last executing test programs: 11.027565915s ago: executing program 4 (id=1659): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES64=r0], 0xa0}}], 0x1, 0x4040815) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000780)=0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xff], [0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'macvtap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x3b, 0x0, 0x3}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x400, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x5, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x8}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x400, 0x3, 0x0, 'syz1\x00', 'syz1\x00', {0x10001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x19}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0xd}, {0x0, 0x9}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffff069}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$key(r4, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="02180400170000000000000000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000008060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff000000000000000007001900000000000a"], 0xb8}}, 0x20000000) fsopen(&(0x7f0000000180)='qnx6\x00', 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x6a}]}}]}, 0x4c}}, 0x0) 10.179789068s ago: executing program 4 (id=1663): r0 = socket$inet6(0xa, 0x3, 0x101) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstatfs(0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x5, r0, 0x1c, {0x9, 0x1}, 0x6}, 0x1) sendmmsg$inet6(r0, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 9.626667154s ago: executing program 0 (id=1670): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090491000003e102"], 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0x11, &(0x7f0000000600)) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1e, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0xb1d, 0x0, 0x1, {0x22, 0x80a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x1, 0xd, 0x4, 0x40, 0xea}, 0x11, &(0x7f0000000100)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x48e, 0xff0f}]}, 0x1, [{0x41, &(0x7f0000000240)=@string={0x41, 0x3, "2920ea5460c20e6dbd42378bf0455114504e5bc5381abd8d10ef437e5c73c0cc109563a1d12b36546e98df58ae42e60cd349a25d11fc5f97533fa75f6d15f1"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000002c0)={0x20, 0x4, 0xd6, {0xd6, 0x10, "c1b00362dbdc64b0384b27a5d708c3422a93d8b6b9e49d328573ed72266e836e434719523544285e09e6b90a9e857c8ec3585fe0f0b3ada5c54460c9b4db49c72056a58cecd8314d5d965ad8145df4b5af8715daf283911df84195c5c48b4dfe80336c1116215349123d1bc0d570979d921b4af835b2beec5e5343226975b33ac7fe7da94e19d0f95cea773c4459cbf6b029f8d5a1d68826d622d111737fffc398f9177859428bbe83ba63152703e4b173067f2bfa7865207f31e3a3c6c009657999630e2189ef548388f80a033446255756c72a"}}, &(0x7f00000003c0)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "c4e1aa81660e5e5aa7d522e3ce366d386e8f49b25ad6356d846034074b72b2f5c7bfdfd3ea447c4aecf0c1419f62402842597789b35eec69be38317b6b50ef881b46b87b57e9829fc0176ccef0e40499fd040cbd9d55b0a7167ce63b271fa8b59b39630b5f9d6d6a19c85b8eec1cda67695896c6c3394c3e24e29beaa964a921629a5534f8d661fcb5c04fe92314f014b705bbd315b7ecf3ddf18d0f31fcba1f9b3c8697fb0cfd7fbcc923fade3eea46f6b274aff16c6a1ca910c338b2082a67749d15f95e92539f6a"}}, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "c802c2cc"}, @local=@item_4={0x3, 0x2, 0x9, "7c7182e4"}, @main=@item_4={0x3, 0x0, 0xa, "c1e5b74b"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x793}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x60, 