7660] bond0: (slave batadv0): Releasing backup interface [ 207.002739][ T7660] bridge0: port 3(batadv0) entered blocking state [ 207.011908][ T7660] bridge0: port 3(batadv0) entered disabled state [ 207.297791][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 207.307625][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 207.395252][ T5926] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 207.464762][ T9] kye 0003:0458:0138.000C: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 207.503836][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.520488][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.532988][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.545068][ T5926] usb 4-1: device descriptor read/64, error -71 [ 207.547209][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.631502][ T9] usb 5-1: USB disconnect, device number 26 [ 207.669632][ T5976] usb 3-1: USB disconnect, device number 37 [ 207.714576][ T7672] fido_id[7672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 207.816244][ T5926] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 208.005253][ T5926] usb 4-1: device descriptor read/64, error -71 [ 208.118638][ T5926] usb usb4-port1: attempt power cycle [ 208.506078][ T5926] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 208.560808][ T7700] netlink: 'syz.0.434': attribute type 27 has an invalid length. [ 208.571809][ T5926] usb 4-1: device descriptor read/8, error -71 [ 208.825493][ T5926] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 208.856444][ T5928] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 208.875414][ T5926] usb 4-1: device descriptor read/8, error -71 [ 208.997136][ T5926] usb usb4-port1: unable to enumerate USB device [ 209.037080][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.053078][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 209.064909][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 209.082514][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 209.100710][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.127531][ T5928] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 209.143439][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 209.152932][ T5928] usb 2-1: Product: syz [ 209.168714][ T5928] usb 2-1: Manufacturer: syz [ 209.178850][ T5928] usb 2-1: SerialNumber: syz [ 209.199638][ T5928] usb 2-1: config 0 descriptor?? [ 209.533369][ T5928] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 209.555014][ T5928] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 209.742992][ T5928] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 209.799152][ T5928] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 209.846414][ T7720] input: syz1 as /devices/virtual/input/input20 [ 209.853764][ T5928] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 210.327120][ T7725] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 210.350797][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 210.366419][ T5928] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 210.392262][ T5928] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 210.423962][ T5928] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 210.459370][ T5928] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 210.547777][ T5928] usb 2-1: USB disconnect, device number 24 [ 210.692030][ T7732] xt_hashlimit: size too large, truncated to 1048576 [ 210.853042][ T7740] : renamed from bridge_slave_0 (while UP) [ 210.890844][ T7740] netlink: 'syz.1.442': attribute type 27 has an invalid length. [ 211.015844][ T10] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 211.276936][ T10] usb 5-1: No LPM exit latency info found, disabling LPM. [ 211.286324][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 211.346517][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.355423][ T7740] bridge0: port 1() entered disabled state [ 211.380037][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.40 [ 211.423718][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.464213][ T10] usb 5-1: Product: 寺峪톬븒넜ฆ栖㥣팓ᯈ왵쩉⴦遶蕡䎱삿騰岄ꏪ⍁껈ဉ卵뫠身艩ﻄ⤫娡㑹尠섯驅䕊㚜˜ު뜀⠁퓰ޗ吢뱖⇡쿒⁗낚ʐ쁢打ዂ佉巃㩘紲壸ᔝ꾩㮃Ჵ鱼꼛躯ধ沔㘫⌇ꊡ좵佀擝─黒給͂亣鶿롎ᨉ䠋ｬ鿓膒橏趪ꂿ蘣룥錺ᕀꞷ嫆绛坛撨삜뎂擃蛔᠃廛⬲⟇居왚纔㷟⻕龍퇆 [ 211.566520][ T5926] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 211.590435][ T10] usb 5-1: Manufacturer: ည [ 211.612841][ T10] usb 5-1: SerialNumber: ఊ [ 211.734860][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.745273][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 211.766443][ T5926] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 211.794466][ T5926] usb 4-1: config 0 has no interface number 1 [ 211.806261][ T5926] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.821495][ T5926] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 211.843860][ T5926] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 211.881347][ T5926] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 211.894848][ T7740] veth1_to_hsr: left allmulticast mode [ 211.919092][ T5926] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.936162][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.964751][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.983527][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 211.997121][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 212.021435][ T5926] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 212.050106][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 212.050499][ T5926] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 212.057617][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 212.071745][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.082800][ T5926] usb 4-1: Product: syz [ 212.088023][ T5926] usb 4-1: Manufacturer: syz [ 212.092714][ T5926] usb 4-1: SerialNumber: syz [ 212.098138][ T10] usb 5-1: USB disconnect, device number 27 [ 212.105799][ T5926] usb 4-1: config 0 descriptor?? [ 212.113040][ T7744] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.133416][ T7740] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.140571][ T5926] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.150923][ T7740] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.162165][ T5926] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.184396][ T7740] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.208547][ T7740] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.223796][ T5926] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 212.265446][ T980] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 212.398271][ T10] usb 4-1: USB disconnect, device number 49 [ 212.465509][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 212.481730][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.481767][ T980] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 212.481802][ T980] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 212.481835][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.481867][ T980] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 212.481890][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.506213][ T980] usb 1-1: config 0 descriptor?? [ 212.592405][ T980] pxrc 1-1:0.0: Could not find endpoint [ 212.793977][ T980] usb 1-1: USB disconnect, device number 48 [ 213.085184][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 213.245142][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 213.257361][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.271110][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.281804][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.293467][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.303224][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.323381][ T10] usb 3-1: Product: syz [ 213.333555][ T10] usb 3-1: Manufacturer: syz [ 213.343740][ T10] usb 3-1: SerialNumber: syz [ 213.438450][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 213.438470][ T30] audit: type=1326 audit(1749905080.397:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 213.529591][ T30] audit: type=1326 audit(1749905080.397:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 213.825168][ T30] audit: type=1326 audit(1749905080.397:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 213.885226][ T30] audit: type=1326 audit(1749905080.397:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 213.907354][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.922817][ T30] audit: type=1326 audit(1749905080.397:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 213.945001][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.957374][ T10] usb 3-1: 0:2 : does not exist [ 213.975175][ T30] audit: type=1326 audit(1749905080.397:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 213.998627][ T30] audit: type=1326 audit(1749905080.397:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 214.020967][ T30] audit: type=1326 audit(1749905080.397:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 214.043258][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.080355][ T30] audit: type=1326 audit(1749905080.397:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 214.251922][ T7796] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 214.298608][ T30] audit: type=1326 audit(1749905080.397:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.3.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6678e929 code=0x7ffc0000 [ 214.386597][ T7796] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 214.622654][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.663063][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.673649][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 214.756383][ T10] usb 3-1: USB disconnect, device number 38 [ 214.838887][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.055143][ T5928] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 215.230396][ T5928] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 215.248859][ T5928] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 215.259952][ T5928] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 215.270397][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.293324][ T7802] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.306781][ T5928] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.415417][ T5927] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 215.510370][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.521005][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.525107][ T5907] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 215.544445][ T7802] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 215.550974][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 215.567450][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 215.574423][ T7817] vhci_hcd: connection closed [ 215.581381][ T7363] vhci_hcd: stop threads [ 215.590741][ T7363] vhci_hcd: release socket [ 215.595033][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 215.596213][ T7363] vhci_hcd: disconnect device [ 215.613387][ T5927] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 215.622812][ T5928] usb 5-1: USB disconnect, device number 28 [ 215.631987][ T5927] usb 2-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 215.657251][ T5927] usb 2-1: config 0 has no interface number 0 [ 215.664688][ T5927] usb 2-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 215.677523][ T5927] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.696527][ T5927] usb 2-1: config 0 interface 41 has no altsetting 0 [ 215.732732][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.752030][ T5927] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 215.767616][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.779972][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.793000][ T5907] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 215.802607][ T5927] usb 2-1: Product: syz [ 215.809977][ T5927] usb 2-1: Manufacturer: syz [ 215.815557][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.824189][ T5927] usb 2-1: SerialNumber: syz [ 215.835949][ T5927] usb 2-1: config 0 descriptor?? [ 215.841727][ T7814] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 215.854645][ T5927] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 215.864581][ T5907] usb 3-1: config 0 descriptor?? [ 215.967334][ T7821] [ 215.969721][ T7821] ===================================================== [ 215.976683][ T7821] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 215.984163][ T7821] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 215.991279][ T7821] ----------------------------------------------------- [ 215.998233][ T7821] syz.0.468/7821 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 216.005784][ T7821] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 216.014438][ T7821] [ 216.014438][ T7821] and this task is already holding: [ 216.021802][ T7821] ffff888032a5d720 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 216.030487][ T7821] which would create a new lock dependency: [ 216.036381][ T7821] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 216.043982][ T7821] [ 216.043982][ T7821] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 216.053454][ T7821] (&dev->event_lock#2){..