last executing test programs: 7.945431632s ago: executing program 3 (id=2562): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189c02) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_disconnect(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000140), 0x9) read(r1, 0x0, 0x0) 5.768441028s ago: executing program 4 (id=2570): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x7c5cb95b9e357564, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000400)={r5, 0x0, 0x1, '*'}, 0x9) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r5, 0x9, 0x5}, &(0x7f0000000080)=0xc) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 5.703895476s ago: executing program 3 (id=2571): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/66, 0x42}], 0x1, 0x8, 0xd) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) (async) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x500, 0x3c0, 0x0, @discrete={0x1ff, 0xf}}) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x91) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r4, 0x10000000) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a00010028bd70000000800002201000000000070010000008000300", @ANYRES32], 0x34}}, 0xea5bc50b619dd77e) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r7, 0x0, 0x0) syz_clone3(&(0x7f0000001000)={0x321a08000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000041424002bbd7000ffdbdf2508000100010000000800010002000000080001000200000008000100010010000800210002"], 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x4004000) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r6}}) 5.546843849s ago: executing program 4 (id=2572): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000001c0)="eadb50b9238764f0f68482fe05410e5795e8be76cddd289d396fd3666149", 0x1e}, {&(0x7f00000002c0)="dcc407bc02c8b6d78c41da2f53d83e50439dd60978f072dea6108731c9409215c34a1cedcec3583570b104856fa5d0ceb937b8cbe0e73658d962f593668f858d7a5ab2975c579e1c28a64e8d242b1b517a6129cecc16c029186175a7c9eb50e7959d4ed5507a3bcfc3229ca9ef3082ec81476f829de05fbab0809e7b4cc19e51fdad7b4508c3734774bc6ea1a609ab759cf9794c9f755f69c2c5c8306ac831ac875bd493c27b917aaedd554ba663e432bf96e5b9824cc61c687e5882194740951b3aadc748d355d0c528f895248d000000", 0xd1}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, 0x0}) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0x1, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0xb000, 0xd000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.428765356s ago: executing program 3 (id=2573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000040601010000000000000000050000070900020073797a32000000000900020073797a300000000005000100070000000900020073797a310000000079a9221827c37505d11f38c0d27b2226b6f2bfbc0809aeb33ea4fc0738d36f42f4b2b2090ea1e6d14095f9b2c7f509c530300417f840f3e11d6a4f3b9ed4daea23a39259b4897a5cbd55ddc79ec75cad1572c8077f93882b4588d241379786ec8d73d7a7f5f5"], 0x40}, 0x1, 0x0, 0x0, 0x20881}, 0x80) (async, rerun: 32) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async, rerun: 32) epoll_create1(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) (async) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) (async, rerun: 64) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) (async, rerun: 64) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200020c0000000000000000000000030006000000000002000000000000000000000000000000020001000000000000000900000000c0030005000000000002000000ac1414aa00200000000200080018000000342d320000000000"], 0x60}, 0x1, 0x7}, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000ff703e4e0329bd7000fbdbdf250c0000000c0004000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async, rerun: 32) socket$inet6(0xa, 0x800, 0x2) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5.308045752s ago: executing program 3 (id=2574): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'bridge_slave_1\x00', 0x5}) socket$nl_route(0x10, 0x3, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20044016) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b090000000000000109022400"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) socket$nl_sock_diag(0x10, 0x3, 0x4) 5.144931839s ago: executing program 1 (id=2575): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x50b000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102}}}}) 5.022066372s ago: executing program 2 (id=2576): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfba}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010200019e08f086dd", 0x0, 0x117, 0x60000000, 0x4f277c82e9f12f5f, 0x57, 0x0, 0x0, 0x8c2b18ea5f90c2af, 0x0, 0x3}, 0x2a) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.840106126s ago: executing program 1 (id=2577): syz_usb_connect(0x0, 0x397, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xde, 0x28, 0x40, 0x54c, 0x99, 0x4ba1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x385, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0xc, 0x79, 0x8f, 0xf4, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0x7, 0x4, 0x80, [@generic={0x7f, 0x20, "b314c90342c5ad9cc8b1324234dc8b568a3613b6f0482f0cad2ac1c348b8fdba1cc3354553ad649c3f81ec6afc4fc100325bd9f4a1229ed1dc5180073884bc1a2bcdb73fdbdc1a108b1594e05b96a195976dd6e189bc7cca01a3869d602ddfdf38e65fc76f15be721fc62d7a65c35fea8ea177c25ccc05d7361c77c475"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8ff}]}}, {{0x9, 0x5, 0x6, 0x2, 0x40, 0x8, 0x6, 0x4}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x3, 0x4, 0x9e, [@generic={0x7a, 0xc, "6f4aad9b31a0a9e8fbc4f2b51fa2c54866c2f0d781c2db51831f2524c07406cfd38fe15df16d166e577ba9a9292b11b7547208c61b2bf7d4913f7b3887050c1fe33c68fe4fa796fb7ac4232ccf3c6c5f848aff830e6f6156a5c037126b79e8f8da23a66ce610fe5bb6d7e90457cd3302bb6423240262422b"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x1, 0x97, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe1, 0xe}]}}, {{0x9, 0x5, 0x8a0425f695402485, 0xc, 0x10, 0x9, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x651c508379551910, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x3, 0x3, 0xba, [@generic={0xae, 0x22, "546743126a7384bb103970ca741792cbf7a0d6fa6b94af0a72fc3c2969c48d9bf2ca3232286f8345ed93df209dcbc7f4ded4fc26abe2f9170f8eb79d2f408ec1a4ddfea2d8028a20334c9c7532d6e1dc1872eddc340e039a494fbab64c5c2302869d00e1117cdb6a1146717419cca7b019c7117a91727f50803c2e413f6d07564960ba69edd3609f465db8cdd5dbbf4b9b3df7ba5c3cad5b34bfe5e1ec948da053362f3764595d1dd89624c8"}, @generic={0xcb, 0x21, "91ba7029c11b2228d3d3ced7b3d294c0228126bafe11d4b210a131e2b34df1a71a00682d33fcbb4603fb98575ecb26b557e56f0149f999ce1c95335bbd22695d80b76c285b0c08d1e059da3eb0e514362b2945726f4683b6131db6eabb1b63fd66697e1784013486398f3dc712094299fe6345139e773636ad842a084d3026343946c84c9c6f9b36e0eee14e6716f4c3418f6f8d63d826c9892b4c0ccb2abce71222b02551d3f58571f6c996fbbb383643f7fedb1c0c2a0b396b8248c2faa3d0b5a05e395c7f5cdfcb"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x6, 0x1e, 0x43, [@generic={0x6e, 0x10, "306aa4203c86accc9f0bcd1e271287ffca03e9957f7fa3b328601bda43f3f6dd952c245e4d999f4707e25f0c74c60fb3b9708a2003d5938c3c9839cca2ffebfe135c25a020c7f5240cc34d77825859fad0e0be17ff55e662ee32f76462ce761dae55e3be3dcddcbb2ccb3783"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x210, 0x60, 0x6, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x468, 0x7f, 0x2, 0x7b}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x5, 0xb}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x8, 0x5, 0x3, [@generic={0x4, 0x10, '$Z'}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x7, 0x8, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x1}]}}]}}]}}]}}, 0x0) 4.688850708s ago: executing program 2 (id=2578): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[], 0x9) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="632096ea2a206d00"], 0x8) socket$netlink(0x10, 0x3, 0x12) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r6, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x3, 0x5004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 4.520713365s ago: executing program 4 (id=2579): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x2af7, 0x0, 0x3, 0x38}, 0x0, 0x0) (async) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) 3.918731788s ago: executing program 0 (id=2580): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x0, 0x80000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0xf0, 0x8, &(0x7f0000000180)={0x0, "32803358cb21aeb52e0c838dac2ed6120fe0ed8827bb9fd999585a17e536a6de1c"}}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x100000}, 0x0, 0x0]) syz_emit_ethernet(0x12d9, &(0x7f00000002c0)={@remote, @remote, @void, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffff, 0x0, 0x1}], @ipv6=@gre_packet={0x4, 0x6, "cb0e6c", 0x1297, 0x2f, 0x0, @mcast1, @private0, {[@hopopts={0x49, 0x12, '\x00', [@generic={0x40, 0x90, "7204c3f99d657e8f5abdc9a87e45c268d5c9181be18b3d9106d36bcd2b967553449b55dd9ce6437cf64968b7ec3181881d56e4eedded0d38869819bffee9fdec813045405399870e11c9e2806f1c324340b3d078ae108e0b0b20f73671d6c7c97ba57ada04094680b81deb5ee9be97f349350a6e2e69e1eaace8c0e93982437517f01acbc2fb1c633955bb46d7f5f875"}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x11, 0x1, [], "372a16f92cfe7cfe529dc551f640c71aec"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xb4a, 0x1ff, 0x3], "2b4fe92171372d57823735ca7a47ae469d85624ebae9ad960aee629218734d2f06533ebaa56c2c60388a84307b682fbc884fdebc83f7adfb3342882bfcdde8770bda5b3f9cb295103b739d1ba82850096a427b9c21eedbf4278a301d784b1e5c52d75881d28dc7b015aae8eafc6df1a9cde166ad9f7a3b3b8a9ed4e60d1e169c0afe91b4aac29f8b32d6f60e0a1fcc0b867a90f264536d62332013ebfb140e8f03f5ed48f11303e9dd5b1b942e1701353b85218e24c49428acfad030d9044c8f9e8bb89e5925bb69c81c7e96fa9cffadfe15dfbf8db81c8f09e9c4a4e60023c26a4c80e05f99fcebafadb32f2914bc687b2a1dd444ed951bd5"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5], "a2774187fd6c85f3ca35aa4032280014ba5831e6564907dd6405c15fe2cf7648111fb8d7d270bdbdd15a024eaaf583f6fa610d8b1b7185b89db967eeb50f2b90109e8884045a601fa7147a1aeaaac27e262d9de4846289e0c1a295856abb58923ff51a79225eab8230034d0bd22be819ed71d9b26373d8a0092d2fa4d7c694e2cd66677dc3de81167067fce275edf8a1fbcdd58eb9310a49779d0a3464ccfbc084"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x6c, 0x1, 0x1, 0x1, 0x1}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0xfd, 0x3, 0x0, 0x0, 0x2, 0x5}, 0x2, {0x1ff, 0x68, 0x0, 0x9, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "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"}}}}}}}}, &(0x7f0000000080)={0x1, 0x3, [0x468, 0x3a4, 0x492, 0x228]}) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) syz_open_procfs(r3, &(0x7f00000000c0)='net/ip_mr_cache\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)={0x6}) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e0000002080007400000000010000d800e000380060001004e2200009e8adc333802000000d44a1625df6272b5b7135d0d3aa3bd8ce451b643537929dd264d338c6f4379594f734acd119cc239f8fa7b808f87402139da9439d9afbdcb569fe5831f6ba24202114edbfd5511b4707f2e7d457898f743341e764234c254cd54b2f90aaee1174841f0e9024a74cfcf81721ecf5d87986ddf4b22ca99a465c545be886b1f1a4d3f8199cc4ed7cf9363ec015d932836c27a07b4c42eb59bad4e501fa339b70236ff9d02f0eaef6f54ccce47293fafb4f35152dabd008bf954a576fa0b2260c26fc5aa3f469db32b3ee8f9d7ff6f3f31bc2a6276556b48cdf4a147debe7c142c810a41ad1a21010c9e057c0b172f7288016ed5287016bfa94a6e5b02198583b9c27c2b5bfbab6e5d050993726bc6f0ab8908a818"], 0x74}}, 0x0) 3.847887599s ago: executing program 4 (id=2581): unshare(0x6a040000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000ad0000/0x1000)=nil, 0x1000, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x9, @private2, 0x2}}}, &(0x7f0000000100)=0x84) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) splice(r0, 0x0, r2, 0x0, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x4, 0x0, 0x281ee, 0x106}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x6}]}}}]}, 0x74}}, 0x4004850) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea609000000000000001ac00400020208000200030001e104000300eab556a705251e008294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) set_mempolicy_home_node(&(0x7f0000acf000/0x2000)=nil, 0x2000, 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 3.745076166s ago: executing program 1 (id=2582): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c00168088000880840001807e0003"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getpeername$inet6(r0, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e000000200000000ffffffffac14140c"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r5 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x2012, r5, 0x1000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) 2.973975425s ago: executing program 0 (id=2583): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fcb49b000000000080b8785d96000100000000000000000000000000000000000000000000000100010300000000000000000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93e5240f45f819e01177d3d458ddc992861ac00", "f4bd0000008019000000000000000000000097c4d5e200", [0x0, 0x2000000000001]}}) 2.847997951s ago: executing program 2 (id=2584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000040001908faffffff00000000017c00000c00428008000a00060000000c00018006000600800a0001040002"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 2.713620633s ago: executing program 0 (id=2585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x2c, r3, 0x5, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x100000a}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20044000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x3b, 0x1, 0x2, "d30580c9043b98a900000800000000c21400000100", 0x82746a0f}) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) 2.673095161s ago: executing program 2 (id=2586): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42838, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x0, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) 2.640904555s ago: executing program 1 (id=2587): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) syz_clone(0x48824080, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000900000/0x3000)=nil, 0x3000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x22020600) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e657665"], 0x58}, 0x1, 0x2}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.49586931s ago: executing program 0 (id=2588): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_emit_ethernet(0x1ee, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0xff}, @hopopts={0x0, 0x2f, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x0, [0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x18a7, 0x73, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x72, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cb"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x8000000000000001, 0x0]}}]}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 2.453784173s ago: executing program 2 (id=2589): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x40, 0x2, 0x4, 0x1e, 0x2, 0x100000e}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0xc0000100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2276, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x5}}}}, {{@ip={@empty, @remote, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x809}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x1000004fe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 1.77079272s ago: executing program 3 (id=2590): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xd0d2447442b2ce4, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xd0d2447442b2ce4, 0x0) ioctl$TUNGETVNETLE(r0, 0xc0189436, &(0x7f0000001200)) 1.683640075s ago: executing program 1 (id=2591): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r0 = getpid() (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x50, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa11, 0xffffffff}, 0x0) (rerun: 32) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) (async) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) (async, rerun: 64) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) (async) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ce76000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000200"/28], 0x50) (async, rerun: 64) r9 = socket(0x1f, 0x4, 0x0) (async, rerun: 64) r10 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) syz_pidfd_open(r0, 0x0) (async, rerun: 64) syz_open_procfs$userns(r0, &(0x7f0000000040)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.637312323s ago: executing program 3 (id=2592): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'bridge_slave_1\x00', 0x5}) r7 = socket$nl_route(0x10, 0x3, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r6], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20044016) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b090000000000000109022400"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="250000007eea9695000000000000000034a1007a", @ANYRES32=0x0, @ANYBLOB="a42804000000000004001880040016801400030062726964676530000000000000000000"], 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.349850478s ago: executing program 0 (id=2593): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.295926001s ago: executing program 1 (id=2594): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/253, 0xfd, 0x6, 0xfb, 0x780, 0xe, 0x3}}, 0x120) (async) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/253, 0xfd, 0x6, 0xfb, 0x780, 0xe, 0x3}}, 0x120) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r1, 