0x0, 0x51, "4041d5a6b5bec7bdc73efee4baefb1c39430824813302a588afa591cabcd63b6964abd5da5a237b47c096cc237c97c44f10e2bd4b1f6080ba93810714f6c5ef483ba5e1252eaaca230c7e44f0c69914900"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0x14, "38a4bec39005a3bfbddc57bfe1c867ec550fa2fb"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x6}}) (async) bind$inet6(r1, &(0x7f0000000680)={0xa, 0x4e24, 0x2, @local, 0x9}, 0x1c) 9.098358806s ago: executing program 4 (id=1672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/174, 0xae}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/206, 0xce}, {&(0x7f0000000740)=""/111, 0x6f}], 0x5, &(0x7f0000000980)=""/105, 0x69}, 0xc}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/115, 0x73}, {&(0x7f0000000c80)=""/167, 0xa7}, {&(0x7f0000000d40)=""/127, 0x7f}], 0x6, &(0x7f0000000e40)=""/81, 0x51}, 0x10}, {{&(0x7f0000000ec0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f40)=""/113, 0x71}, {&(0x7f0000000380)=""/36, 0x24}], 0x2, &(0x7f0000001000)=""/133, 0x85}, 0x9}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/199, 0xc7}, {&(0x7f00000010c0)=""/123, 0x7b}, {&(0x7f0000001280)=""/20, 0x14}], 0x3}, 0xfffffff7}], 0x4, 0x3, &(0x7f0000001400)={0x77359400}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r7], 0x54}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x2, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r9, 0x628, 0xc88d, 0x43, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="64000000020601020000f1711907bf5e92d957c7d01379d90dee0000000000000000000005000400003fee18346616a812000fea550000000900020073797a30000000000d000300686173683a6d616300000000051bc60004000000000010000300686173683a69702c6d6163001100030068617368a945a9e0446c0b9c6df0c7076b1a8b56b5f03e0439aa1797b7c2772cdfe0415b60b61a98100894e0d684daebcfd4f2d31b18", @ANYBLOB="5fa2e3348239c6609b78dbae816e73d07ada65ecdeb57011c6816ae69bea38417489590d7ba78c159d11163192612b6439e642db8804d52e25d02677d20a1ba564cb4a24cd41160b9967d241b1a0623203e03ad6226856a996346f86a9dd7b1d55cfbc288add89046d6b7d201322a8c7085bd265051a839f38088da2499fa8754aa3"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r13, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f99000) r14 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) pwrite64(r14, &(0x7f0000000040)="fe4f", 0xffda, 0x5) signalfd4(r12, &(0x7f00000000c0)={[0xa]}, 0x8, 0x0) sendmsg$IPSET_CMD_HEADER(r12, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000006060101000000000000000000000000050001", @ANYBLOB="370b4914fc87a82a9ac9cefb84e387e54805ba9087502a2b810745d4beb5c63b7d5932e628ddf0e841b0acacdb49c257907d87997c08f6a1e49779dfa16fcbc84be422c59366f0cb3bfdb94fa0346ea9bce60b94db4158aeeea6165f82a7d7", @ANYRES16, @ANYRESOCT=r12], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4040040) 8.643285618s ago: executing program 0 (id=1673): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = getpgrp(0x0) (async) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) (async) unlink(&(0x7f0000000140)='./cgroup\x00') kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file5\x00', 0x1000, 0x400720) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2, 0x2}, 0x18, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) unshare(0x2a020480) (async) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0}) landlock_restrict_self(r2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1908004500006a76495d1400650000003a9078ac1e0001e000000180004e21009c907801000000040000004d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff8ab5c889a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e62"], 