-.}-{3:3} [ 216.053491][ T7821] [ 216.053491][ T7821] ... which became SOFTIRQ-irq-safe at: [ 216.066418][ T7821] lock_acquire+0x120/0x360 [ 216.071034][ T7821] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.076333][ T7821] input_event+0x7a/0xc0 [ 216.080679][ T7821] xpad360_process_packet+0x1fe/0xb30 [ 216.086154][ T7821] xpad_irq_in+0x1638/0x26e0 [ 216.090840][ T7821] __usb_hcd_giveback_urb+0x417/0x690 [ 216.096319][ T7821] dummy_timer+0x862/0x4550 [ 216.100911][ T7821] __hrtimer_run_queues+0x52c/0xc60 [ 216.106206][ T7821] hrtimer_run_softirq+0x187/0x2b0 [ 216.111419][ T7821] handle_softirqs+0x286/0x870 [ 216.116314][ T7821] __irq_exit_rcu+0xca/0x1f0 [ 216.121017][ T7821] irq_exit_rcu+0x9/0x30 [ 216.125362][ T7821] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.131101][ T7821] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.137187][ T7821] lock_acquire+0xcd/0x360 [ 216.141707][ T7821] unwind_next_frame+0xc2/0x2390 [ 216.146744][ T7821] arch_stack_walk+0x11c/0x150 [ 216.151613][ T7821] stack_trace_save+0x9c/0xe0 [ 216.156381][ T7821] save_stack+0xf5/0x1f0 [ 216.160711][ T7821] __set_page_owner+0x8d/0x4a0 [ 216.165565][ T7821] post_alloc_hook+0x240/0x2a0 [ 216.170419][ T7821] get_page_from_freelist+0x21e4/0x22c0 [ 216.176051][ T7821] __alloc_frozen_pages_noprof+0x181/0x370 [ 216.181945][ T7821] alloc_pages_mpol+0x232/0x4a0 [ 216.186909][ T7821] allocate_slab+0x8a/0x3b0 [ 216.191506][ T7821] ___slab_alloc+0xbfc/0x1480 [ 216.196355][ T7821] __kvmalloc_node_noprof+0x429/0x5f0 [ 216.201813][ T7821] seq_read_iter+0x1fd/0xe10 [ 216.206506][ T7821] vfs_read+0x4cd/0x980 [ 216.210769][ T7821] ksys_read+0x145/0x250 [ 216.215113][ T7821] do_syscall_64+0xfa/0x3b0 [ 216.219720][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.225700][ T7821] [ 216.225700][ T7821] to a SOFTIRQ-irq-unsafe lock: [ 216.232736][ T7821] (tasklist_lock){.+.+}-{3:3} [ 216.232769][ T7821] [ 216.232769][ T7821] ... which became SOFTIRQ-irq-unsafe at: [ 216.245421][ T7821] ... [ 216.245431][ T7821] lock_acquire+0x120/0x360 [ 216.252626][ T7821] _raw_read_lock+0x36/0x50 [ 216.257240][ T7821] __do_wait+0xde/0x740 [ 216.261502][ T7821] do_wait+0x1f8/0x520 [ 216.265687][ T7821] kernel_wait+0xab/0x170 [ 216.270122][ T7821] call_usermodehelper_exec_work+0xbe/0x230 [ 216.276117][ T7821] process_scheduled_works+0xae1/0x17b0 [ 216.281763][ T7821] worker_thread+0x8a0/0xda0 [ 216.286467][ T7821] kthread+0x70e/0x8a0 [ 216.290629][ T7821] ret_from_fork+0x3fc/0x770 [ 216.295316][ T7821] ret_from_fork_asm+0x1a/0x30 [ 216.300168][ T7821] [ 216.300168][ T7821] other info that might help us debug this: [ 216.300168][ T7821] [ 216.310407][ T7821] Chain exists of: [ 216.310407][ T7821] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 216.310407][ T7821] [ 216.323475][ T7821] Possible interrupt unsafe locking scenario: [ 216.323475][ T7821] [ 216.331819][ T7821] CPU0 CPU1 [ 216.337188][ T7821] ---- ---- [ 216.342561][ T7821] lock(tasklist_lock); [ 216.346821][ T7821] local_irq_disable(); [ 216.353580][ T7821] lock(&dev->event_lock#2); [ 216.360787][ T7821] lock(&f_owner->lock); [ 216.367640][ T7821] [ 216.371092][ T7821] lock(&dev->event_lock#2); [ 216.375957][ T7821] [ 216.375957][ T7821] *** DEADLOCK *** [ 216.375957][ T7821] [ 216.384095][ T7821] 6 locks held by syz.0.468/7821: [ 216.389123][ T7821] #0: ffff888067ac6428 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 216.398300][ T7821] #1: ffffffff8e2b2270 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x37f/0x1620 [ 216.407446][ T7821] #2: ffff88802f4047a8 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x387/0x1620 [ 216.416946][ T7821] #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 216.426037][ T7821] #4: ffff8880536d8018 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 216.435204][ T7821] #5: ffff888032a5d720 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 216.444304][ T7821] [ 216.444304][ T7821] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 216.454710][ T7821] -> (&dev->event_lock#2){..