0xa, 0x21) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x5}, &(0x7f0000000000)=0x90) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x5}, &(0x7f0000000000)=0x90) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f00000001c0)=[{0x800, 0x1, 0x0, 0x0}, {0x1000, 0x1800, 0x0, 0x0}, {0x0, 0x3210, 0x0, 0x0}], 0x3}) 1.292469804s ago: executing program 2 (id=2595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) r7 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 680.673568ms ago: executing program 4 (id=2596): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fcb49b000000000080b8785d960001000000000000000000000000000000000000000000000000fe010300000000000000000600", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93e5240f45f819e01177d3d458ddc992861ac00", "f4bd0000008019000000000000000000000097c4d5e200", [0x0, 0x2000000000001]}}) 91.592197ms ago: executing program 4 (id=2597): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000e40)='P', 0x1}], 0x1, &(0x7f00000010c0)=[{0x10, 0x1, 0x24}], 0x10}}], 0x1, 0x5d2dd0c54751f8e3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, 0x0, 0x0, 0x24008900) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) 0s ago: executing program 0 (id=2598): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425841ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282203c00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73de43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548030000002563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f98153a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e45799ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x61901, 0x0) io_setup(0x202, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x6, 0x6}}}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xa}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): gistered device nBox DVB-T Dongle [ 604.138718][ T977] as10x_usb: device has been disconnected [ 604.160229][T13913] xt_hashlimit: overflow, rate too high: 0 [ 604.195804][T13913] xt_hashlimit: overflow, rate too high: 0 [ 604.208299][T13913] xt_hashlimit: overflow, rate too high: 0 [ 604.243603][ T5895] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 604.260960][T13913] xt_hashlimit: overflow, rate too high: 0 [ 604.278272][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.294388][ T5895] usb 4-1: device descriptor read/8, error -71 [ 604.295161][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.314518][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.333852][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.340345][T13913] xt_hashlimit: overflow, rate too high: 0 [ 604.352467][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.363656][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.374798][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.385947][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.399795][T13913] xt_hashlimit: overflow, rate too high: 0 [ 604.407582][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.422194][T13922] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 604.583197][ T5895] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 604.616122][ T5895] usb 4-1: device descriptor read/8, error -71 [ 604.723736][ T5895] usb usb4-port1: unable to enumerate USB device [ 605.299411][T13936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2150'. [ 605.457651][T13944] macvtap0: entered allmulticast mode [ 605.475941][T13944] veth0_macvtap: entered allmulticast mode [ 605.517305][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.540834][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.557660][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.614790][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.647730][T13944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2152'. [ 606.051253][T13962] netlink: 'syz.0.2158': attribute type 3 has an invalid length. [ 606.100423][T13962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2158'. [ 606.151129][T13962] netlink: 'syz.0.2158': attribute type 3 has an invalid length. [ 606.266476][T13962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2158'. [ 606.771859][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.814521][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.266539][T13984] netlink: 416 bytes leftover after parsing attributes in process `syz.0.2162'. [ 607.546884][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 608.127621][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2163'. [ 608.257627][ T30] audit: type=1326 audit(1765913411.100:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.0.2164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18b1d8f749 code=0x0 [ 608.622918][ T5888] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 608.777627][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 608.777665][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 608.777690][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 608.777715][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 608.859010][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.877640][ T5888] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 608.877672][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.877692][ T5888] usb 5-1: Product: syz [ 608.877706][ T5888] usb 5-1: Manufacturer: syz [ 608.877721][ T5888] usb 5-1: SerialNumber: syz [ 608.888566][ T5888] usb 5-1: config 0 descriptor?? [ 608.950488][T13994] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 608.986159][ T5888] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input49 [ 609.159424][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.159682][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.236704][ C1] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 609.237562][ T5895] usb 5-1: USB disconnect, device number 103 [ 609.483084][ T5921] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 609.622934][ T5888] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 609.633106][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 609.641851][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.662675][ T5921] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 609.672460][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.683456][ T5921] usb 1-1: Product: syz [ 609.690567][ T5921] usb 1-1: Manufacturer: syz [ 609.696330][ T5921] usb 1-1: SerialNumber: syz [ 609.709431][ T5921] usb 1-1: config 0 descriptor?? [ 609.729683][T14014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.739555][ T5921] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 609.761020][T14013] bond_slave_0: entered promiscuous mode [ 609.767050][T14013] bond_slave_1: entered promiscuous mode [ 609.772851][T14013] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 609.784317][T14013] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 609.795660][T14013] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 609.819861][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.830516][ T5902] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 609.848560][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 609.876045][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.909978][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 609.924975][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 609.948684][T14003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.957859][T14003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.973627][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 610.010886][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 610.020886][ T5888] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 610.030284][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 610.039726][ T5902] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 610.041644][T14021] loop2: detected capacity change from 0 to 7 [ 610.100260][T14021] Dev loop2: unable to read RDB block 7 [ 610.107365][T14021] loop2: AHDI p1 p2 p3 [ 610.112673][T14021] loop2: partition table partially beyond EOD, truncated [ 610.121517][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.137773][ T5888] usb 4-1: Manufacturer: syz [ 610.145464][T14021] loop2: p1 start 1818582900 is beyond EOD, truncated [ 610.154839][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.162828][T14021] loop2: p3 start 335544320 is beyond EOD, truncated [ 610.166100][ T5888] usb 4-1: config 0 descriptor?? [ 610.464475][ T5921] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 610.483096][ T5921] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 610.503644][ T5902] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.513584][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.521564][ T5902] usb 3-1: Product: syz [ 610.527873][ T5902] usb 3-1: Manufacturer: syz [ 610.536152][ T5902] usb 3-1: SerialNumber: syz [ 610.568566][ T5921] usb 1-1: USB disconnect, device number 113 [ 610.592823][ T977] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 610.758643][ T977] usb 5-1: config 0 has no interfaces? [ 610.767881][ T977] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 610.832180][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.861943][ T977] usb 5-1: config 0 descriptor?? [ 610.957318][ T5902] usb 3-1: 0:2 : does not exist [ 611.106294][T14022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.116442][T14022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.822556][ T5902] usb 3-1: USB disconnect, device number 109 [ 612.597805][ T5902] usb 4-1: USB disconnect, device number 100 [ 612.860761][T14057] x_tables: duplicate underflow at hook 2 [ 613.040245][T14061] ipvlan2: entered promiscuous mode [ 613.049450][T14061] bridge0: port 3(ipvlan2) entered blocking state [ 613.058165][T14061] bridge0: port 3(ipvlan2) entered disabled state [ 613.083877][T14061] ipvlan2: entered allmulticast mode [ 613.088091][ T5921] usb 5-1: USB disconnect, device number 104 [ 613.117234][T14061] bridge0: entered allmulticast mode [ 613.149385][T14061] ipvlan2: left allmulticast mode [ 613.156005][T14061] bridge0: left allmulticast mode [ 613.455727][T14066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.552858][ T977] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 613.707662][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 613.716166][ T977] usb 1-1: not running at top speed; connect to a high speed hub [ 613.725909][ T977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 613.737608][ T977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 613.760550][ T977] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 613.771952][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.780670][ T977] usb 1-1: Product: syz [ 613.791614][ T977] usb 1-1: Manufacturer: syz [ 613.797296][ T977] usb 1-1: SerialNumber: syz [ 613.822955][ T5888] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 613.973018][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 613.981444][ T5888] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 613.991606][ T5888] usb 3-1: config 1 has no interface number 1 [ 613.999234][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 614.025462][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 614.043451][ T977] usb 1-1: 0:2 : does not exist [ 614.050772][ T5888] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.075007][ T977] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 614.086613][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.097873][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.106782][ T5888] usb 3-1: Product: syz [ 614.111736][ T5888] usb 3-1: Manufacturer: syz [ 614.118194][ T5888] usb 3-1: SerialNumber: syz [ 614.129172][ T977] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 614.165957][ T977] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 614.179324][ T977] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 614.194309][ T977] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 614.217835][ T977] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 614.237627][ T977] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 614.278740][ T977] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 614.301404][ T977] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 614.329694][ T977] usb 1-1: USB disconnect, device number 114 [ 614.561653][ T5888] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 615.013730][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.047413][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.124254][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.157606][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.491548][ T5888] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 615.546552][ T5888] usb 3-1: USB disconnect, device number 110 [ 615.630502][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 615.853364][ T977] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 615.970963][T14107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2197'. [ 616.040636][ T977] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 616.040655][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.040666][ T977] usb 1-1: Product: syz [ 616.040675][ T977] usb 1-1: Manufacturer: syz [ 616.040683][ T977] usb 1-1: SerialNumber: syz [ 616.057960][ T977] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 616.126268][ T5916] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 616.345025][T14112] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 616.816981][ T30] audit: type=1326 audit(1765913419.650:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 616.871379][ T30] audit: type=1326 audit(1765913419.650:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 616.931728][ T30] audit: type=1326 audit(1765913419.650:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 617.183401][ T5916] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 617.196978][ T5916] ath9k_htc: Failed to initialize the device [ 617.236120][ T30] audit: type=1326 audit(1765913419.650:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 617.243443][T14126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2203'. [ 617.308016][ T977] IPVS: starting estimator thread 0... [ 617.329487][ T5916] usb 1-1: ath9k_htc: USB layer deinitialized [ 617.378503][ T30] audit: type=1326 audit(1765913419.650:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 617.414128][T14132] IPVS: using max 31 ests per chain, 74400 per kthread [ 617.493716][ T30] audit: type=1326 audit(1765913419.650:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 617.545530][ T30] audit: type=1326 audit(1765913419.650:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 617.739375][ T30] audit: type=1326 audit(1765913419.650:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 617.863591][ T30] audit: type=1326 audit(1765913419.660:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 618.005042][ T30] audit: type=1326 audit(1765913419.770:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14089 comm="syz.0.