0x0) (async) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f0000003dc0)={0x2310, 0x3f, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@typed={0xc, 0xe0, 0x0, 0x0, @u64=0x5}, @nested={0xa5, 0x70, 0x0, 0x1, [@generic="28dbdd61738effa992938bd9dc71b57a608d5c2d9bd8e132dcf65808346eec4fdedfb27da54ca8c14322391f46b76db6252aa7377ecb21792a88b0dfb7dbf692f335478f7f55e6713ffdf93e723df677b7e1d41af928f507fc39fb97e4b407cd5a5d0cb5fac952c24526a77bf814268dde4a89c0642ab6fce5", @nested={0x4, 0x39}, @nested={0x4, 0xb2}, @nested={0x4, 0xc5}, @nested={0x4, 0x2e}, @nested={0x4, 0xda}, @typed={0xc, 0x139, 0x0, 0x0, @u64=0xffffffff}, @typed={0x8, 0x119, 0x0, 0x0, @uid}]}, @nested={0x11c5, 0x3b, 0x0, 0x1, [@generic="c456d99722b8dadfcdc6eb6419adea079a84894ee733741c9a3b6880acc6cdb915e9592d8693501a6ef989e7442ae55d2c223e5e52d1fb59ada28f8218b55169de97193663d901c7766da003923f84f628b618cfc890d940bb9a7910744a3eb3b68a3828732cb91e053a2ecdd04572bfc2c4150ac6452b44f9eb4759ccb74bdb82733005ada925a6df8443eaa7d5aab02b988a3feeaad502afbc2e4a20c021327cf15d781a147c0a256a2987fc93a0c41b133db1ae1f212e7313a98f0e6a0403de061c65bb9fdb1da3769a20f6d119772024d3e28a756bfe38b82b97e9b20449759b294b0fbe061bb75f773ad858551b5be9275351cf40828a2b01ccbb303de3216335847cacd7a36ccfda346d50e3a12ba77aaa7088b6ba0f72796910a38da4b5e56e5d19f4ecff2d670df9ff5240402e749f33f11941bddc649950d14e3667a75fe2433de1cf8d86c080a9f464639139828d0afaf130fee609e1b751b43533dc61f57267e0fe558efb50b813e049b7d2a934338176fcb712eda81e262820a896bacbd5c0712cb0bbe0b3a4df90f9756a3e9280143fa80a54c67e23b64c618cf0584333487d827adb28f8911d34b34819a055a703486392a07b253c1ed1b6d85a7f86e52e28491dbf0d0a6e2cd4c3c9b5620ff8c3524bb8839ef38729991c08eff4e1fe5b4ce811f60c389c6d4168550d5331068bc61db626f34bdaa1a38e4fa6d110752589ea99f97dec09925edaf71a08c058dde8006b7bab26cb9f655aa23f857b7f22c1ebdd2349af880dca27dc282fc283c83d4c509115e829835288bf81faa398f8299e98d33fb653b120c85503185dcdcaa9bd2d31411e2b58eb9127e71219afc3d5d1fec5d26efa643bbbcfb865afdca6dbfc9990f67bfc7ee09a5fa12cd7bac6d1916bb19bd4ed490c864dcbd5181da7bbcbd9534a63cb5a31f9d70d8474f55916071e78f4ca11633a43894208280bc321bd3e1554386ddb5be86ad252c8c9d3bc6769cdce48f5819090789c6f894c2b596c43080767d62677b0463de668bca1e8f92a3cc7899a5cd44947a07933cfa8304f98cd2456595c8e74e4466acc4b1b07d14321507b486d4168aa63e383bf9447b85daca30dfa749661b8fd376d7bf8b806a4e215cb1c9cb9dc7ac7136805f58ebf24954ee0983b11149d77527ad142cf5803b00850c181d96de3a8a84ef46839ac29c4d40c7283ef04eab9399dd979a14d29fc0c768c7c3c8cbdcf62bd8a37798fe1703f3c7e9df2e071b526c3c9d192db2a009ef07a4ebf21c9d3405fc8d4088e6dcf4aeca53c80732dadae1855fe7749519ad4f35730bdc233599a8f6fe78a15ed2859ab1bc6986e20eb377b8fecc2764c39650d4c4e2512ba130685493fcf74795676ed6f1ea239263367454abe570a2723bbab47671fed1a84cf667dfc49f24df1bbeb3fe7bd603aa0e3ad7c4d2bab2bc0c6b6748d10d68d859c11cf947e9a71be468d99192319c22aeac8b1e7dd64776bb71239cf3760171b0c2f30ce43718943d59cf4b6b8c1cc6fa811c352de9fb630ceea4ddaa36721f1a959069860857ff7fce3f165102913b5b91e747e53d3a6a6b1dd9ed05ee61ef27a917ac27a0dc8d423d816f1d6dfcb424ae2df4b2257b22a20c84949c5ce09a178aa8c061de36c40e9c874cdd67ea3c476d958f272a061ad869d9ec604d576460a7be2ffbca47b93b9ff4c42c2e5aa4672495244b888dac097541057816826869a14216be95b0743b5618c2ce884b4e6ebc14b1bd03a25152b64377ca5f004fc4b85ec0589315e728787057861f6fa9ff8c5c09303686a42bccd4f792a47a242c8ef719e0a69c080f93492cf757aa9df4d65e58cfbe86840073c0f2aa99cb631b336f40b53216d7ed28d39b17f7d9dfd83c9d119c86eae51cc6ff8c900006