-.}-{3:3} { [ 216.460546][ T7821] IN-SOFTIRQ-W at: [ 216.464787][ T7821] lock_acquire+0x120/0x360 [ 216.471466][ T7821] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.478843][ T7821] input_event+0x7a/0xc0 [ 216.485264][ T7821] xpad360_process_packet+0x1fe/0xb30 [ 216.492906][ T7821] xpad_irq_in+0x1638/0x26e0 [ 216.499714][ T7821] __usb_hcd_giveback_urb+0x417/0x690 [ 216.507262][ T7821] dummy_timer+0x862/0x4550 [ 216.513934][ T7821] __hrtimer_run_queues+0x52c/0xc60 [ 216.521309][ T7821] hrtimer_run_softirq+0x187/0x2b0 [ 216.528603][ T7821] handle_softirqs+0x286/0x870 [ 216.535605][ T7821] __irq_exit_rcu+0xca/0x1f0 [ 216.542408][ T7821] irq_exit_rcu+0x9/0x30 [ 216.548858][ T7821] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 216.556688][ T7821] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.564859][ T7821] lock_acquire+0xcd/0x360 [ 216.571457][ T7821] unwind_next_frame+0xc2/0x2390 [ 216.578617][ T7821] arch_stack_walk+0x11c/0x150 [ 216.585557][ T7821] stack_trace_save+0x9c/0xe0 [ 216.592413][ T7821] save_stack+0xf5/0x1f0 [ 216.598838][ T7821] __set_page_owner+0x8d/0x4a0 [ 216.605769][ T7821] post_alloc_hook+0x240/0x2a0 [ 216.612711][ T7821] get_page_from_freelist+0x21e4/0x22c0 [ 216.620442][ T7821] __alloc_frozen_pages_noprof+0x181/0x370 [ 216.628431][ T7821] alloc_pages_mpol+0x232/0x4a0 [ 216.635517][ T7821] allocate_slab+0x8a/0x3b0 [ 216.642196][ T7821] ___slab_alloc+0xbfc/0x1480 [ 216.649048][ T7821] __kvmalloc_node_noprof+0x429/0x5f0 [ 216.656597][ T7821] seq_read_iter+0x1fd/0xe10 [ 216.663366][ T7821] vfs_read+0x4cd/0x980 [ 216.669722][ T7821] ksys_read+0x145/0x250 [ 216.676134][ T7821] do_syscall_64+0xfa/0x3b0 [ 216.682811][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.690889][ T7821] INITIAL USE at: [ 216.695048][ T7821] lock_acquire+0x120/0x360 [ 216.701639][ T7821] _raw_spin_lock_irqsave+0xa7/0xf0 [ 216.708928][ T7821] input_inject_event+0xab/0x320 [ 216.715963][ T7821] kbd_led_trigger_activate+0xbc/0x100 [ 216.723528][ T7821] led_trigger_set+0x52a/0x950 [ 216.730378][ T7821] led_trigger_set_default+0x260/0x2a0 [ 216.737922][ T7821] led_classdev_register_ext+0x73d/0x930 [ 216.745641][ T7821] input_leds_connect+0x517/0x790 [ 216.752786][ T7821] input_register_device+0xcee/0x10b0 [ 216.760254][ T7821] atkbd_connect+0x70e/0x9c0 [ 216.766931][ T7821] serio_driver_probe+0x7f/0xa0 [ 216.773864][ T7821] really_probe+0x26a/0x9a0 [ 216.780464][ T7821] __driver_probe_device+0x18c/0x2f0 [ 216.787841][ T7821] driver_probe_device+0x4f/0x430 [ 216.794954][ T7821] __driver_attach+0x452/0x700 [ 216.801814][ T7821] bus_for_each_dev+0x230/0x2b0 [ 216.808764][ T7821] serio_handle_event+0x1a2/0x860 [ 216.815907][ T7821] process_scheduled_works+0xae1/0x17b0 [ 216.823545][ T7821] worker_thread+0x8a0/0xda0 [ 216.830220][ T7821] kthread+0x70e/0x8a0 [ 216.836388][ T7821] ret_from_fork+0x3fc/0x770 [ 216.843080][ T7821] ret_from_fork_asm+0x1a/0x30 [ 216.849936][ T7821] } [ 216.852696][ T7821] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 216.861996][ T7821] -> (&client->buffer_lock){....}-{3:3} { [ 216.867912][ T7821] INITIAL USE at: [ 216.871980][ T7821] lock_acquire+0x120/0x360 [ 216.878411][ T7821] _raw_spin_lock+0x2e/0x40 [ 216.884853][ T7821] evdev_pass_values+0xb9/0xbd0 [ 216.891621][ T7821] evdev_events+0x1e6/0x340 [ 216.898040][ T7821] input_pass_values+0x288/0x890 [ 216.904888][ T7821] input_event_dispose+0x330/0x6b0 [ 216.911919][ T7821] input_inject_event+0x1fe/0x320 [ 216.918863][ T7821] evdev_write+0x2fc/0x480 [ 216.925191][ T7821] vfs_write+0x27b/0xa90 [ 216.931352][ T7821] ksys_write+0x145/0x250 [ 216.937599][ T7821] do_syscall_64+0xfa/0x3b0 [ 216.944009][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.951809][ T7821] } [ 216.954477][ T7821] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 216.962813][ T7821] ... acquired at: [ 216.966794][ T7821] lock_acquire+0x120/0x360 [ 216.971477][ T7821] _raw_spin_lock+0x2e/0x40 [ 216.976158][ T7821] evdev_pass_values+0xb9/0xbd0 [ 216.981181][ T7821] evdev_events+0x1e6/0x340 [ 216.985860][ T7821] input_pass_values+0x288/0x890 [ 216.990973][ T7821] input_event_dispose+0x330/0x6b0 [ 216.996268][ T7821] input_inject_event+0x1fe/0x320 [ 217.001473][ T7821] evdev_write+0x2fc/0x480 [ 217.006073][ T7821] vfs_write+0x27b/0xa90 [ 217.010498][ T7821] ksys_write+0x145/0x250 [ 217.014997][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.019673][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.025740][ T7821] [ 217.028061][ T7821] -> (&new->fa_lock){....}-{3:3} { [ 217.033291][ T7821] INITIAL USE at: [ 217.037275][ T7821] lock_acquire+0x120/0x360 [ 217.043542][ T7821] _raw_write_lock_irq+0xa2/0xf0 [ 217.050229][ T7821] fasync_remove_entry+0xf1/0x1c0 [ 217.057008][ T7821] lease_modify+0x1ca/0x3c0 [ 217.063260][ T7821] locks_remove_file+0x4bf/0xea0 [ 217.070003][ T7821] __fput+0x3ab/0xa70 [ 217.075740][ T7821] task_work_run+0x1d1/0x260 [ 217.082135][ T7821] do_exit+0x6ad/0x22e0 [ 217.088037][ T7821] do_group_exit+0x21c/0x2d0 [ 217.094369][ T7821] __x64_sys_exit_group+0x3f/0x40 [ 217.101137][ T7821] x64_sys_call+0x21ba/0x21c0 [ 217.107551][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.113793][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.121434][ T7821] INITIAL READ USE at: [ 217.125853][ T7821] lock_acquire+0x120/0x360 [ 217.132537][ T7821] _raw_read_lock_irqsave+0xaf/0x100 [ 217.140023][ T7821] kill_fasync+0x199/0x4d0 [ 217.146630][ T7821] lease_break_callback+0x26/0x30 [ 217.153936][ T7821] __break_lease+0x6a2/0x1620 [ 217.160814][ T7821] do_dentry_open+0xd62/0x1970 [ 217.167757][ T7821] vfs_open+0x3b/0x340 [ 217.174002][ T7821] path_openat+0x2ee5/0x3830 [ 217.180772][ T7821] do_filp_open+0x1fa/0x410 [ 217.187454][ T7821] do_sys_openat2+0x121/0x1c0 [ 217.194309][ T7821] __x64_sys_openat+0x138/0x170 [ 217.201344][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.208047][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.216119][ T7821] } [ 217.218726][ T7821] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 217.227522][ T7821] ... acquired at: [ 217.231405][ T7821] lock_acquire+0x120/0x360 [ 217.236106][ T7821] _raw_read_lock_irqsave+0xaf/0x100 [ 217.241574][ T7821] kill_fasync+0x199/0x4d0 [ 217.246181][ T7821] evdev_pass_values+0x627/0xbd0 [ 217.251295][ T7821] evdev_events+0x1e6/0x340 [ 217.255988][ T7821] input_pass_values+0x288/0x890 [ 217.261103][ T7821] input_event_dispose+0x330/0x6b0 [ 217.266402][ T7821] input_inject_event+0x1fe/0x320 [ 217.271617][ T7821] evdev_write+0x2fc/0x480 [ 217.276213][ T7821] vfs_write+0x27b/0xa90 [ 217.280659][ T7821] ksys_write+0x145/0x250 [ 217.285159][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.289836][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.295911][ T7821] [ 217.298246][ T7821] -> (&f_owner->lock){....}-{3:3} { [ 217.303493][ T7821] INITIAL USE at: [ 217.307399][ T7821] lock_acquire+0x120/0x360 [ 217.313497][ T7821] _raw_write_lock_irq+0xa2/0xf0 [ 217.320017][ T7821] __f_setown+0x67/0x370 [ 217.325839][ T7821] generic_setlease+0xd60/0x1240 [ 217.332369][ T7821] fcntl_setlease+0x3a2/0x4c0 [ 217.338651][ T7821] do_fcntl+0x6a9/0x1910 [ 217.344466][ T7821] __se_sys_fcntl+0xc8/0x150 [ 217.350622][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.356687][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.364143][ T7821] INITIAL READ USE at: [ 217.368490][ T7821] lock_acquire+0x120/0x360 [ 217.375022][ T7821] _raw_read_lock_irqsave+0xaf/0x100 [ 217.382338][ T7821] send_sigio+0x38/0x370 [ 217.388604][ T7821] kill_fasync+0x24d/0x4d0 [ 217.395040][ T7821] lease_break_callback+0x26/0x30 [ 217.402081][ T7821] __break_lease+0x6a2/0x1620 [ 217.408773][ T7821] do_dentry_open+0xd62/0x1970 [ 217.415613][ T7821] vfs_open+0x3b/0x340 [ 217.421773][ T7821] path_openat+0x2ee5/0x3830 [ 217.428379][ T7821] do_filp_open+0x1fa/0x410 [ 217.434931][ T7821] do_sys_openat2+0x121/0x1c0 [ 217.441629][ T7821] __x64_sys_openat+0x138/0x170 [ 217.448483][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.454991][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.462888][ T7821] } [ 217.465402][ T7821] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 217.474262][ T7821] ... acquired at: [ 217.478062][ T7821] lock_acquire+0x120/0x360 [ 217.482753][ T7821] _raw_read_lock_irqsave+0xaf/0x100 [ 217.488225][ T7821] send_sigio+0x38/0x370 [ 217.492647][ T7821] kill_fasync+0x24d/0x4d0 [ 217.497247][ T7821] lease_break_callback+0x26/0x30 [ 217.502454][ T7821] __break_lease+0x6a2/0x1620 [ 217.507318][ T7821] do_dentry_open+0xd62/0x1970 [ 217.512260][ T7821] vfs_open+0x3b/0x340 [ 217.516548][ T7821] path_openat+0x2ee5/0x3830 [ 217.521327][ T7821] do_filp_open+0x1fa/0x410 [ 217.526013][ T7821] do_sys_openat2+0x121/0x1c0 [ 217.530867][ T7821] __x64_sys_openat+0x138/0x170 [ 217.535898][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.540587][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.546654][ T7821] [ 217.548986][ T7821] [ 217.548986][ T7821] the dependencies between the lock to be acquired [ 217.548996][ T7821] and SOFTIRQ-irq-unsafe lock: [ 217.562518][ T7821] -> (tasklist_lock){.+.+}-{3:3} { [ 217.567660][ T7821] HARDIRQ-ON-R at: [ 217.571646][ T7821] lock_acquire+0x120/0x360 [ 217.577812][ T7821] _raw_read_lock+0x36/0x50 [ 217.583971][ T7821] __do_wait+0xde/0x740 [ 217.589787][ T7821] do_wait+0x1f8/0x520 [ 217.595510][ T7821] kernel_wait+0xab/0x170 [ 217.601489][ T7821] call_usermodehelper_exec_work+0xbe/0x230 [ 217.609040][ T7821] process_scheduled_works+0xae1/0x17b0 [ 217.616250][ T7821] worker_thread+0x8a0/0xda0 [ 217.622491][ T7821] kthread+0x70e/0x8a0 [ 217.628217][ T7821] ret_from_fork+0x3fc/0x770 [ 217.634462][ T7821] ret_from_fork_asm+0x1a/0x30 [ 217.640945][ T7821] SOFTIRQ-ON-R at: [ 217.644927][ T7821] lock_acquire+0x120/0x360 [ 217.651092][ T7821] _raw_read_lock+0x36/0x50 [ 217.657255][ T7821] __do_wait+0xde/0x740 [ 217.663065][ T7821] do_wait+0x1f8/0x520 [ 217.668813][ T7821] kernel_wait+0xab/0x170 [ 217.674799][ T7821] call_usermodehelper_exec_work+0xbe/0x230 [ 217.682354][ T7821] process_scheduled_works+0xae1/0x17b0 [ 217.689579][ T7821] worker_thread+0x8a0/0xda0 [ 217.695837][ T7821] kthread+0x70e/0x8a0 [ 217.701561][ T7821] ret_from_fork+0x3fc/0x770 [ 217.707803][ T7821] ret_from_fork_asm+0x1a/0x30 [ 217.714220][ T7821] INITIAL USE at: [ 217.718116][ T7821] lock_acquire+0x120/0x360 [ 217.724187][ T7821] _raw_write_lock_irq+0xa2/0xf0 [ 217.730714][ T7821] copy_process+0x224f/0x3c00 [ 217.736958][ T7821] kernel_clone+0x21e/0x870 [ 217.743027][ T7821] user_mode_thread+0xdd/0x140 [ 217.749368][ T7821] rest_init+0x23/0x300 [ 217.755119][ T7821] start_kernel+0x47d/0x500 [ 217.761203][ T7821] x86_64_start_reservations+0x24/0x30 [ 217.768235][ T7821] x86_64_start_kernel+0x143/0x1c0 [ 217.774911][ T7821] common_startup_64+0x13e/0x147 [ 217.781416][ T7821] INITIAL READ USE at: [ 217.785743][ T7821] lock_acquire+0x120/0x360 [ 217.792252][ T7821] _raw_read_lock+0x36/0x50 [ 217.798779][ T7821] __do_wait+0xde/0x740 [ 217.804933][ T7821] do_wait+0x1f8/0x520 [ 217.811007][ T7821] kernel_wait+0xab/0x170 [ 217.817336][ T7821] call_usermodehelper_exec_work+0xbe/0x230 [ 217.825246][ T7821] process_scheduled_works+0xae1/0x17b0 [ 217.832803][ T7821] worker_thread+0x8a0/0xda0 [ 217.839414][ T7821] kthread+0x70e/0x8a0 [ 217.845579][ T7821] ret_from_fork+0x3fc/0x770 [ 217.852173][ T7821] ret_from_fork_asm+0x1a/0x30 [ 217.858932][ T7821] } [ 217.861426][ T7821] ... key at: [] tasklist_lock+0x18/0x40 [ 217.869146][ T7821] ... acquired at: [ 217.872952][ T7821] lock_acquire+0x120/0x360 [ 217.877644][ T7821] _raw_read_lock+0x36/0x50 [ 217.882349][ T7821] send_sigio+0x101/0x370 [ 217.886869][ T7821] kill_fasync+0x24d/0x4d0 [ 217.891476][ T7821] lease_break_callback+0x26/0x30 [ 217.896681][ T7821] __break_lease+0x6a2/0x1620 [ 217.901536][ T7821] vfs_truncate+0x428/0x520 [ 217.906207][ T7821] do_sys_truncate+0xdb/0x190 [ 217.911070][ T7821] __x64_sys_truncate+0x5b/0x70 [ 217.916090][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.920762][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.926829][ T7821] [ 217.929153][ T7821] [ 217.929153][ T7821] stack backtrace: [ 217.935057][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.0.468 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 217.935077][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.935088][ T7821] Call Trace: [ 217.935095][ T7821] [ 217.935103][ T7821] dump_stack_lvl+0x189/0x250 [ 217.935131][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.935155][ T7821] ? __pfx__printk+0x10/0x10 [ 217.935176][ T7821] validate_chain+0x1f05/0x2140 [ 217.935200][ T7821] __lock_acquire+0xab9/0xd20 [ 217.935224][ T7821] ? send_sigio+0x101/0x370 [ 217.935244][ T7821] lock_acquire+0x120/0x360 [ 217.935265][ T7821] ? send_sigio+0x101/0x370 [ 217.935286][ T7821] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 217.935310][ T7821] ? _raw_read_lock_irqsave+0xbb/0x100 [ 217.935342][ T7821] _raw_read_lock+0x36/0x50 [ 217.935363][ T7821] ? send_sigio+0x101/0x370 [ 217.935383][ T7821] send_sigio+0x101/0x370 [ 217.935404][ T7821] kill_fasync+0x24d/0x4d0 [ 217.935425][ T7821] ? kill_fasync+0x53/0x4d0 [ 217.935447][ T7821] lease_break_callback+0x26/0x30 [ 217.935471][ T7821] __break_lease+0x6a2/0x1620 [ 217.935498][ T7821] ? __pfx___break_lease+0x10/0x10 [ 217.935518][ T7821] ? mnt_get_write_access+0x68/0x2a0 [ 217.935541][ T7821] ? mnt_get_write_access+0x223/0x2a0 [ 217.935565][ T7821] vfs_truncate+0x428/0x520 [ 217.935578][ T7821] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.935606][ T7821] ? __pfx_vfs_truncate+0x10/0x10 [ 217.935619][ T7821] ? user_path_at+0x44/0x60 [ 217.935643][ T7821] do_sys_truncate+0xdb/0x190 [ 217.935657][ T7821] ? __pfx_do_sys_truncate+0x10/0x10 [ 217.935672][ T7821] ? rcu_is_watching+0x15/0xb0 [ 217.935699][ T7821] __x64_sys_truncate+0x5b/0x70 [ 217.935714][ T7821] do_syscall_64+0xfa/0x3b0 [ 217.935728][ T7821] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.935751][ T7821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.935766][ T7821] ? clear_bhb_loop+0x60/0xb0 [ 217.935783][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.935799][ T7821] RIP: 0033:0x7fc67778e929 [ 217.935817][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.935832][ T7821] RSP: 002b:00007fc678633038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 217.935848][ T7821] RAX: ffffffffffffffda RBX: 00007fc6779b6080 RCX: 00007fc67778e929 [ 217.935871][ T7821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 217.935881][ T7821] RBP: 00007fc677810b39 R08: 0000000000000000 R09: 0000000000000000 [ 217.935890][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.935899][ T7821] R13: 0000000000000000 R14: 00007fc6779b6080 R15: 00007fc677adfa28 [ 217.935915][ T7821] [ 218.245244][ T5928] usb 2-1: USB disconnect, device number 25 [ 218.320315][ T7828] fuse: Bad value for 'fd' [ 218.414591][ T5907] sony 0003:054C:024B.000D: unexpected long global item [ 218.422092][ T5907] sony 0003:054C:024B.000D: parse failed [ 218.427910][ T5907] sony 0003:054C:024B.000D: probe with driver sony failed with error -22 [ 218.555077][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 218.617604][ T9] usb 3-1: USB disconnect, device number 39 [ 218.705413][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 218.711834][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.722923][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.732943][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 218.742129][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.751341][ T10] usb 1-1: config 0 descriptor?? [ 219.163088][ T10] playstation 0003:054C:05C4.000E: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 219.360575][ T10] playstation 0003:054C:05C4.000E: Invalid byte count transferred, expected 16 got 0 [ 219.370103][ T10] playstation 0003:054C:05C4.000E: Failed to retrieve DualShock4 pairing info: -22 [ 219.379614][ T10] playstation 0003:054C:05C4.000E: Failed to get MAC address from DualShock4 [ 219.388433][ T10] playstation 0003:054C:05C4.000E: Failed to create dualshock4. [ 219.397114][ T10] playstation 0003:054C:05C4.000E: probe with driver playstation failed with error -22 [ 219.563602][ T10] usb 1-1: USB disconnect, device number 49