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 618.578553][ T977] usb 1-1: USB disconnect, device number 115 [ 620.025950][T14168] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 620.259689][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2214'. [ 620.654698][T14178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2219'. [ 620.696586][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 620.816537][T14191] netlink: 'syz.3.2217': attribute type 8 has an invalid length. [ 620.841829][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 621.771112][T14182] team0 (unregistering): Port device team_slave_0 removed [ 621.790276][T14182] team0 (unregistering): Port device team_slave_1 removed [ 621.994213][T14213] loop2: detected capacity change from 0 to 7 [ 622.024041][T14213] Dev loop2: unable to read RDB block 7 [ 622.031228][T14213] loop2: unable to read partition table [ 622.040342][T14213] loop2: partition table beyond EOD, truncated [ 622.049811][T14213] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 622.208344][T14218] netlink: 'syz.2.2225': attribute type 11 has an invalid length. [ 622.362018][T14221] loop4: detected capacity change from 0 to 7 [ 622.375623][T14221] Dev loop4: unable to read RDB block 7 [ 622.381564][T14221] loop4: AHDI p2 p3 [ 622.387537][T14221] loop4: partition table partially beyond EOD, truncated [ 622.404488][T14221] loop4: p2 start 1702059890 is beyond EOD, truncated [ 622.624093][T14227] fuse: Invalid uid '00000000000000000000003' [ 622.786508][T14236] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 623.378215][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 623.387726][T14246] bridge_slave_1: left allmulticast mode [ 623.394774][T14246] bridge_slave_1: left promiscuous mode [ 623.400639][T14246] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.410284][T14246] bridge_slave_0: left allmulticast mode [ 623.416534][T14246] bridge_slave_0: left promiscuous mode [ 623.422356][T14246] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.823453][ T977] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 623.880178][T14253] loop2: detected capacity change from 0 to 7 [ 623.907586][ T6654] Dev loop2: unable to read RDB block 7 [ 623.913820][ T6654] loop2: unable to read partition table [ 623.919875][ T6654] loop2: partition table beyond EOD, truncated [ 623.929011][T14253] Dev loop2: unable to read RDB block 7 [ 623.937140][T14253] loop2: unable to read partition table [ 623.943285][T14253] loop2: partition table beyond EOD, truncated [ 623.949719][T14253] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 623.992901][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 624.004902][ T977] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 624.019075][ T977] usb 5-1: config 0 has no interface number 0 [ 624.026674][ T977] usb 5-1: config 0 interface 119 has no altsetting 0 [ 624.047402][ T977] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 624.056675][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.064960][ T977] usb 5-1: Product: syz [ 624.069344][ T977] usb 5-1: Manufacturer: syz [ 624.074319][ T977] usb 5-1: SerialNumber: syz [ 624.081249][ T977] usb 5-1: config 0 descriptor?? [ 624.302971][T14262] netlink: 'syz.1.2238': attribute type 3 has an invalid length. [ 624.536621][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.552908][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.025195][ T977] usb 5-1: USB disconnect, device number 105 [ 625.493075][ T977] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 625.610905][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2242'. [ 625.642941][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2242'. [ 625.678805][ T977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 625.689128][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.698812][ T977] usb 5-1: Product: syz [ 625.739194][ T977] usb 5-1: Manufacturer: syz [ 625.753262][ T977] usb 5-1: SerialNumber: syz [ 625.769074][ T977] usb 5-1: config 0 descriptor?? [ 625.902277][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.913331][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.913498][T14289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.930987][T14289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.941053][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.953262][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.013020][ T5921] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 626.024685][ T977] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 626.043060][ T5923] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 626.164926][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.175210][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 626.184623][ T5921] usb 3-1: config 1 has no interface number 0 [ 626.190966][ T5921] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.204259][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 626.211646][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 626.221233][ T5923] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 626.231309][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.240624][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.246493][T14273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.251651][ T5921] usb 3-1: Product: syz [ 626.263884][ T5923] usb 4-1: config 0 has no interface number 0 [ 626.270007][ T5923] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 626.281115][ T5921] usb 3-1: Manufacturer: syz [ 626.285290][T14273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.286147][ T5921] usb 3-1: SerialNumber: syz [ 626.298400][ T5923] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 626.310320][ T5923] usb 4-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 626.330347][ T5921] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 626.338964][ T5921] cdc_ncm 3-1:1.1: bind() failure [ 626.345242][ T5923] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 626.354644][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.367492][ T5923] usb 4-1: Product: syz [ 626.373484][ T5923] usb 4-1: Manufacturer: syz [ 626.378261][ T5923] usb 4-1: SerialNumber: syz [ 626.389209][ T5923] usb 4-1: config 0 descriptor?? [ 626.403811][T14282] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 626.784399][ T5916] usb 3-1: USB disconnect, device number 111 [ 626.815581][T14302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.828462][T14302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.843149][T14302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.870726][T14302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.958302][ T5923] usb 4-1: NFC: intf ffff88801eee3000 id ffffffff8e93ede0 [ 626.980603][ T5923] usb 4-1: USB disconnect, device number 101 [ 627.431285][T14307] netlink: 'syz.4.2241': attribute type 2 has an invalid length. [ 627.445273][T14307] : entered promiscuous mode [ 627.694791][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 627.694808][T14315] openvswitch: netlink: Flow actions attr not present in new flow. [ 628.136731][ T977] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 628.293155][ T5923] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 628.433324][ T5923] usb 3-1: device descriptor read/64, error -71 [ 628.569602][ T977] usb 5-1: USB disconnect, device number 106 [ 628.783039][ T5923] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 628.804639][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 628.816313][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'. [ 628.923089][ T5923] usb 3-1: device descriptor read/64, error -71 [ 629.263384][ T5923] usb usb3-port1: attempt power cycle [ 629.271893][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 629.793518][ T5923] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 629.816330][ T5923] usb 3-1: device descriptor read/8, error -71 [ 629.884644][T14360] loop2: detected capacity change from 0 to 7 [ 629.885875][T14360] Dev loop2: unable to read RDB block 7 [ 629.885896][T14360] loop2: AHDI p1 p2 p3 [ 629.885911][T14360] loop2: partition table partially beyond EOD, truncated [ 629.887037][T14360] loop2: p1 start 1818582900 is beyond EOD, truncated [ 629.887050][T14360] loop2: p3 start 335544320 is beyond EOD, truncated [ 630.103109][ T5923] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 630.135099][ T5923] usb 3-1: device descriptor read/8, error -71 [ 630.220373][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 630.234670][T14365] openvswitch: netlink: Flow actions attr not present in new flow. [ 630.243910][ T5923] usb usb3-port1: unable to enumerate USB device [ 630.429135][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.499462][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.511734][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.545380][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.649287][ T5916] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 631.680830][T14386] loop2: detected capacity change from 0 to 7 [ 631.688726][ T5916] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 631.710546][T14386] Dev loop2: unable to read RDB block 7 [ 631.728715][T14386] loop2: AHDI p1 p2 p3 [ 631.733490][T14386] loop2: partition table partially beyond EOD, truncated [ 631.741343][T14386] loop2: p1 start 1818582900 is beyond EOD, truncated [ 631.750041][T14386] loop2: p3 start 335544320 is beyond EOD, truncated [ 633.593100][T14421] netlink: 'syz.1.2278': attribute type 1 has an invalid length. [ 633.636317][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2278'. [ 633.650358][T14421] gretap2: entered allmulticast mode [ 633.659101][T14421] bond3: (slave gretap2): making interface the new active one [ 633.673680][T14421] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 634.234133][T14432] syzkaller0: entered promiscuous mode [ 634.436915][T14432] syzkaller0: entered allmulticast mode [ 634.465989][T14432] tipc: Started in network mode [ 634.471391][T14432] tipc: Node identity , cluster identity 4711 [ 634.532889][T14432] tipc: Failed to obtain node identity [ 634.556893][T14432] tipc: Enabling of bearer rejected, failed to enable media [ 634.631930][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'. [ 634.655754][T14442] fuse: Unknown parameter 'ÇÊȬÎ/÷a“å¤_»¢±fjŸŒ)*›ŒÈe¼>4Iàb‡¢»|*Ût‹•E'Žó8cˆŒÓñmI—zc &±»ãä{±unß^ƒ.JŽóT°Æ‰»g+«(Íà9a¹”´wÎ8µˆ#žDWjéÉZìH\‰·(x×;ö{Ç·Ò' [ 634.801331][T14446] loop2: detected capacity change from 0 to 7 [ 634.845841][T14446] Dev loop2: unable to read RDB block 7 [ 634.859051][T14446] loop2: AHDI p1 p2 p3 [ 634.865109][T14446] loop2: partition table partially beyond EOD, truncated [ 635.018297][ T5916] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 635.023930][T14447] syz.4.2284 (14447): /proc/14439/oom_adj is deprecated, please use /proc/14439/oom_score_adj instead. [ 635.100143][T14446] loop2: p1 start 1818582900 is beyond EOD, truncated [ 635.113186][T14446] loop2: p3 start 335544320 is beyond EOD, truncated [ 635.205515][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 635.220112][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 635.258532][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 635.299307][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.370704][T14436] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.378336][T14436] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.400472][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.554757][T14452] input: syz1 as /devices/virtual/input/input52 [ 635.670614][T14455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.755086][T14456] sctp: [Deprecated]: syz.0.2286 (pid 14456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.755086][T14456] Use struct sctp_sack_info instead [ 635.803889][T14455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.846753][T14456] program syz.0.2286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.871827][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 635.928801][T14456] 8021q: VLANs not supported on ip6gre0 [ 636.059733][ T5916] usb 4-1: USB disconnect, device number 102 [ 636.145866][ T5888] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 636.378971][ T5888] usb 5-1: config 0 has no interfaces? [ 636.412443][ T5888] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 636.440900][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.441032][T14467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2290'. [ 636.504494][ T5888] usb 5-1: Product: syz [ 636.524792][ T5888] usb 5-1: Manufacturer: syz [ 636.632988][ T5888] usb 5-1: SerialNumber: syz [ 636.649233][ T5888] usb 5-1: config 0 descriptor?? [ 636.873983][ T5888] usb 5-1: USB disconnect, device number 107 [ 637.616252][T14475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.767789][T14475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.778261][T14494] loop2: detected capacity change from 0 to 7 [ 637.789517][ T6654] Dev loop2: unable to read RDB block 7 [ 637.844560][ T6654] loop2: AHDI p1 p2 p3 [ 637.856399][ T6654] loop2: partition table partially beyond EOD, truncated [ 637.869121][ T6654] loop2: p1 start 1818582900 is beyond EOD, truncated [ 637.881041][ T6654] loop2: p3 start 335544320 is beyond EOD, truncated [ 637.900215][T14494] Dev loop2: unable to read RDB block 7 [ 637.916320][T14494] loop2: AHDI p1 p2 p3 [ 637.927765][T14494] loop2: partition table partially beyond EOD, truncated [ 637.936918][T14494] loop2: p1 start 1818582900 is beyond EOD, truncated [ 637.944768][T14494] loop2: p3 start 335544320 is beyond EOD, truncated [ 638.129556][T14497] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 638.165689][ T2116] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.182547][ T2116] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 638.240572][T14497] batadv0: left allmulticast mode [ 638.245741][T14497] batadv0: left promiscuous mode [ 638.250980][T14497] bridge0: port 3(batadv0) entered disabled state [ 638.343221][T14501] netlink: 'syz.1.2297': attribute type 5 has an invalid length. [ 638.352013][T14497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.368556][T14497] batadv0: entered promiscuous mode [ 638.435874][T14497] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 638.455559][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 638.455570][ T30] audit: type=1326 audit(1765913441.300:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.500272][T14499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.513042][T14499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.538091][ T30] audit: type=1326 audit(1765913441.330:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.568857][T14499] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 638.568857][ T30] audit: type=1326 audit(1765913441.330:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.568899][ T30] audit: type=1326 audit(1765913441.330:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.626826][ T30] audit: type=1326 audit(1765913441.350:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.651886][ T30] audit: type=1326 audit(1765913441.350:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.659685][T14499] batman_adv: batadv0: Removing interface: virt_wifi0 [ 638.683377][ T30] audit: type=1326 audit(1765913441.370:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.707165][ T30] audit: type=1326 audit(1765913441.370:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.730696][ T30] audit: type=1326 audit(1765913441.370:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.763575][ T30] audit: type=1326 audit(1765913441.370:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14504 comm="syz.0.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 638.825064][T14499] bond0: (slave batadv0): Releasing backup interface [ 638.867892][ T2116] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.883557][ T2116] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 638.912411][ T2116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.963918][ T2116] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.016640][ T2116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.036573][ T2116] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 639.245396][T14516] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2302'. [ 639.323633][ T5888] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 639.504639][ T5888] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.519288][ T5888] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 36, changing to 9 [ 639.554907][ T5888] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 639.601565][ T5888] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 639.620990][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.650137][T14509] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 640.294029][ T977] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 640.473599][ T5888] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 640.565776][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 640.600996][ T977] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 640.609549][ T977] usb 3-1: config 0 has no interface number 0 [ 640.616299][ T5888] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input53 [ 640.682770][ T977] usb 3-1: config 0 interface 230 has no altsetting 0 [ 640.704343][ T977] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 640.713977][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.722135][ T977] usb 3-1: Product: syz [ 640.757406][ T5888] usb 1-1: USB disconnect, device number 117 [ 640.757444][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 640.777065][ T977] usb 3-1: Manufacturer: syz [ 640.781685][ T977] usb 3-1: SerialNumber: syz [ 640.803422][ T977] usb 3-1: config 0 descriptor?? [ 640.825909][ T977] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 641.018358][ T977] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 641.805918][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 641.805944][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 641.917581][T14559] sock: sock_set_timeout: `syz.4.2312' (pid 14559) tries to set negative timeout [ 642.358116][T14572] fuse: Bad value for 'user_id' [ 642.422382][T14572] fuse: Bad value for 'user_id' [ 642.633041][T14588] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2316'. [ 643.395963][ T977] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 643.411292][ T977] usb 3-1: USB disconnect, device number 116 [ 643.753139][ T977] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 643.922806][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 643.930985][ T977] usb 3-1: unable to get BOS descriptor or descriptor too short [ 643.974253][ T977] usb 3-1: config 7 has an invalid interface number: 79 but max is 0 [ 644.022908][ T977] usb 3-1: config 7 has no interface number 0 [ 644.039602][ T977] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 644.070105][ T977] usb 3-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 644.107226][ T977] usb 3-1: config 7 interface 79 has no altsetting 0 [ 644.132182][ T977] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 644.148589][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.181993][ T977] usb 3-1: Product: syz [ 644.201922][ T977] usb 3-1: Manufacturer: syz [ 644.238897][ T977] usb 3-1: SerialNumber: syz [ 644.541061][ T977] usb 3-1: USB disconnect, device number 117 [ 644.587211][T14614] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 644.648701][T14614] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.657619][T14614] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.273198][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 645.282446][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 