246a378baf3a2766dda872747dc4e88ad8cbdf4740d6aa3a7cf73445032cdba8cf63878b2bb36b07f4ab3ac51353217e45560f58a33c81fefdda04074cfce51a6deaa50d86d0b47ed010ab9035b5d62465b1c4aed5b5f21947590ab4a4d3aba264c126b41929e9c6535b9f8218dcaef8fb0e4e4f4844ce6a08709457c89cf7fb40d03fc81ccd399f91afc15f20237f31e4d4a64e5b446135ca63330b04b4eb258f446b49653a93d0a6f01d1a0b7f0d39eb215a184634fdbcb3266dfb8c33b944f952e67ac4aa8f191c4edd794e8e74b32dabd57db331457a3268e4582b7e2308eb06597a4b400743fdf2e775bb263d0cf1d77fef54b157b45292a1af5589f9a026d6400c51b0c16606a3c0b57b6293aa045f31fc5e69fcd363491fbb558b3dc0d499d8d88f2a7db62ed5c0c5e744c90e476bfe95f9020ae1c365ced7c88954932f18591c4cea45262c47a95f62d919ac14ff06ea3b60dc177bbec5894a6c27f53efb422e24de1de19905981105a764e70df6a86e994654442171358c97f74e9e109415ea66e9115bbc45f1f3752689bc1ffefe347a42386c419e2455fb7d0409496f7d66a0298b353466ea7fd87c9f176cecd9fa608f40bea900da097a48c6719a92ef8a14008ca6e8532b3227aa8e6dac2df81ac64d383b12818fd2e16500ed1cdeedfc3c48f1c9a59871b726b3c96177972b1b274ef268a6a4365f300a368cd1ba363037f7c73eeccb03092564e9a39fa322494c98477581c378c8582fecc7c683564bdd04f604e2f6823cb2ad25cbc5bae821a84db101c6a2a6c36071102c298adb3f4b3b18e2deec4969ffb063346b6bb57aa8d3c52a32f34735ef62df3e064c8aa62452d7b9cfee33334e32e700b11e4282f4cf188ae8cd4a9b4de140345a8571c421f45e58ef6c3648dfc97593e41ffcc926e8e80f35b04d4ef06a40f7a6c4fc85153eb1088ced2e5a0bc1a169bb0e0e531c9242c29e3f2b8f53841f03d89390f3245a55a41a3892e2e61941c17fd8d227cee26a85278caae3cf1f95cf3debe604d80fecc9ead3e0aff66096f5b1b31d3930ad8ebc2cd893866c01d948b5e2e08055cb1f9958c3be31ce3d3411be2bd27c7535a48a554ab68f3ceeb9e2f6862de6f3cba153b45f4cb746dcd30a63ac01198d228f386dc75eadbad5b600d21f253371af81aef4ae1851e9ad8e0203996a2ff0a2ff6b75709b9ee3e9608a0aab68072b6a39dbce03b8b2a8730cd39d4848e90011364b02df9988be7bf3bbaa99f6d1bd72853760b99321d006ef97a0492b7ac63ce611cebe33fed2345c94bc4d2c39a36c1f0456df1fa0180a0655f6adaf37f5f1463cc7426678b633b6e054fd3c33212a83ebc826502126c86b2cfa71023a49789e77154fc52aea34a7525585c34910e03e26db1980201a58cba5ce3c206057106c2e680f39dc2d0a69e0653f19cd62cbd2c32317587bf30b1946258fdd411fa679c8aa32cd288a94becea49db5e67cf1dc9cdd708cde29bb5c5600eea0e4343c06b3d544322e2c57b9efe951a83d627efc24c0ef8e756174472da7fd3a5c72740838432b0d585c103a5fcc39c9a227c7e1ec368879b103dd8d003d2cf4b4af62efbb9f46cc00d2854ad366e39425fe06162931951c4c35e447c97692cb9f1f6e745bea077cf3a2f02309227b8876b5ef1fb50e181833bf4568c80061c7d51d689642079e04ff12f7481ca28153c38acdbb062b0a85b4abad34680ea780210239a56ca912c19e1276fcb5b27c35242e97d18dd34b8894e45fc89b72425eea21f8ef63e71868708a5b50627abab1359f1818e91b9659459dde7424ee7382265fb58e71024e96bc00121ee1d9c682f19b654a94013d25a341cc562ea786c574c8e786f42988645bfdcf8a8a41f6f388e420f5e187b5f4389eb34d6ba3069ad8dae13b290d6465ea773accfd10888d8027920d60fc015ccb959021e88b9ea64ed7cc523726fd07a6afbdc083966b13f87040c6a40adc0e02ddb59fbe8f780d11587d4e83e09042c721fbe519d89bc63d3ea10d690a026956a1310226928cab8929b55a852599b70c1d1fcf73736878e34f47445455b050ad722fcad554eb6a63e4c108bdd5b49344209f68eef1f5793da3977106164c44a194f21e9d0eddf70b6104b9a04c174a6ad940f474e8ae8bf246410d3632f6c8808a90b1571019e2b736e544e03b820f1f7954bed9221aa6b350d3915697527fcd746b3f0952dbf0cc7a39ec5fd3c6680fe7f92eabb47acfd655071e521da9b87ea4c97548c662674a99504f5de0c18221330893b2aabcc3fda4bdb45e3055e058f59080f28cedd99d26a15ab7a3c929d750446ed68631852330b4692fb7b3db3161fc13d162375f582486f49be84d0a2a6a8795790027a56f9044920f636f05a44b79299d1712f848a146d95094075ac566db90ce606c3ec3410b91910daf5acae9aa200ca0781d18562ef2d3ab21b13332ccf331c8f9115879faea4a42e200c9286858df71cd8488ac27e35b1d934ff791c80b31189754bcfa70b9c7c8644af9a03218f4e6a083996aec8304d447f5db77c2bd63d873ed7d74e1eb6feab136aaccbdbcbd70a24bb8ed06304a6958f082347120e18598002f645bc7bfab6c6b5c6fa094a0fe0354f1df446af57a862a32da053be00377a80652a2496af44a072fffa72d82262ce313b3232eb69cd711e06b04725ab91fef74f271356bf4c96c7b93b673166d4bb65e1ac7a882b81c0fc8f0ec8665c865b033792a688c41ec7598eda7f3388f9b008050cb7d9f73c9598cef08763a2594931fdabeb7c551e0c2f05598c41c6d06ab169f9342c88e15460a78aa2db667b4609d592cc30dbfa9349ee8c27b82a9c60a69d5b87edada85b932c51d82317b37fab329a990ed5d76f9e12893fe9dbdc4108e625505ef618f6068197fb58c6d5f93c2d0af40e8c524f577fb42a8125f32d7c23e8dafc1247df5574a259cbea2e9efff406e0c5686bdfa9584431e3fcf8ca361342e0c03d6f5d734ad64257d4f79f5ab32ec7aadec3306b4d38b5c4c09f63eeeeba79274ecf3697074be805facdce043f74479c6191c94864b9a1dd536b9dc59aedec109226cd95474b26227813d221b652929c63c609ab48266254cd83fa04993c878594dd41da8a1716a9df54398a54e0519bdf554125f1d6ffaf327ff31c9b135765b8e8bb82344b47f4a5df229ebcaf8c2fa7c5956a7f69c7b9fedb70c95245db8bb4ac9d39f168e4b8baa5f259abe67c7d249d03a04bbeeaaa9446380ac0a030a24f4b83c50ccc9525f09fc876189f3e6038ebc4a4a12397c56048a67f9f1d382ec0a76582834fe74610b609b41bd18c7f2b335471dcfa3050e7c27728c1733b919f9c6a59c5d8f7426c714399de1fde5c46821ff7776b6690c2dc3135087c5f15ef5e21e8e7780ff24bfe763a3c0c7077d26139e363e317bf0f1f885cd4a379ee32f199ec9077c7ba36d46d940b5669e7c758db949050953502ad62ef15fc01e944c56a364b9be5628c4703602fbed236ca344f41d5fcf0380cae8674bc87cbbb68507348d638fcab4130764243ae6916b24fb075be9b7caec86144034b3737b7b167c1257948cf243f5adfa85bf8cea0aa7b052b14719c6cb16baef76662c073baba35d190d2228c03de7836b6ac1d86c05b7b891f980e5cf65a5032704ccbc6428d4b6b2f43fefe40a6527c116b4d132953f0540faa0812e3715ca60fa3be3a2886c780c2b41e4704676eaac35a8211690e3b7de205c2d31eae7a29bf2e7dd4743d88a08f72c42c66bc195e40fc8beb673fb5a19c12f934e6797a9a23170983beb2b7ae85bcaf02eeae1e7d63b469e25a129af131c15ac3b2", @typed={0x8, 0x68, 0x0, 0x0, @fd=r7}, @generic="08161ddda7e0ad7430b76f0160a501ef35f11ba8e6210601cc578cbd01ea05dab2c5e904232d4c3199d80278164f16def6113030bffc3c7fe5f7c1e4bef4c19a82fa56ddd39a7dba120a4cdb9c9ca73a5f79e4e37e627eeb568f432a1a7bc0ebf502d8b8fd9fc8fcdf27a79082540cf6fa13490d12d66e7bdeafd4678db33b19f90ce1fc7c738bd7f8cbd5f6fdfddab16fa4c1edf702bfc78de2bcf362c3b7d6ca08", @generic="e3d82b26123fad5eb28e3d722f4af3fdd15decd44749782ab272e72492c9fd8fb5", @generic="29c4273724750d3bb87b782b4b93cdc238f184590aeaf02d966baf9634b6122393a8b60d97c565d6e0f09e46087ec56b60ca2904c735f59be99fb5475d29761c4391d0636a475ed810927cf2973ecf5c18307ef4aca3772a72fe8b20b98340e42f3aa47d110a8e37866863f3561ee61e294fc9324d24847301689a17875518137547571ac0a2238a98f757c71760e8f05ea6313d29e4aa9b8f38b71a4997cd2c2c8c336227294760b289a47366f03b44b65fa43cc38482393dc2b323c4251ef19c4b51155614801d444319b42dda4dfc7113a41a3d58b959cb9d8f8da27dc5f2a153", @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}]}, @generic="6291067328dc6779bd2cd875f3e057d4200cc31995df95c3d1430ca4116dc32577cbc8894d24c98c559f8322d1e2f9963c7b47973c3a2aeabe", @nested={0x1dd, 0x12a, 0x0, 0x1, [@generic="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", @typed={0x8, 0x132, 0x0, 0x0, @u32=0x200}, @typed={0xb5, 0x79, 0x0, 0x0, @binary="810946d6f1977b732117b432e8ed58484cb040c177b7333eae1cf20b8dd45536cc6ed420002468a6e968eec7d87c35a44866b546598b19bd36ee3de8390b884a5b6e0b103906cffb925b084fa83bd779076ac100293b6c4b3a1bcb4c1c2d66dec545bd4e13464f25c85b0dc2eae190d293a7798b4f71635a8d38430d9cea018cc68f3e6f0a9942e857a7d34af57cdbdbd2ec7a73d7621839903969fb28992b627d84349dcb52b57dfd203bc6f18ece9620"}, @nested={0x4, 