645.529337][T14624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.538693][T14624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.590770][T14624] xt_hashlimit: size too large, truncated to 1048576 [ 645.623892][T14624] xt_hashlimit: max too large, truncated to 1048576 [ 645.982817][ T5916] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 646.143178][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 646.202369][ T5916] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 646.212492][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.541321][T14654] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2334'. [ 646.583579][ T5916] pvrusb2: Hardware description: Terratec Grabster AV400 [ 646.596565][ T5916] pvrusb2: ********** [ 646.605362][ T5916] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 646.617592][ T5916] pvrusb2: Important functionality might not be entirely working. [ 646.670952][ T5916] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 646.723101][ T977] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 646.755505][ T5916] pvrusb2: ********** [ 646.768213][ T2345] pvrusb2: Invalid write control endpoint [ 646.818633][ T2345] pvrusb2: Invalid write control endpoint [ 646.830698][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 646.860093][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 646.879207][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 646.898885][ T2345] pvrusb2: Device being rendered inoperable [ 646.911750][ T977] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 646.920934][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.939716][ T977] usb 3-1: Product: syz [ 646.947815][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 646.957465][ T977] usb 3-1: Manufacturer: syz [ 647.013062][ T977] usb 3-1: SerialNumber: syz [ 647.021621][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 647.057551][ T977] usb 3-1: config 0 descriptor?? [ 647.065869][ T2345] pvrusb2: Attached sub-driver cx25840 [ 647.255731][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.273229][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 647.295659][ T977] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 647.703151][ T977] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 647.901789][ T977] usb 3-1: USB disconnect, device number 118 [ 647.960432][ T6654] udevd[6654]: setting mode of /dev/video103 to 020660 failed: No such file or directory [ 648.012061][ T6654] udevd[6654]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 648.550269][ T5916] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 648.694232][ T977] usb 1-1: USB disconnect, device number 118 [ 648.740460][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 648.749694][ T5916] usb 4-1: not running at top speed; connect to a high speed hub [ 648.761694][ T5916] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 648.774483][ T5916] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 648.790549][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.803420][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.811775][ T5916] usb 4-1: Product: syz [ 648.818994][ T5916] usb 4-1: Manufacturer: syz [ 648.826325][ T5916] usb 4-1: SerialNumber: syz [ 648.839044][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 648.868666][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2343'. [ 649.054025][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.080343][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.104683][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.125706][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.162219][ T5916] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 649.212956][ T5916] usb 4-1: USB disconnect, device number 103 [ 649.490688][T14697] tipc: Started in network mode [ 649.496259][T14697] tipc: Node identity , cluster identity 4711 [ 649.502438][T14697] tipc: Failed to obtain node identity [ 649.510122][T14697] tipc: Enabling of bearer rejected, failed to enable media [ 649.673447][ T5895] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 649.834730][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 649.862248][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 649.880810][ T5895] usb 3-1: not running at top speed; connect to a high speed hub [ 649.905899][ T5895] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 649.930531][ T5895] usb 3-1: config 0 has no interface number 0 [ 650.001906][ T5895] usb 3-1: config 0 interface 93 has no altsetting 0 [ 650.020673][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 650.031100][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.039613][ T5895] usb 3-1: Product: ã  [ 650.044183][ T5895] usb 3-1: Manufacturer: 〉 [ 650.049036][ T5895] usb 3-1: SerialNumber: 羱騥໦ﴙ⭘⿒鼲ë‰é¼†â‘’磥è¸í˜¼ì†Šé½éœ´ãžŽï£¿á©©ë€€â‡¼ç¥·ç™Šä™¶äŽ¬å‘¢ïƒ§è¥šã³‡ã§™íœ½éª³î¨‰ç¢‡äŠºè¤é¥¤í„‰ï›¢â­¹å½‹á‚穘å¸ç©Œæ‰ì„©î”䪃찕徽힫ꬭ꧓⦓蕹ê è¾¹â¨¿à¤ã¶íŠ“헥ꢅ즔够ï°è‡ŠÈ®é½è¤‹êœƒè‰˜ä¶å•´Ú›é´î˜™áŸŠá®³ì¼‹äƒ„籱봌땤䞄ⴹ硦䡮á¹æ«ê¾»âž‹å­¹ãµ»ê‚禞縮㬪쵕첮뙎ì€éŸ¾ [ 650.205611][ T5895] usb 3-1: config 0 descriptor?? [ 650.562226][T14726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.571534][T14726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.616016][T14731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.675416][ T977] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 650.691067][ T5895] usb 3-1: unknown interface protocol 0x1a, assuming v1 [ 650.699075][ T5895] usb 3-1: cannot find UAC_HEADER [ 650.734443][T14731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.830240][ T5895] snd-usb-audio 3-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 650.870615][ T5895] usb 3-1: USB disconnect, device number 119 [ 651.042999][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 651.052420][ T977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 651.076746][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 651.117323][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 651.132432][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.143833][ T977] usb 5-1: Product: syz [ 651.155330][ T977] usb 5-1: Manufacturer: syz [ 651.171386][ T977] usb 5-1: SerialNumber: syz [ 651.203513][ T977] usb 5-1: config 0 descriptor?? [ 651.221588][ T977] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 651.232339][ T977] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 651.920807][ T977] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 651.928039][ T977] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 652.092953][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 652.119846][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 652.591617][ T977] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 652.599531][ T977] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 652.633012][ T5895] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 652.642935][ T5921] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 652.794787][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.806686][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.817140][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.833166][ T5895] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 652.848298][ T5895] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 652.880970][ T5921] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 652.931652][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.942930][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.960188][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 652.981154][ T5921] usb 3-1: config 0 descriptor?? [ 652.990105][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.023145][ T5895] usb 4-1: config 0 descriptor?? [ 653.033308][T14751] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 653.168105][ T977] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 653.183610][ T977] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 653.191994][ T977] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 653.283212][ T977] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 653.342047][ T977] usb 5-1: USB disconnect, device number 108 [ 653.780606][ T5921] hid-multitouch 0003:0EEF:72D0.002C: unbalanced collection at end of report description [ 653.806605][ T5921] hid-multitouch 0003:0EEF:72D0.002C: probe with driver hid-multitouch failed with error -22 [ 654.287582][ T5921] usb 3-1: USB disconnect, device number 120 [ 654.913025][ T5916] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 655.084820][ T5916] usb 1-1: config 8 has an invalid interface number: 80 but max is 0 [ 655.093388][ T5916] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 655.110487][ T5916] usb 1-1: config 8 has no interface number 0 [ 655.126252][ T5916] usb 1-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 655.158250][ T5916] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 655.178150][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.222172][ T5916] usb 1-1: NFC: intf ffff888077192000 id ffffffff8e93ede0 [ 655.265364][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 655.271425][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 655.292196][ T5895] usb 4-1: USB disconnect, device number 104 [ 655.362149][T14776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.427915][T14776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.430252][ T5916] usb 1-1: USB disconnect, device number 119 [ 655.506762][T14776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.553284][T14776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.940528][T14791] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 656.178754][T14798] loop2: detected capacity change from 0 to 7 [ 656.202498][T14798] Dev loop2: unable to read RDB block 7 [ 656.253096][T14798] loop2: unable to read partition table [ 656.281259][T14801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.323797][T14801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.331906][T14798] loop2: partition table beyond EOD, truncated [ 656.339721][T14798] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 656.462976][ T5895] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 656.555054][T14802] netlink: 'syz.4.2371': attribute type 27 has an invalid length. [ 656.856984][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 656.867832][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 656.879650][ T5895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 656.928984][ T5916] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 656.961566][ T5895] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 656.972488][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.983016][ T5895] usb 3-1: Product: syz [ 656.993289][ T5895] usb 3-1: Manufacturer: syz [ 657.003020][ T5895] usb 3-1: SerialNumber: syz [ 657.020679][ T5895] usb 3-1: config 0 descriptor?? [ 657.034154][T14797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 657.041514][T14797] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 657.058681][ T5895] usb 3-1: ucan: probing device on interface #0 [ 657.133073][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 657.144288][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.156059][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.237813][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 657.247053][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.255553][ T5916] usb 5-1: Product: syz [ 657.282390][ T5916] usb 5-1: Manufacturer: syz [ 657.300357][ T5916] usb 5-1: SerialNumber: syz [ 657.482225][T14816] loop2: detected capacity change from 0 to 7 [ 657.490558][T14816] Dev loop2: unable to read RDB block 7 [ 657.529637][T14816] loop2: unable to read partition table [ 657.558159][T14816] loop2: partition table beyond EOD, truncated [ 657.642902][T14816] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.585039][T14821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2379'. [ 659.022074][ T5895] ucan 3-1:0.0: probe with driver ucan failed with error -110 [ 659.402919][T14824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 659.409506][T14824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 659.435665][T14824] vhci_hcd vhci_hcd.0: Device attached [ 659.511651][ T5916] usb 5-1: 0:2 : does not exist [ 659.524098][T14824] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 659.530746][T14824] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 659.568802][ T5916] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 659.594376][T14828] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 659.601104][T14828] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 659.626707][ T5916] usb 5-1: USB disconnect, device number 109 [ 659.682801][ T977] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 659.740037][T14824] vhci_hcd vhci_hcd.0: Device attached [ 659.750198][T14828] vhci_hcd vhci_hcd.0: Device attached [ 659.841454][T14843] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 659.848109][T14843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 659.867137][T14843] vhci_hcd vhci_hcd.0: Device attached [ 659.962297][T14850] syz_tun: entered allmulticast mode [ 660.183890][T14844] vhci_hcd: connection closed [ 660.184417][ T3419] vhci_hcd vhci_hcd.1: stop threads [ 660.194579][ T5895] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 660.203807][ T3419] vhci_hcd vhci_hcd.1: release socket [ 660.209988][T14833] vhci_hcd: connection closed [ 660.209991][ T3419] vhci_hcd vhci_hcd.1: disconnect device [ 660.222271][T14831] vhci_hcd: connection closed [ 660.222503][ T6108] vhci_hcd vhci_hcd.1: stop threads [ 660.233067][T14829] vhci_hcd: connection reset by peer [ 660.239201][ T5921] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 660.294216][ T6108] vhci_hcd vhci_hcd.1: release socket [ 660.301096][ T6108] vhci_hcd vhci_hcd.1: disconnect device [ 660.312461][ T6108] vhci_hcd vhci_hcd.1: stop threads [ 660.318799][ T6108] vhci_hcd vhci_hcd.1: release socket [ 660.324954][ T6108] vhci_hcd vhci_hcd.1: disconnect device [ 660.332042][ T6108] vhci_hcd vhci_hcd.1: stop threads [ 660.338194][ T6108] vhci_hcd vhci_hcd.1: release socket [ 660.344596][ T6108] vhci_hcd vhci_hcd.1: disconnect device [ 660.374184][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 660.380900][ T5895] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 660.389873][ T5895] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 660.431723][ T5888] usb 3-1: USB disconnect, device number 121 [ 660.451124][ T5895] usb 1-1: config 166 has no interface number 0 [ 660.458555][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 660.478374][ T5921] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 660.490826][ T5895] usb 1-1: config 166 has no interface number 1 [ 660.516226][ T5921] usb 4-1: config 0 has no interface number 0 [ 660.523160][ T5895] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 660.536220][ T5921] usb 4-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 660.592178][ T5895] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 660.612650][ T5921] usb 4-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 660.633715][ T5895] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 660.645208][ T5895] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 660.657919][ T5895] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 660.680896][ T5921] usb 4-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 660.690494][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.699439][ T5921] usb 4-1: Product: syz [ 660.704146][ T5895] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 660.714665][ T5921] usb 4-1: Manufacturer: syz [ 660.720358][ T5921] usb 4-1: SerialNumber: syz [ 660.730787][ T5895] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 660.743809][ T5895] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 660.755026][ T5921] usb 4-1: config 0 descriptor?? [ 660.760654][T14850] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 660.768879][ T5895] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 660.783748][ T5921] ftdi_sio 4-1:0.39: FTDI USB Serial Device converter detected [ 660.793297][ T5921] usb 4-1: Detected SIO [ 660.798138][ T5895] usb 1-1: config 166 interface 177 has no altsetting 0 [ 660.805651][ T5921] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 660.813372][ T5888] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 660.818672][ T5895] usb 1-1: config 166 interface 34 has no altsetting 0 [ 660.844997][T14855] loop2: detected capacity change from 0 to 7 [ 660.855117][ T5895] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 660.855421][T14855] Dev loop2: unable to read RDB block 7 [ 660.870065][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.878746][ T5895] usb 1-1: Product: syz [ 660.879083][T14855] loop2: AHDI p1 p2 p3 [ 660.883319][ T5895] usb 1-1: Manufacturer: syz [ 660.915107][ T5895] usb 1-1: SerialNumber: syz [ 660.915167][T14855] loop2: partition table partially beyond EOD, truncated [ 660.928739][T14855] loop2: p1 start 1818582900 is beyond EOD, truncated [ 660.940992][T14855] loop2: p3 start 335544320 is beyond EOD, truncated [ 660.995465][T14850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.004480][T14850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.018125][ T5888] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 661.034700][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 661.056337][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 661.102224][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.126547][ T5888] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 661.143179][ T5895] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 661.145008][ T5888] usb 3-1: Manufacturer: syz [ 661.172921][ T5888] usb 3-1: SerialNumber: syz [ 661.198254][ T5921] usb 4-1: USB disconnect, device number 105 [ 661.205688][T14857] syz_tun: left allmulticast mode [ 661.225878][ T5921] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 661.235982][ T5921] ftdi_sio 4-1:0.39: device disconnected [ 661.345060][ T5895] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 661.427661][T14853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.437956][T14853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.449206][ T5888] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 661.465517][ T5888] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 661.488441][ T5888] usb 3-1: USB disconnect, device number 122 [ 661.623227][ T5895] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 661.666630][T14871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.681158][T14871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.779015][ T5895] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 661.787322][ T5895] uvcvideo 1-1:166.34: No valid video chain found. [ 661.799899][ T5895] usb 1-1: USB disconnect, device number 120 [ 662.633905][T14889] netlink: 'syz.2.2392': attribute type 12 has an invalid length. [ 662.962969][ T5902] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 663.114495][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 663.124643][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 663.137519][ T5902] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 663.165235][ T5902] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 663.176133][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.184483][ T5902] usb 5-1: Product: syz [ 663.189236][ T5902] usb 5-1: Manufacturer: syz [ 663.194910][ T5902] usb 5-1: SerialNumber: syz [ 663.203513][ T5902] usb 5-1: config 0 descriptor?? [ 663.210801][T14891] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 663.218442][T14891] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 663.229109][ T5902] usb 5-1: ucan: probing device on interface #0 [ 663.572944][ T5895] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 663.738472][T14908] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2398'. [ 663.750637][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 663.764719][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 663.828628][T14912] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2397'. [ 663.839058][T14909] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2398'. [ 664.221855][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 664.260346][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 664.287720][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 664.345614][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 664.406441][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 664.432866][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.441446][T14918] netlink: 'syz.2.2399': attribute type 11 has an invalid length. [ 664.853275][ T977] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 664.891516][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.935833][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.253761][ T5902] ucan 5-1:0.0: probe with driver ucan failed with error -110 [ 665.343407][ T5921] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 665.513269][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 665.520510][ T5921] usb 3-1: config 3 has an invalid interface number: 171 but max is 29 [ 665.529396][ T5921] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 665.540660][ T5921] usb 3-1: config 3 has no interface number 0 [ 665.547725][ T5921] usb 3-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 665.558057][ T5921] usb 3-1: config 3 interface 171 has no altsetting 0 [ 665.568377][ T5921] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 665.577827][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 665.586915][ T5921] usb 3-1: Product: syz [ 665.591271][ T5921] usb 3-1: Manufacturer: syz [ 665.596212][ T5921] usb 3-1: SerialNumber: syz [ 665.692807][ T5923] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 665.818694][ T5921] as10x_usb: device has been detected [ 665.825752][ T5921] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 665.840088][ T5921] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 665.849963][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 665.859421][ T5923] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.874852][ T5921] as10x_usb: error during firmware upload part1 [ 665.881963][ T5921] Registered device Sky IT Digital Key (green led) [ 665.884477][ T5921] usb 3-1: USB disconnect, device number 123 [ 665.897462][ T5923] usb 1-1: config 1 interface 0 has no altsetting 0 [ 665.906744][ T5923] usb 1-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.40 [ 665.917204][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.926610][ T5923] usb 1-1: Product: syz [ 665.931915][ T5923] usb 1-1: SerialNumber: syz [ 665.942090][ T5921] Unregistered device Sky IT Digital Key (green led) [ 665.944624][ T5921] as10x_usb: device has been disconnected [ 666.106380][ T5902] usb 5-1: USB disconnect, device number 110 [ 666.117820][ T5916] usb usb36-port1: attempt power cycle [ 666.191413][ T5895] usb 4-1: usb_control_msg returned -71 [ 666.197102][ T5895] usbtmc 4-1:16.0: can't read capabilities [ 666.217011][ T5895] usb 4-1: USB disconnect, device number 106 [ 666.379182][T14927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.393495][T14927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.460804][ T5923] usbhid 1-1:1.0: can't add hid device: -71 [ 666.513540][T14943] loop2: detected capacity change from 0 to 7 [ 666.519826][ T5923] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 666.539535][ T5923] usb 1-1: USB disconnect, device number 121 [ 666.545972][T14943] Dev loop2: unable to read RDB block 7 [ 666.566176][T14943] loop2: AHDI p1 p2 p3 [ 666.571331][T14943] loop2: partition table partially beyond EOD, truncated [ 666.591536][T14943] loop2: p1 start 1818582900 is beyond EOD, truncated [ 666.606277][T14943] loop2: p3 start 335544320 is beyond EOD, truncated [ 666.707448][ T5916] usb usb36-port1: unable to enumerate USB device [ 667.072787][ T5916] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 667.241920][ T5916] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 667.269448][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.391912][ T5916] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 667.402152][ T5916] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 667.412399][ T5916] usb 5-1: Manufacturer: syz [ 667.421695][ T5916] usb 5-1: config 0 descriptor?? [ 667.491880][ T5916] rc_core: IR keymap rc-hauppauge not found [ 667.498751][ T5916] Registered IR keymap rc-empty [ 667.512312][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 667.541305][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 667.623980][ T5902] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 667.637399][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 667.794808][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 667.817533][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 667.873811][ T5902] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 667.897213][ T5902] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 667.936990][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.955397][ T5902] usb 1-1: Product: syz [ 667.969846][ T5902] usb 1-1: Manufacturer: syz [ 667.979950][ T5902] usb 1-1: SerialNumber: syz [ 667.994138][ T5902] usb 1-1: config 0 descriptor?? [ 668.005803][T14969] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 668.015913][T14969] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 668.039050][ T5902] usb 1-1: ucan: probing device on interface #0 [ 668.068887][ T5916] usb 5-1: USB disconnect, device number 111 [ 669.018983][T14999] netlink: 'syz.4.2421': attribute type 11 has an invalid length. [ 669.146814][T15002] loop2: detected capacity change from 0 to 7 [ 669.156512][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.177319][T15002] Dev loop2: unable to read RDB block 7 [ 669.188589][T15002] loop2: AHDI p1 p2 p3 [ 669.195442][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.204336][T15002] loop2: partition table partially beyond EOD, truncated [ 669.215535][T15002] loop2: p1 start 1818582900 is beyond EOD, truncated [ 669.226527][T15002] loop2: p3 start 335544320 is beyond EOD, truncated [ 669.813297][ T5902] ucan 1-1:0.0: probe with driver ucan failed with error -110 [ 669.918010][T15016] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 669.977026][T15017] netlink: 'syz.3.2427': attribute type 2 has an invalid length. [ 670.352271][ C0] hrtimer: interrupt took 21910 ns [ 670.438753][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 670.438769][ T30] audit: type=1326 audit(1765913473.280:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b938f749 code=0x7ffc0000 [ 670.476346][T15039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.509833][ T5895] usb 1-1: USB disconnect, device number 122 [ 670.519698][T15039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.607135][ T30] audit: type=1326 audit(1765913473.320:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b938f749 code=0x7ffc0000 [ 670.640468][ T30] audit: type=1326 audit(1765913473.320:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94b938df90 code=0x7ffc0000 [ 670.759479][ T30] audit: type=1326 audit(1765913473.320:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94b938f34b code=0x7ffc0000 [ 670.803949][ T30] audit: type=1326 audit(1765913473.320:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94b938f34b code=0x7ffc0000 [ 670.829473][T15052] loop2: detected capacity change from 0 to 7 [ 670.836308][T15052] Dev loop2: unable to read RDB block 7 [ 670.842602][ T30] audit: type=1326 audit(1765913473.400:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b938f749 code=0x7ffc0000 [ 670.877137][T15052] loop2: AHDI p1 p2 p3 [ 670.878227][ T30] audit: type=1326 audit(1765913473.400:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15037 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b938f749 code=0x7ffc0000 [ 670.887401][T15052] loop2: partition table partially beyond EOD, truncated [ 671.001205][T15052] loop2: p1 start 1818582900 is beyond EOD, truncated [ 671.045678][T15052] loop2: p3 start 335544320 is beyond EOD, truncated [ 671.873662][ T5895] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 672.304417][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 672.311719][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.323472][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.363728][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 672.378031][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.400940][ T5895] usb 3-1: Product: syz [ 672.408355][ T5895] usb 3-1: Manufacturer: syz [ 672.424451][ T5895] usb 3-1: SerialNumber: syz [ 672.714120][T15097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2443'. [ 672.733733][ T5895] usb 3-1: 0:2 : does not exist [ 672.756256][ T5895] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 672.831074][ T5895] usb 3-1: USB disconnect, device number 124 [ 673.345520][ T5916] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 673.418484][T15109] loop2: detected capacity change from 0 to 7 [ 673.431547][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.440557][ T6654] Dev loop2: unable to read RDB block 7 [ 673.446354][ T6654] loop2: AHDI p1 p2 p3 [ 673.450658][ T6654] loop2: partition table partially beyond EOD, truncated [ 673.460953][ T6654] loop2: p1 start 1818582900 is beyond EOD, truncated [ 673.464171][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.468387][ T6654] loop2: p3 start 335544320 is beyond EOD, truncated [ 673.484833][T15109] Dev loop2: unable to read RDB block 7 [ 673.490424][T15109] loop2: AHDI p1 p2 p3 [ 673.496560][T15109] loop2: partition table partially beyond EOD, truncated [ 673.504379][T15109] loop2: p1 start 1818582900 is beyond EOD, truncated [ 673.511189][T15109] loop2: p3 start 335544320 is beyond EOD, truncated [ 673.514487][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 673.532990][ T5902] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 673.553311][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 673.573190][ T5916] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 673.586221][ T5916] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 673.601012][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.609471][ T5916] usb 1-1: Product: syz [ 673.614056][ T5916] usb 1-1: Manufacturer: syz [ 673.618680][ T5916] usb 1-1: SerialNumber: syz [ 673.636126][ T5916] usb 1-1: config 0 descriptor?? [ 673.642523][T15098] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 673.660944][T15098] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 673.682798][ T5895] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 673.712732][ T5916] usb 1-1: ucan: probing device on interface #0 [ 673.726993][ T5902] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 673.759909][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.790941][ T5902] usb 5-1: config 0 descriptor?? [ 673.829300][ T5902] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 673.842844][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 673.867609][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.899265][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.942795][ T5895] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 673.951880][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.992844][ T977] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 674.006952][ T5895] usb 3-1: config 0 descriptor?? [ 674.026124][ T5895] hub 3-1:0.0: bad descriptor, ignoring hub [ 674.043961][ T5895] hub 3-1:0.0: probe with driver hub failed with error -5 [ 674.053683][ T5895] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 674.162864][ T977] usb 4-1: device descriptor read/64, error -71 [ 674.402910][ T977] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 674.444700][T15100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.468052][T15100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.533527][ T977] usb 4-1: device descriptor read/64, error -71 [ 674.583767][ T5895] usb 3-1: USB disconnect, device number 125 [ 674.644015][ T977] usb usb4-port1: attempt power cycle [ 674.684913][ T5902] gspca_stv06xx: I2C: Read error writing address: -71 [ 674.699777][ T5902] usb 5-1: USB disconnect, device number 112 [ 674.992814][ T977] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 675.013771][ T977] usb 4-1: device descriptor read/8, error -71 [ 675.257931][ T5916] ucan 1-1:0.0: probe with driver ucan failed with error -110 [ 675.265726][ T977] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 675.293524][ T977] usb 4-1: device descriptor read/8, error -71 [ 675.403426][ T977] usb usb4-port1: unable to enumerate USB device [ 675.634881][ T5916] usb 1-1: USB disconnect, device number 123 [ 675.763175][ T977] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 675.881772][T15158] netlink: 'syz.0.2460': attribute type 4 has an invalid length. [ 675.891969][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2460'. [ 675.962756][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 675.978716][ T977] usb 5-1: config 0 has no interfaces? [ 675.995399][ T977] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 676.005459][ T977] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 676.014704][ T977] usb 5-1: Manufacturer: syz [ 676.025782][ T977] usb 5-1: config 0 descriptor?? [ 677.019409][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.046561][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.393212][ T5895] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 677.412866][ T977] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 677.442995][ T5923] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 677.545138][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.555769][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 677.566462][ T5895] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 677.577624][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 677.587027][ T5895] usb 4-1: SerialNumber: syz [ 677.595329][ T5923] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 677.607219][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 677.621119][ T5923] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 677.638522][ T5923] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 677.648350][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.657250][ T5923] usb 3-1: Product: syz [ 677.661530][ T5923] usb 3-1: Manufacturer: syz [ 677.666494][ T5923] usb 3-1: SerialNumber: syz [ 677.674977][ T5923] usb 3-1: config 0 descriptor?? [ 677.680791][T15183] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 677.689144][T15183] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 677.699432][ T5923] usb 3-1: ucan: probing device on interface #0 [ 677.801235][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.810472][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.828850][ T5895] usb 4-1: 0:2 : does not exist [ 677.851464][ T5895] usb 4-1: unit 5: unexpected type 0x0a [ 677.873479][ T5895] usb 4-1: USB disconnect, device number 111 [ 678.448193][ T5895] usb 5-1: USB disconnect, device number 113 [ 678.572439][T15195] loop2: detected capacity change from 0 to 7 [ 678.581209][T15197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2473'. [ 678.592961][T15195] Dev loop2: unable to read RDB block 7 [ 678.598841][T15195] loop2: AHDI p1 p2 p3 [ 678.604866][T15195] loop2: partition table partially beyond EOD, truncated [ 678.614302][T15195] loop2: p1 start 1818582900 is beyond EOD, truncated [ 678.622427][T15195] loop2: p3 start 335544320 is beyond EOD, truncated [ 678.857686][T15199] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 679.152885][ T5916] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 679.227616][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'. [ 679.255648][ T5923] ucan 3-1:0.0: probe with driver ucan failed with error -110 [ 679.263072][T15211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.278289][T15211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.333056][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 679.341362][ T5916] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 679.350875][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.359036][ T5916] usb 4-1: Product: syz [ 679.364220][ T5916] usb 4-1: Manufacturer: syz [ 679.368859][ T5916] usb 4-1: SerialNumber: syz [ 679.376774][ T5916] usb 4-1: config 0 descriptor?? [ 679.588849][ T5923] usb 4-1: USB disconnect, device number 112 [ 679.834636][T15213] 8021q: VLANs not supported on ip_vti0 [ 679.845828][T15213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.854793][T15213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.920774][ T977] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 679.939913][ T977] usb 1-1: can't read configurations, error -71 [ 680.546179][ T5916] usb 3-1: USB disconnect, device number 126 [ 680.719640][T15235] loop2: detected capacity change from 0 to 7 [ 680.732270][ T6654] Dev loop2: unable to read RDB block 7 [ 680.741976][ T6654] loop2: AHDI p1 p2 p3 [ 680.753019][ T6654] loop2: partition table partially beyond EOD, truncated [ 680.783614][ T6654] loop2: p1 start 1818582900 is beyond EOD, truncated [ 680.811106][ T6654] loop2: p3 start 335544320 is beyond EOD, truncated [ 680.858870][ T5888] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 680.893874][T15235] Dev loop2: unable to read RDB block 7 [ 680.899957][T15235] loop2: AHDI p1 p2 p3 [ 680.925513][T15235] loop2: partition table partially beyond EOD, truncated [ 680.959363][T15235] loop2: p1 start 1818582900 is beyond EOD, truncated [ 681.055212][T15235] loop2: p3 start 335544320 is beyond EOD, truncated [ 682.346614][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'. [ 682.362793][ T5888] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 682.557207][ T5888] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 682.589680][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.631368][ T5888] usb 3-1: Product: syz [ 682.653054][ T5888] usb 3-1: Manufacturer: syz [ 682.673621][ T5888] usb 3-1: SerialNumber: syz [ 682.721262][T15268] team_slave_0: entered promiscuous mode [ 682.727382][T15268] team_slave_1: entered promiscuous mode [ 682.773803][T15266] team_slave_0: left promiscuous mode [ 682.779541][T15266] team_slave_1: left promiscuous mode [ 683.056726][T15274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.079802][T15274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.315548][ T5888] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 683.329036][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 683.347395][ T5888] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 683.371517][ T5888] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 683.384889][ T5888] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 683.396624][ T5888] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 683.406626][T15286] FAULT_INJECTION: forcing a failure. [ 683.406626][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 683.421459][ T5888] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 683.431898][T15286] CPU: 1 UID: 0 PID: 15286 Comm: syz.3.2496 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.431931][T15286] Tainted: [L]=SOFTLOCKUP [ 683.431939][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 683.432015][T15286] Call Trace: [ 683.432027][T15286] [ 683.432036][T15286] dump_stack_lvl+0x189/0x250 [ 683.432060][T15286] ? __pfx____ratelimit+0x10/0x10 [ 683.432086][T15286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.432106][T15286] ? __pfx__printk+0x10/0x10 [ 683.432133][T15286] ? __pfx___might_resched+0x10/0x10 [ 683.432154][T15286] ? fs_reclaim_acquire+0x7d/0x100 [ 683.432179][T15286] should_fail_ex+0x414/0x560 [ 683.432210][T15286] should_failslab+0xa8/0x100 [ 683.432233][T15286] __kmalloc_cache_noprof+0x84/0x700 [ 683.432253][T15286] ? ovs_flow_cmd_new+0x294/0xd80 [ 683.432284][T15286] ovs_flow_cmd_new+0x294/0xd80 [ 683.432319][T15286] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 683.432398][T15286] ? rcu_is_watching+0x15/0xb0 [ 683.432424][T15286] ? __nla_parse+0x40/0x60 [ 683.432448][T15286] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 683.432475][T15286] genl_family_rcv_msg_doit+0x215/0x300 [ 683.432501][T15286] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 683.432533][T15286] ? bpf_lsm_capable+0x9/0x20 [ 683.432554][T15286] ? security_capable+0x7e/0x2e0 [ 683.432586][T15286] genl_rcv_msg+0x60e/0x790 [ 683.432611][T15286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.432630][T15286] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 683.432672][T15286] netlink_rcv_skb+0x208/0x470 [ 683.432692][T15286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 683.432709][T15286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.432747][T15286] ? down_read+0x274/0x2e0 [ 683.432766][T15286] ? genl_rcv+0xd/0x40 [ 683.432791][T15286] genl_rcv+0x28/0x40 [ 683.432812][T15286] netlink_unicast+0x82f/0x9e0 [ 683.432868][T15286] ? __pfx_netlink_unicast+0x10/0x10 [ 683.432890][T15286] ? netlink_sendmsg+0x642/0xb30 [ 683.432910][T15286] ? skb_put+0x11b/0x210 [ 683.432934][T15286] netlink_sendmsg+0x805/0xb30 [ 683.432966][T15286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.432991][T15286] ? aa_sock_msg_perm+0xf1/0x1b0 [ 683.433015][T15286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 683.433031][T15286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.433051][T15286] __sock_sendmsg+0x21c/0x270 [ 683.433078][T15286] ____sys_sendmsg+0x505/0x820 [ 683.433102][T15286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.433125][T15286] ? import_iovec+0x74/0xa0 [ 683.433139][T15286] ___sys_sendmsg+0x21f/0x2a0 [ 683.433152][T15286] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.433167][T15286] ? rcu_read_lock_any_held+0xb3/0x120 [ 683.433194][T15286] ? __fget_files+0x2a/0x420 [ 683.433205][T15286] ? __fget_files+0x3a0/0x420 [ 683.433222][T15286] __x64_sys_sendmsg+0x19b/0x260 [ 683.433235][T15286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 683.433252][T15286] ? __pfx_ksys_write+0x10/0x10 [ 683.433264][T15286] ? do_syscall_64+0xbe/0xf80 [ 683.433276][T15286] do_syscall_64+0xfa/0xf80 [ 683.433287][T15286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.433297][T15286] ? clear_bhb_loop+0x60/0xb0 [ 683.433309][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.433319][T15286] RIP: 0033:0x7fdf4c98f749 [ 683.433331][T15286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.433340][T15286] RSP: 002b:00007fdf4d764038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 683.433352][T15286] RAX: ffffffffffffffda RBX: 00007fdf4cbe5fa0 RCX: 00007fdf4c98f749 [ 683.433360][T15286] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 683.433366][T15286] RBP: 00007fdf4d764090 R08: 0000000000000000 R09: 0000000000000000 [ 683.433373][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.433378][T15286] R13: 00007fdf4cbe6038 R14: 00007fdf4cbe5fa0 R15: 00007fdf4cd0fa28 [ 683.433395][T15286] [ 683.813024][ T5888] usb 3-1: USB disconnect, device number 127 [ 684.040518][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 684.050218][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2500'. [ 684.061082][T15297] netlink: 'syz.2.2500': attribute type 7 has an invalid length. [ 684.173067][ T5921] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 684.313182][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 684.313271][ T5921] usb 4-1: device descriptor read/64, error -71 [ 684.576308][ T5888] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 684.589407][ T5888] usb 3-1: config 0 has no interface number 0 [ 684.604832][ T5888] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 684.617514][ T5888] usb 3-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 684.622912][ T5921] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 684.645722][ T5888] usb 3-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 684.684433][ T5888] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 684.696265][ T5888] usb 3-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 684.733001][ T5888] usb 3-1: Product: syz [ 684.737363][ T5888] usb 3-1: Manufacturer: syz [ 684.742478][ T5888] usb 3-1: SerialNumber: syz [ 684.762005][ T5888] usb 3-1: config 0 descriptor?? [ 684.773871][ T5888] ni6501 3-1:0.238: driver 'ni6501' failed to auto-configure device. [ 684.825259][ T5921] usb 4-1: device descriptor read/64, error -71 [ 684.943665][ T5921] usb usb4-port1: attempt power cycle [ 684.975089][ T5923] usb 3-1: USB disconnect, device number 2 [ 685.283281][ T5921] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 685.323415][ T5921] usb 4-1: device descriptor read/8, error -71 [ 685.566643][T15323] FAULT_INJECTION: forcing a failure. [ 685.566643][T15323] name failslab, interval 1, probability 0, space 0, times 0 [ 685.581133][T15323] CPU: 1 UID: 0 PID: 15323 Comm: syz.2.2508 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.581162][T15323] Tainted: [L]=SOFTLOCKUP [ 685.581168][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 685.581178][T15323] Call Trace: [ 685.581185][T15323] [ 685.581193][T15323] dump_stack_lvl+0x189/0x250 [ 685.581218][T15323] ? __pfx____ratelimit+0x10/0x10 [ 685.581244][T15323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.581265][T15323] ? __pfx__printk+0x10/0x10 [ 685.581296][T15323] ? __pfx___might_resched+0x10/0x10 [ 685.581316][T15323] ? fs_reclaim_acquire+0x7d/0x100 [ 685.581340][T15323] should_fail_ex+0x414/0x560 [ 685.581371][T15323] should_failslab+0xa8/0x100 [ 685.581393][T15323] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 685.581414][T15323] ? ovs_nla_get_match+0x3b5/0x18c0 [ 685.581433][T15323] ? __parse_vlan_from_nlattrs+0x1dc/0x12e0 [ 685.581459][T15323] kmemdup_noprof+0x2b/0x70 [ 685.581480][T15323] ovs_nla_get_match+0x3b5/0x18c0 [ 685.581496][T15323] ? do_syscall_64+0xfa/0xf80 [ 685.581513][T15323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.581543][T15323] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 685.581589][T15323] ? __kasan_kmalloc+0x93/0xb0 [ 685.581614][T15323] ? __asan_memset+0x22/0x50 [ 685.581643][T15323] ovs_flow_cmd_new+0x324/0xd80 [ 685.581677][T15323] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 685.581753][T15323] ? rcu_is_watching+0x15/0xb0 [ 685.581774][T15323] ? __nla_parse+0x40/0x60 [ 685.581793][T15323] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 685.581817][T15323] genl_family_rcv_msg_doit+0x215/0x300 [ 685.581840][T15323] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 685.581869][T15323] ? bpf_lsm_capable+0x9/0x20 [ 685.581889][T15323] ? security_capable+0x7e/0x2e0 [ 685.581916][T15323] genl_rcv_msg+0x60e/0x790 [ 685.581944][T15323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.581957][T15323] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 685.581995][T15323] netlink_rcv_skb+0x208/0x470 [ 685.582017][T15323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.582036][T15323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 685.582071][T15323] ? down_read+0x274/0x2e0 [ 685.582088][T15323] ? genl_rcv+0xd/0x40 [ 685.582112][T15323] genl_rcv+0x28/0x40 [ 685.582134][T15323] netlink_unicast+0x82f/0x9e0 [ 685.582162][T15323] ? __pfx_netlink_unicast+0x10/0x10 [ 685.582183][T15323] ? netlink_sendmsg+0x642/0xb30 [ 685.582201][T15323] ? skb_put+0x11b/0x210 [ 685.582223][T15323] netlink_sendmsg+0x805/0xb30 [ 685.582252][T15323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.582276][T15323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 685.582303][T15323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 685.582320][T15323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.582343][T15323] __sock_sendmsg+0x21c/0x270 [ 685.582370][T15323] ____sys_sendmsg+0x505/0x820 [ 685.582396][T15323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.582426][T15323] ? import_iovec+0x74/0xa0 [ 685.582449][T15323] ___sys_sendmsg+0x21f/0x2a0 [ 685.582470][T15323] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.582497][T15323] ? rcu_read_lock_any_held+0xb3/0x120 [ 685.582541][T15323] ? __fget_files+0x2a/0x420 [ 685.582562][T15323] ? __fget_files+0x3a0/0x420 [ 685.582591][T15323] __x64_sys_sendmsg+0x19b/0x260 [ 685.582614][T15323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.582643][T15323] ? __pfx_ksys_write+0x10/0x10 [ 685.582665][T15323] ? do_syscall_64+0xbe/0xf80 [ 685.582685][T15323] do_syscall_64+0xfa/0xf80 [ 685.582703][T15323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.582721][T15323] ? clear_bhb_loop+0x60/0xb0 [ 685.582741][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.582759][T15323] RIP: 0033:0x7fcdea98f749 [ 685.582776][T15323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.582791][T15323] RSP: 002b:00007fcdeb788038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.582811][T15323] RAX: ffffffffffffffda RBX: 00007fcdeabe5fa0 RCX: 00007fcdea98f749 [ 685.582825][T15323] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 685.582836][T15323] RBP: 00007fcdeb788090 R08: 0000000000000000 R09: 0000000000000000 [ 685.582846][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.582856][T15323] R13: 00007fcdeabe6038 R14: 00007fcdeabe5fa0 R15: 00007fcdead0fa28 [ 685.582887][T15323] [ 685.643685][ T5921] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 685.980743][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.980781][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.980835][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.130189][ T5921] usb 4-1: device descriptor read/8, error -71 [ 686.263995][ T5921] usb usb4-port1: unable to enumerate USB device [ 686.518500][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2516'. [ 686.542784][ T5888] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 686.608586][T15349] vlan3: entered promiscuous mode [ 686.615481][T15349] macvtap0: entered promiscuous mode [ 686.721192][ T5916] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 686.734994][ T5888] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 686.743488][ T5888] usb 5-1: config 0 has no interface number 0 [ 686.749822][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 686.764071][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 686.778442][ T5888] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 686.790538][ T5888] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 686.803048][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.816606][ T5888] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 686.827348][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.934788][ T5916] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 686.970937][ T5916] usb 3-1: config 0 has no interface number 0 [ 686.981565][ T5916] usb 3-1: config 0 interface 41 has no altsetting 0 [ 686.996530][T15354] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2517'. [ 687.028655][ T5916] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 687.066001][ T5888] usb 5-1: config 0 descriptor?? [ 687.071879][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.122976][ T5916] usb 3-1: Product: syz [ 687.146081][T15358] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2518'. [ 687.193519][T15338] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 687.200759][ T5916] usb 3-1: Manufacturer: syz [ 687.311729][ T5916] usb 3-1: SerialNumber: syz [ 687.319792][ T5888] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 687.444349][ T5916] usb 3-1: config 0 descriptor?? [ 688.257306][T15367] FAULT_INJECTION: forcing a failure. [ 688.257306][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 688.315429][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.1.2519 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.315459][T15367] Tainted: [L]=SOFTLOCKUP [ 688.315466][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.315477][T15367] Call Trace: [ 688.315485][T15367] [ 688.315494][T15367] dump_stack_lvl+0x189/0x250 [ 688.315521][T15367] ? __pfx____ratelimit+0x10/0x10 [ 688.315557][T15367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.315578][T15367] ? __pfx__printk+0x10/0x10 [ 688.315602][T15367] ? __pfx___might_resched+0x10/0x10 [ 688.315613][T15367] ? fs_reclaim_acquire+0x7d/0x100 [ 688.315626][T15367] should_fail_ex+0x414/0x560 [ 688.315644][T15367] should_failslab+0xa8/0x100 [ 688.315658][T15367] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 688.315679][T15367] ? ovs_nla_get_match+0x3b5/0x18c0 [ 688.315697][T15367] ? __parse_vlan_from_nlattrs+0x1dc/0x12e0 [ 688.315723][T15367] kmemdup_noprof+0x2b/0x70 [ 688.315744][T15367] ovs_nla_get_match+0x3b5/0x18c0 [ 688.315755][T15367] ? do_syscall_64+0xfa/0xf80 [ 688.315765][T15367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.315782][T15367] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 688.315810][T15367] ? __kasan_kmalloc+0x93/0xb0 [ 688.315834][T15367] ? __asan_memset+0x22/0x50 [ 688.315864][T15367] ovs_flow_cmd_new+0x324/0xd80 [ 688.315896][T15367] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 688.315937][T15367] ? rcu_is_watching+0x15/0xb0 [ 688.315951][T15367] ? __nla_parse+0x40/0x60 [ 688.315972][T15367] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 688.316000][T15367] genl_family_rcv_msg_doit+0x215/0x300 [ 688.316025][T15367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 688.316049][T15367] ? bpf_lsm_capable+0x9/0x20 [ 688.316061][T15367] ? security_capable+0x7e/0x2e0 [ 688.316076][T15367] genl_rcv_msg+0x60e/0x790 [ 688.316088][T15367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.316097][T15367] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 688.316132][T15367] netlink_rcv_skb+0x208/0x470 [ 688.316155][T15367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 688.316174][T15367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 688.316203][T15367] ? down_read+0x274/0x2e0 [ 688.316214][T15367] ? genl_rcv+0xd/0x40 [ 688.316228][T15367] genl_rcv+0x28/0x40 [ 688.316241][T15367] netlink_unicast+0x82f/0x9e0 [ 688.316260][T15367] ? __pfx_netlink_unicast+0x10/0x10 [ 688.316283][T15367] ? netlink_sendmsg+0x642/0xb30 [ 688.316302][T15367] ? skb_put+0x11b/0x210 [ 688.316326][T15367] netlink_sendmsg+0x805/0xb30 [ 688.316349][T15367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.316363][T15367] ? aa_sock_msg_perm+0xf1/0x1b0 [ 688.316376][T15367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 688.316385][T15367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 688.316398][T15367] __sock_sendmsg+0x21c/0x270 [ 688.316426][T15367] ____sys_sendmsg+0x505/0x820 [ 688.316457][T15367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.316487][T15367] ? import_iovec+0x74/0xa0 [ 688.316512][T15367] ___sys_sendmsg+0x21f/0x2a0 [ 688.316540][T15367] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.316569][T15367] ? rcu_read_lock_any_held+0xb3/0x120 [ 688.316619][T15367] ? __fget_files+0x2a/0x420 [ 688.316640][T15367] ? __fget_files+0x3a0/0x420 [ 688.316657][T15367] __x64_sys_sendmsg+0x19b/0x260 [ 688.316670][T15367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 688.316687][T15367] ? __pfx_ksys_write+0x10/0x10 [ 688.316705][T15367] ? do_syscall_64+0xbe/0xf80 [ 688.316727][T15367] do_syscall_64+0xfa/0xf80 [ 688.316747][T15367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.316765][T15367] ? clear_bhb_loop+0x60/0xb0 [ 688.316785][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.316795][T15367] RIP: 0033:0x7f94b938f749 [ 688.316806][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.316814][T15367] RSP: 002b:00007f94ba173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.316827][T15367] RAX: ffffffffffffffda RBX: 00007f94b95e5fa0 RCX: 00007f94b938f749 [ 688.316835][T15367] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 688.316842][T15367] RBP: 00007f94ba173090 R08: 0000000000000000 R09: 0000000000000000 [ 688.316853][T15367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.316864][T15367] R13: 00007f94b95e6038 R14: 00007f94b95e5fa0 R15: 00007f94b970fa28 [ 688.316897][T15367] [ 688.816001][T15369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.872922][T15369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.952438][ T30] audit: type=1326 audit(1765913491.790:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 689.074782][ T30] audit: type=1326 audit(1765913491.830:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18b1d8df90 code=0x7ffc0000 [ 689.102015][ T30] audit: type=1326 audit(1765913491.840:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.129483][ T30] audit: type=1326 audit(1765913491.840:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.153103][ T30] audit: type=1326 audit(1765913491.850:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.178628][ T30] audit: type=1326 audit(1765913491.860:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.202101][ T30] audit: type=1326 audit(1765913492.000:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.229138][ T30] audit: type=1326 audit(1765913492.040:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.252867][ T977] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 689.263105][ T5921] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 689.271371][ T30] audit: type=1326 audit(1765913492.110:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.320973][ T30] audit: type=1326 audit(1765913492.140:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18b1d8f34b code=0x7ffc0000 [ 689.370419][ T5923] usb 5-1: USB disconnect, device number 115 [ 689.391959][ T5923] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 689.423692][ T977] usb 4-1: device descriptor read/64, error -71 [ 689.452875][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 689.460912][ T5921] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 689.474361][ T5921] usb 1-1: config 0 has no interface number 0 [ 689.481243][ T5921] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 689.497494][ T5921] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 689.507514][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.515949][ T5921] usb 1-1: Product: syz [ 689.520233][ T5921] usb 1-1: Manufacturer: syz [ 689.525442][ T5921] usb 1-1: SerialNumber: syz [ 689.533307][ T5921] usb 1-1: config 0 descriptor?? [ 689.539959][T15375] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 689.683276][ T977] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 689.728917][ T5916] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 689.748765][ T5916] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 689.763074][T15375] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 689.773904][ T5916] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 689.792451][ T5916] usb 3-1: USB disconnect, device number 3 [ 689.803223][ T5923] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 689.833117][ T977] usb 4-1: device descriptor read/64, error -71 [ 689.952810][ T5923] usb 5-1: device descriptor read/64, error -71 [ 689.953160][ T977] usb usb4-port1: attempt power cycle [ 690.202838][ T5923] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 690.302826][ T977] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 690.323820][ T977] usb 4-1: device descriptor read/8, error -71 [ 690.333057][ T5923] usb 5-1: device descriptor read/64, error -71 [ 690.385000][ T5921] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 690.443658][ T5923] usb usb5-port1: attempt power cycle [ 690.563140][ T977] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 690.593938][ T977] usb 4-1: device descriptor read/8, error -71 [ 690.713076][ T977] usb usb4-port1: unable to enumerate USB device [ 690.804090][ T5923] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 690.836203][ T5923] usb 5-1: device descriptor read/8, error -71 [ 691.082920][ T5923] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 691.113504][ T5923] usb 5-1: device descriptor read/8, error -71 [ 691.223581][ T5923] usb usb5-port1: unable to enumerate USB device [ 691.944539][ T5921] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 691.966243][ T5921] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 691.981090][ T5921] asix 1-1:0.188: probe with driver asix failed with error -71 [ 691.995873][ T5921] usb 1-1: USB disconnect, device number 126 [ 692.456537][T15421] tipc: Can't bind to reserved service type 0 [ 692.472778][ T5921] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 692.625353][T15423] loop2: detected capacity change from 0 to 7 [ 692.633655][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 692.637416][T15423] Dev loop2: unable to read RDB block 7 [ 692.644787][T15423] loop2: unable to read partition table [ 692.653590][T15423] loop2: partition table beyond EOD, truncated [ 692.660995][T15423] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 692.673747][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 692.692341][ T5921] usb 1-1: config 40 has an invalid interface number: 160 but max is 0 [ 692.708652][ T5921] usb 1-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config [ 692.727989][ T5921] usb 1-1: config 40 has no interface number 0 [ 692.741883][ T5921] usb 1-1: config 40 interface 160 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 692.874531][ T5921] usb 1-1: config 40 interface 160 has no altsetting 0 [ 692.898701][ T5921] usb 1-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 692.909564][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.951195][ T5921] usb 1-1: Product: syz [ 692.973765][ T5921] usb 1-1: Manufacturer: syz [ 692.980390][ T5921] usb 1-1: SerialNumber: syz [ 693.195523][T15428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2534'. [ 694.042041][T15436] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2537'. [ 694.057304][T15436] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2537'. [ 694.539168][ T977] IPVS: starting estimator thread 0... [ 694.796698][T15447] IPVS: using max 27 ests per chain, 64800 per kthread [ 694.814030][ T977] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 695.138898][ T5921] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.147705][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 695.184608][ T977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 695.226097][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 248 [ 695.294791][ T977] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 695.327703][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.356652][ T977] usb 5-1: Product: syz [ 695.430698][ T977] usb 5-1: Manufacturer: syz [ 695.447049][ T977] usb 5-1: SerialNumber: syz [ 695.465186][ T977] usb 5-1: config 0 descriptor?? [ 695.473815][T15443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 695.481229][T15443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 695.496116][ T977] usb 5-1: ucan: probing device on interface #0 [ 695.508394][ T5921] snd-usb-audio 1-1:40.160: probe with driver snd-usb-audio failed with error -2 [ 695.569486][ T5921] usb 1-1: USB disconnect, device number 127 [ 695.934608][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 695.993767][T15469] loop2: detected capacity change from 0 to 7 [ 696.004586][T15469] Dev loop2: unable to read RDB block 7 [ 696.026966][T15469] loop2: unable to read partition table [ 696.051931][T15469] loop2: partition table beyond EOD, truncated [ 696.100433][T15469] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 696.109393][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 696.127825][ T5921] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 696.153920][ T5921] usb 1-1: config 0 has no interface number 0 [ 696.173089][ T5921] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 696.232369][ T5921] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 696.261473][ T5921] usb 1-1: config 0 interface 41 has no altsetting 0 [ 696.296142][ T5921] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 696.335989][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.358569][ T5921] usb 1-1: Product: syz [ 696.368765][ T5921] usb 1-1: Manufacturer: syz [ 696.378882][ T5921] usb 1-1: SerialNumber: syz [ 696.396304][ T5921] usb 1-1: config 0 descriptor?? [ 696.423139][T15461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 696.443241][T15461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 696.546619][T15475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.803659][T15461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 696.811016][T15461] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 696.877274][T15475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.224631][ T977] ucan 5-1:0.0: probe with driver ucan failed with error -110 [ 697.403097][ T5888] usb 5-1: USB disconnect, device number 120 [ 697.475806][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 697.475903][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2542'. [ 697.566893][T15461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.591262][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.613034][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 697.620661][T15461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.621034][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.721073][ T5921] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 697.763039][ T5921] usb 1-1: USB disconnect, device number 2 [ 697.815652][ T5895] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 697.838719][ T5895] usb 3-1: config 0 has no interface number 0 [ 697.843622][ T5888] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 697.848287][ T5895] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 697.865217][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.874209][ T5895] usb 3-1: Product: syz [ 697.878463][ T5895] usb 3-1: Manufacturer: syz [ 697.932536][ T5895] usb 3-1: SerialNumber: syz [ 697.944495][ T5895] usb 3-1: config 0 descriptor?? [ 698.033846][ T5888] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 698.043153][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.058509][ T5888] usb 5-1: Product: syz [ 698.131733][ T5888] usb 5-1: Manufacturer: syz [ 698.188558][ T5888] usb 5-1: SerialNumber: syz [ 698.193882][ T5895] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 698.267800][ T5895] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 698.281149][ T5895] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 698.290911][ T5895] usb 3-1: media controller created [ 698.334838][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.540638][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2553'. [ 698.553621][T15507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2553'. [ 698.863390][T15508] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2548'. [ 699.415719][ T5895] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 699.863112][ T5895] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 699.919847][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 699.990975][T15523] Can't find ip_set type [ 700.041209][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.069588][ T5895] usb 1-1: not running at top speed; connect to a high speed hub [ 700.100572][ T5895] usb 1-1: config 56 has an invalid interface number: 218 but max is 0 [ 700.121119][ T5895] usb 1-1: config 56 has an invalid descriptor of length 0, skipping remainder of the config [ 700.157859][ T5895] usb 1-1: config 56 has no interface number 0 [ 700.172081][ T5895] usb 1-1: config 56 interface 218 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 700.219003][ T5895] usb 1-1: config 56 interface 218 has no altsetting 0 [ 700.240768][ T5895] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 700.257680][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.273689][ T5895] usb 1-1: Product: syz [ 700.285004][ T5895] usb 1-1: Manufacturer: syz [ 700.290932][ T5895] usb 1-1: SerialNumber: syz [ 700.378888][ T5916] usb 3-1: USB disconnect, device number 4 [ 700.552824][ T977] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 700.584027][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 700.621166][ T5895] radioshark2 1-1:56.218: Invalid radioSHARK2 device [ 700.636705][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 700.665199][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 700.668035][ T5895] radioshark2 1-1:56.218: probe with driver radioshark2 failed with error -22 [ 700.751913][ T5895] usbhid 1-1:56.218: couldn't find an input interrupt endpoint [ 700.759779][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 700.760572][ T5888] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 700.780224][ T5895] usb 1-1: USB disconnect, device number 3 [ 700.791664][ T977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 700.814942][ T977] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 700.814991][ T977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 700.815012][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.820708][ T5888] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 700.840031][T15535] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 700.840237][ T5888] usb 5-1: USB disconnect, device number 121 [ 700.898158][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 701.046744][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2565'. [ 701.284065][ T977] usb 4-1: USB disconnect, device number 121 [ 703.248948][T15593] input: syz0 as /devices/virtual/input/input56 [ 703.452821][ T5888] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 703.538733][T15597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.575701][T15597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.695835][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.709421][ T5888] usb 4-1: config 0 has no interfaces? [ 703.715646][ T5888] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 703.729698][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.760196][ T5888] usb 4-1: config 0 descriptor?? [ 704.470386][T15613] ip6gretap1: entered promiscuous mode [ 705.177709][T15621] loop2: detected capacity change from 0 to 7 [ 705.206897][ T5848] Dev loop2: unable to read RDB block 7 [ 705.218662][ T5848] loop2: unable to read partition table [ 705.233911][ T5848] loop2: partition table beyond EOD, truncated [ 705.241941][T15621] Dev loop2: unable to read RDB block 7 [ 705.255076][T15621] loop2: unable to read partition table [ 705.266508][T15621] loop2: partition table beyond EOD, truncated [ 705.273288][T15621] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 705.312099][ T5202] Dev loop2: unable to read RDB block 7 [ 705.323292][ T5202] loop2: unable to read partition table [ 705.329127][ T5202] loop2: partition table beyond EOD, truncated [ 705.520003][T15627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2587'. [ 705.543780][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2587'. [ 705.588913][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 705.608297][T15631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 705.858737][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 706.301909][ T5895] usb 4-1: USB disconnect, device number 122 [ 706.963215][ T5888] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 707.011115][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.030722][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.112934][T15659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.127152][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 707.127170][ T30] audit: type=1326 audit(1765913509.970:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15655 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 707.163244][T15659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.311401][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.325921][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.328291][ T30] audit: type=1326 audit(1765913510.010:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15655 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 707.334958][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.366133][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.376365][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.384988][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.393063][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.469177][ T5895] hid-generic 0006:00FB:0780.002D: unknown main item tag 0x0 [ 707.514188][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.545070][ T30] audit: type=1326 audit(1765913510.170:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15655 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 707.577414][ T5888] usb 4-1: config 0 has no interfaces? [ 707.578445][ T5895] hid-generic 0006:00FB:0780.002D: hidraw0: VIRTUAL HID v0.0e Device [syz0] on syz1 [ 707.583703][T15667] loop2: detected capacity change from 0 to 7 [ 707.601223][ T5888] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 707.628055][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.641161][T15667] Dev loop2: unable to read RDB block 7 [ 707.660231][ T30] audit: type=1326 audit(1765913510.170:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15655 comm="syz.0.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b1d8f749 code=0x7ffc0000 [ 707.693083][T15667] loop2: unable to read partition table [ 707.695783][ T5888] usb 4-1: config 0 descriptor?? [ 707.724470][T15667] loop2: partition table beyond EOD, truncated [ 707.755110][T15667] loop_reread_partitions: partition scan of loop2 (þ被xü´›) failed (rc=-5) [ 707.927047][T15668] fido_id[15668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 708.296158][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 708.373959][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 708.382159][T15674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.401256][ T31] Tainted: G L syzkaller #0 [ 708.422241][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.450983][ T31] task:kworker/1:0 state:D stack:20424 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 708.532303][T15675] PM: Image not found (code -5) [ 708.609713][ T31] Workqueue: usb_hub_wq hub_event [ 708.622878][ T31] Call Trace: [ 708.639882][ T31] [ 708.648777][ T31] __schedule+0x14bc/0x5000 [ 708.659087][ T31] ? __pfx___schedule+0x10/0x10 [ 708.668648][ T31] ? schedule+0x91/0x360 [ 708.676425][ T31] schedule+0x165/0x360 [ 708.683376][ T31] schedule_timeout+0x9a/0x270 [ 708.691486][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 708.708303][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 708.718176][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 708.729334][ T31] ? wait_for_completion+0x267/0x5d0 [ 708.739229][ T31] wait_for_completion+0x2bf/0x5d0 [ 708.760574][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 708.771430][ T31] i2c_del_adapter+0x591/0x760 [ 708.801985][ T31] ? kfree+0x1c0/0x660 [ 708.816603][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 708.829035][ T31] ? dvb_usbv2_exit+0x949/0xb90 [ 708.839644][ T31] dvb_usbv2_probe+0x497/0x3c20 [ 708.968305][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 708.976123][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 708.986885][ T31] usb_probe_interface+0x668/0xc90 [ 708.997239][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 709.008473][ T31] really_probe+0x26d/0xad0 [ 709.020935][ T31] __driver_probe_device+0x18c/0x320 [ 709.173228][ T31] driver_probe_device+0x4f/0x240 [ 709.182766][ T31] __device_attach_driver+0x279/0x430 [ 709.201388][ T31] bus_for_each_drv+0x251/0x2e0 [ 709.207879][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 709.214077][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 709.225149][ T31] __device_attach+0x2b8/0x430 [ 709.230017][ T31] ? __pfx___device_attach+0x10/0x10 [ 709.237933][ T31] ? _raw_spin_unlock+0x28/0x50 [ 709.246542][ T31] device_initial_probe+0xa1/0xd0 [ 709.254537][ T31] bus_probe_device+0x12a/0x220 [ 709.262225][ T31] ? device_add+0x726/0xb80 [ 709.268810][ T31] device_add+0x7b6/0xb80 [ 709.275735][ T31] usb_set_configuration+0x1a87/0x2110 [ 709.283057][ T31] usb_generic_driver_probe+0x8d/0x150 [ 709.289744][ T31] usb_probe_device+0x1c4/0x3c0 [ 709.297747][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 709.305074][ T31] really_probe+0x26d/0xad0 [ 709.313019][ T31] __driver_probe_device+0x18c/0x320 [ 709.318649][ T31] driver_probe_device+0x4f/0x240 [ 709.326376][ T31] __device_attach_driver+0x279/0x430 [ 709.335155][ T31] bus_for_each_drv+0x251/0x2e0 [ 709.341729][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 709.349767][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 709.357911][ T31] __device_attach+0x2b8/0x430 [ 709.369253][ T31] ? __pfx___device_attach+0x10/0x10 [ 709.374826][ T31] ? _raw_spin_unlock+0x28/0x50 [ 709.379851][ T31] device_initial_probe+0xa1/0xd0 [ 709.385085][ T31] bus_probe_device+0x12a/0x220 [ 709.389971][ T31] ? device_add+0x726/0xb80 [ 709.395137][ T31] device_add+0x7b6/0xb80 [ 709.399522][ T31] usb_new_device+0xa39/0x1720 [ 709.404484][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 709.409716][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.415107][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 709.420348][ T31] hub_event+0x29b1/0x4ef0 [ 709.425039][ T31] ? __pfx_hub_event+0x10/0x10 [ 709.429841][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 709.435668][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.440905][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 709.446801][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 709.452571][ T31] process_scheduled_works+0xad1/0x1770 [ 709.458239][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 709.464640][ T31] worker_thread+0x8a0/0xda0 [ 709.469464][ T31] kthread+0x711/0x8a0 [ 709.473743][ T31] ? __pfx_worker_thread+0x10/0x10 [ 709.478952][ T31] ? __pfx_kthread+0x10/0x10 [ 709.483955][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.489224][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 709.495556][ T31] ? __pfx_kthread+0x10/0x10 [ 709.500205][ T31] ret_from_fork+0x599/0xb30 [ 709.505063][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 709.510206][ T31] ? __switch_to_asm+0x39/0x70 [ 709.515125][ T31] ? __switch_to_asm+0x33/0x70 [ 709.519939][ T31] ? __pfx_kthread+0x10/0x10 [ 709.524717][ T31] ret_from_fork_asm+0x1a/0x30 [ 709.529554][ T31] [ 709.535972][T15674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.544865][ T31] [ 709.544865][ T31] Showing all locks held in the system: [ 709.552727][ T31] 3 locks held by kworker/u8:1/13: [ 709.557997][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 709.575773][ T31] #1: ffffc90000127b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 709.586969][ T31] #2: ffffffff8f311c08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 709.596760][ T31] 5 locks held by kworker/1:0/24: [ 709.601910][ T31] #0: ffff88801fed2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 709.613687][ T31] #1: ffffc900001e7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 709.626467][ T31] #2: ffff8881453ca198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 709.635543][ T31] #3: ffff888033d2a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 709.644910][ T31] #4: ffff888058194160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 709.654493][ T31] 1 lock held by khungtaskd/31: [ 709.659368][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 709.670508][ T31] 2 locks held by getty/5596: [ 709.675274][ T31] #0: ffff888034e650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 709.685433][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 709.695758][ T31] 4 locks held by udevd/5849: [ 709.701414][ T31] #0: ffff88803086d790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 709.710796][ T31] #1: ffff88807d308c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 709.721749][ T31] #2: ffff888080d78008 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 709.731728][ T31] #3: ffff888033d2a198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 709.741839][ T31] 4 locks held by kworker/u8:2/12509: [ 709.747453][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 709.758537][ T31] #1: ffffc9000beb7b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 709.769303][ T31] #2: ffffffff8f304b70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 709.778893][ T31] #3: ffffffff8f311c08 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 709.788476][ T31] 2 locks held by syz.0.2598/15674: [ 709.794143][ T31] #0: ffffffff8f311c08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x3ce/0x720 [ 709.804193][ T31] #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 709.817901][T15674] bond0 (unregistering): Released all slaves [ 709.826932][ T31] [ 709.831562][ T31] ============================================= [ 709.831562][ T31] [ 709.852059][ T31] NMI backtrace for cpu 1 [ 709.852196][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 709.852228][ T31] Tainted: [L]=SOFTLOCKUP [ 709.852235][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.852246][ T31] Call Trace: [ 709.852255][ T31] [ 709.852264][ T31] dump_stack_lvl+0x189/0x250 [ 709.852293][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.852315][ T31] ? __pfx__printk+0x10/0x10 [ 709.852350][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 709.852376][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 709.852401][ T31] ? __pfx__printk+0x10/0x10 [ 709.852429][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 709.852457][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 709.852482][ T31] sys_info+0x135/0x170 [ 709.852498][ T31] watchdog+0xf95/0xfe0 [ 709.852524][ T31] ? watchdog+0x20a/0xfe0 [ 709.852551][ T31] kthread+0x711/0x8a0 [ 709.852576][ T31] ? __pfx_watchdog+0x10/0x10 [ 709.852597][ T31] ? __pfx_kthread+0x10/0x10 [ 709.852620][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.852644][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 709.852664][ T31] ? __pfx_kthread+0x10/0x10 [ 709.852687][ T31] ret_from_fork+0x599/0xb30 [ 709.852705][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 709.852728][ T31] ? __switch_to_asm+0x39/0x70 [ 709.852748][ T31] ? __switch_to_asm+0x33/0x70 [ 709.852767][ T31] ? __pfx_kthread+0x10/0x10 [ 709.852789][ T31] ret_from_fork_asm+0x1a/0x30 [ 709.852827][ T31] [ 710.006194][ T31] Sending NMI from CPU 1 to CPUs 0: [ 710.011433][ C0] NMI backtrace for cpu 0 [ 710.011453][ C0] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 710.011479][ C0] Tainted: [L]=SOFTLOCKUP [ 710.011486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.011496][ C0] RIP: 0010:hrtimer_start_range_ns+0x183/0x1080 [ 710.011520][ C0] Code: dd d0 2d 9b 8d 48 89 d8 48 c1 e8 03 42 80 3c 20 00 4c 8b 6c 24 18 74 08 48 89 df e8 67 25 79 00 48 c7 c5 40 32 7f 92 48 03 2b <48> 8b 44 24 40 42 80 3c 20 00 48 8b 5c 24 08 74 08 48 89 df e8 44 [ 710.011538][ C0] RSP: 0018:ffffc9000406fb50 EFLAGS: 00000083 [ 710.011553][ C0] RAX: 1ffffffff1b365ba RBX: ffffffff8d9b2dd0 RCX: ffff88807b271e80 [ 710.011566][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 710.011575][ C0] RBP: ffff8880b8628240 R08: 0000000000000003 R09: 0000000000000004 [ 710.011586][ C0] R10: dffffc0000000000 R11: fffff5200080df48 R12: dffffc0000000000 [ 710.011601][ C0] R13: ffffc9000406fd40 R14: ffffc9000406fd70 R15: 0000000000000a02 [ 710.011613][ C0] FS: 000055557d99b500(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 710.011627][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.011638][ C0] CR2: 0000200000400000 CR3: 00000000765f6000 CR4: 00000000003526f0 [ 710.011653][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 710.011662][ C0] DR3: ffffffffefffff18 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 710.011673][ C0] Call Trace: [ 710.011681][ C0] [ 710.011690][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 710.011717][ C0] do_nanosleep+0x18c/0x610 [ 710.011740][ C0] ? do_nanosleep+0x7f/0x610 [ 710.011760][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 710.011781][ C0] ? __hrtimer_setup+0x181/0x200 [ 710.011798][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 710.011819][ C0] hrtimer_nanosleep+0x169/0x360 [ 710.011840][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 710.011857][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 710.011876][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 710.011892][ C0] ? irqentry_exit+0x5dd/0x660 [ 710.011908][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 710.011926][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 710.011948][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 710.011968][ C0] ? do_syscall_64+0xbe/0xf80 [ 710.011989][ C0] do_syscall_64+0xfa/0xf80 [ 710.012005][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.012020][ C0] ? clear_bhb_loop+0x60/0xb0 [ 710.012037][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.012053][ C0] RIP: 0033:0x7f09c7fc1fc3 [ 710.012065][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 710.012079][ C0] RSP: 002b:00007ffeef5f09c8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 710.012099][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f09c7fc1fc3 [ 710.012111][ C0] RDX: 00007ffeef5f09e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 710.012121][ C0] RBP: 0000000000000000 R08: 7fffffffffffffff R09: 3fffffffffffffff [ 710.012132][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffeef5f0e30 [ 710.012143][ C0] R13: 0000000000000004 R14: 00007ffeef5f0a1c R15: 00007ffeef5f0ab0 [ 710.012163][ C0] [ 710.342795][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 710.349771][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 710.360570][ T31] Tainted: [L]=SOFTLOCKUP [ 710.364893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.374954][ T31] Call Trace: [ 710.378252][ T31] [ 710.381191][ T31] dump_stack_lvl+0x99/0x250 [ 710.385792][ T31] ? __asan_memcpy+0x40/0x70 [ 710.390385][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.395578][ T31] ? __pfx__printk+0x10/0x10 [ 710.400192][ T31] vpanic+0x237/0x6d0 [ 710.404186][ T31] ? __pfx_vpanic+0x10/0x10 [ 710.408700][ T31] ? preempt_schedule_common+0x83/0xd0 [ 710.414168][ T31] panic+0xb9/0xc0 [ 710.417896][ T31] ? __pfx_panic+0x10/0x10 [ 710.422319][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 710.427708][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 710.433859][ T31] watchdog+0xfdf/0xfe0 [ 710.438038][ T31] ? watchdog+0x20a/0xfe0 [ 710.442384][ T31] kthread+0x711/0x8a0 [ 710.446465][ T31] ? __pfx_watchdog+0x10/0x10 [ 710.451161][ T31] ? __pfx_kthread+0x10/0x10 [ 710.455773][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 710.460973][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 710.466187][ T31] ? __pfx_kthread+0x10/0x10 [ 710.470813][ T31] ret_from_fork+0x599/0xb30 [ 710.475403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 710.480514][ T31] ? __switch_to_asm+0x39/0x70 [ 710.485293][ T31] ? __switch_to_asm+0x33/0x70 [ 710.490091][ T31] ? __pfx_kthread+0x10/0x10 [ 710.494697][ T31] ret_from_fork_asm+0x1a/0x30 [ 710.499486][ T31] [ 710.502857][ T31] Kernel Offset: disabled [ 710.507363][ T31] Rebooting in 86400 seconds..