0x27}]}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r6}, @nested={0xe5d, 0x142, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @ipv4=@remote}, @generic="2e94605d67a028f63a6275adab03f0a7b5b2641161c218d7157bfb048509057858805d099ccae9fa7c2f73cae92f141ad94bfe7a8ad9246c12476bf6c8658ad9ba00e2692f96fe6760d6f24b5dcede031d339548842a3ac992c9dc705ab36307", @nested={0x4, 0x69}, @nested={0x4, 0x59}, @nested={0x4, 0x6}, @generic="372459ebb4e177ba73c737aad0e7987433ce090a92c29a40c207f670e612dee2e49bb04b33242e217d1b781656998e489ef864453b60af3c021d8e097e4a6b0e5c14c0afe4628fefa8e7dff6448475165c1e0c809fe130446eea32f07e55227e2e7612e673f94432c289f0771cfb7319254d7581696354c9ea8cc20e69b5e3d4fa912ed899c89016a2513743964e99804a03d3605102d49d47f3f86ca97f059d0e9f461148dc5e687b46f4b526b6d6c84dcbe42e933324a513", @generic="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"]}]}, 0x2310}], 0x2}, 0x10) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r11, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.798613471s ago: executing program 0 (id=1675): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/70, 0x328000, 0x1800, 0x0, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/70, 0x328000, 0x1800, 0x0, 0x2}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x19, r1, 0x81, 0x6) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 7.537755926s ago: executing program 0 (id=1676): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3c0, 0x2c0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0xef92, 0xca9, 0x9, 0x0, 0xd, 0x0, 0x2}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000317000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000a0f000/0x3000)=nil) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000893000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0xcc34b000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f00008d4000/0x2000)=nil, 0x2000, 0x9) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000440)={r8, 0x487d60c11958e33, 0x4, 0x0, &(0x7f0000000040)}) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) 6.179002294s ago: executing program 4 (id=1680): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) (async) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x56595559}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x56595559}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x3a4, &(0x7f0000000040)=ANY=[]) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES8=r2, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="3cb99e263b728076ae2832518b9a794ba8d031658431c213c65c3337ce1bd65a4c3973b2224b4b9bf42c028c4c940abe09c74c50159ed989d5d53feecf343b6156140d6bd0c6378b7d8a72545067abcd373d5f9cb690afd7c482e25e6421c4de3662701ce2021d6f2f22794c137ad5776ffbb78b85ba", @ANYRES32=r2, @ANYBLOB="0a000200bb"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 6.05984768s ago: executing program 0 (id=1681): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1}, 0x100}], 0x1, 0x10022, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000240)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) 5.379490335s ago: executing program 1 (id=1684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc, &(0x7f0000000100)={[{0x8, 0x4e00, "0c40dec216970984"}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa9) r6 = openat(r5, &(0x7f0000000780)='./file0\x00', 0x0, 0x10) getdents(r6, &(0x7f0000000380)=""/143, 0x8f) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000013c0), 0x101480, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r9, 0x8008ae9d, &(0x7f0000002000)=""/194) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r8, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 4.994147756s ago: executing program 2 (id=1686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772ff3000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (fail_nth: 1) 4.691063185s ago: executing program 2 (id=1687): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000011030000000000000000000008004b001300000008004f"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = getpid() connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r4) recvmmsg(r1, &(0x7f0000000300)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/140, 0x8c}, 0x7fffffff}], 0x1, 0x3, 0x0) accept(r2, 0x0, 0x0) prlimit64(r3, 0x4, &(0x7f0000000280)={0x6, 0x8}, &(0x7f00000002c0)) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6f, 0x1, 0x3, 0x1, 0x2, 0x1c, {0x9, 0x21, 0x401, 0x3, 0x1, {0x22, 0xcbb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf7, 0x3, 0x3}}}}}]}}]}}, 0x0) 3.82132617s ago: executing program 1 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'nat\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xf4, 0xf, 0x4, 0x8, 0xace, 0x13a1, 0x444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0x0, 0x8, 0x0, 0x98, 0xaa, 0xc9, 0x5}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.780371852s ago: executing program 3 (id=1689): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffd, 0x2) fdatasync(r0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000080)={0x6, 0x1, 0x5, 0x9, 0x2, 0x0, [{0x2, 0xee, 0x4, '\x00', 0x83}, {0x7, 0x4, 0x72, '\x00', 0x2}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=0x0, 0x22, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x19, 0x2000, 0x0, @value, @void, @void, @void, r3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r4) (async) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) (async) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x3, 0xdf, 0x4e4a, 0x10402, 0xffffffffffffffff, 0x9, '\x00', r2, r0, 0x1, 0x1, 0x1ff, 0x0, @void, @value, @value=r5}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x5, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40) syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x20000) (async) r7 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x20000) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000680), 0x2, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000680), 0x2, 0x3}}, 0x20) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) fsetxattr(r10, &(0x7f0000000740)=@known='com.apple.FinderInfo\x00', &(0x7f0000000780)='\x00', 0x1, 0x0) (async) fsetxattr(r10, &(0x7f0000000740)=@known='com.apple.FinderInfo\x00', &(0x7f0000000780)='\x00', 0x1, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x20c, 0xc, 0x1, 0x3, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x4}, [@generic="4ca8a5ded5efa0304bc5f793feef701e9bc0dc4552ad3d80826dbbab464b", @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@loopback}, @generic="5b2cd99bc1394834f99ae2a2c4e56f590ed7c1a94bdf095c9bf508926bcd158c74fdc5cc8c177d899bbe184701a3692648ee2c59bf0abddc8ee60b498c61757f79548ca8859b14be7fe8882c8ee236c6d204ddac5eb5fec3d468f441a83d7d73a37c1eb8a06df19458e2683cab3362a875748c57ed57981a972f5df3ec18816c0e5b3cba942809b69f319b6575b4d959b974ad67ed9c63", @nested={0x129, 0xa8, 0x0, 0x1, [@nested={0x4, 0x9c}, @generic="6ad3eeee034206a0881e84eaa3849fbd946dc1f1c956e7f03e48805208ac7dacda846a40a63f5743487e5d03b886abe9d7237da77f602e1f020c6dd13913ecd30e9a5c3eeb6387fcc98bf7c27e61973bf82403e3e1702f44057e96fe2bde94d625981a4d4a2618e3ddf02c3fa5440faa6c739da90acd5523ea10c917fd1faf834a1ac7ddd0d5b4f1299a414a296bab5a36256e25de3df5e86c388c39cbada74dca0900effdd4228cca9ea31a501ead5a54605bfdf12ae4ed4a22806fb01635b2accdce124f", @nested={0x4, 0x141}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}}, @generic="08d4f11a3cb3cc060a7b45a8f189ee3d14dd5d5844ef2d0be211e2656b53f7d1c82df91f4a86363f5116377d285052b6cf1981760d233244", @nested={0x4, 0x81}, @nested={0x4, 0x7}, @nested={0x4, 0x31}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000800)={0x20c, 0xc, 0x1, 0x3, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x4}, [@generic="4ca8a5ded5efa0304bc5f793feef701e9bc0dc4552ad3d80826dbbab464b", @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@loopback}, @generic="5b2cd99bc1394834f99ae2a2c4e56f590ed7c1a94bdf095c9bf508926bcd158c74fdc5cc8c177d899bbe184701a3692648ee2c59bf0abddc8ee60b498c61757f79548ca8859b14be7fe8882c8ee236c6d204ddac5eb5fec3d468f441a83d7d73a37c1eb8a06df19458e2683cab3362a875748c57ed57981a972f5df3ec18816c0e5b3cba942809b69f319b6575b4d959b974ad67ed9c63", @nested={0x129, 0xa8, 0x0, 0x1, [@nested={0x4, 0x9c}, @generic="6ad3eeee034206a0881e84eaa3849fbd946dc1f1c956e7f03e48805208ac7dacda846a40a63f5743487e5d03b886abe9d7237da77f602e1f020c6dd13913ecd30e9a5c3eeb6387fcc98bf7c27e61973bf82403e3e1702f44057e96fe2bde94d625981a4d4a2618e3ddf02c3fa5440faa6c739da90acd5523ea10c917fd1faf834a1ac7ddd0d5b4f1299a414a296bab5a36256e25de3df5e86c388c39cbada74dca0900effdd4228cca9ea31a501ead5a54605bfdf12ae4ed4a22806fb01635b2accdce124f", @nested={0x4, 0x141}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}}, @generic="08d4f11a3cb3cc060a7b45a8f189ee3d14dd5d5844ef2d0be211e2656b53f7d1c82df91f4a86363f5116377d285052b6cf1981760d233244", @nested={0x4, 0x81}, @nested={0x4, 0x7}, @nested={0x4, 0x31}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000ac0)=""/197, &(0x7f0000000bc0)=0xc5) socket$netlink(0x10, 0x3, 0x13) fgetxattr(r10, &(0x7f0000000c00)=@random={'system.', '/proc/thread-self\x00'}, &(0x7f0000000c40)=""/192, 0xc0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000d00)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7fb45221, 0x0, 0xff, 0x1, 0x8, 0x8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000d40)=0x400, 0x4) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x867f}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008004}, 0x240000cc) (async) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x58, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x867f}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008004}, 0x240000cc) syz_io_uring_setup(0x647f, &(0x7f0000000ec0)={0x0, 0x1ab2, 0x800, 0x1, 0x1fe}, &(0x7f0000000f40), &(0x7f0000000f80)) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000fc0)={r8}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000001000)={[0x5, 0x8001, 0x8, 0x2e32, 0x72, 0x1, 0x9, 0x7fff, 0x400, 0x0, 0xb8d7, 0x0, 0x8, 0x7ff, 0x9, 0x3], 0x1000, 0x984}) 3.503690016s ago: executing program 3 (id=1690): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)={0x14, r3, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24008200}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x4dc, 0x13, 0x434eb5ae90e9a790, 0x70bd25, 0x25dfdbfb, {0x1e, 0x9, 0x0, 0x3, {0x4e20, 0x4e20, [0x9, 0xf, 0xffff156a, 0xb], [0x5, 0x4, 0x0, 0x7fffffff], r7, [0x7fa, 0x7]}, 0xd81a}, [@INET_DIAG_REQ_BYTECODE={0x5a, 0x1, "2c474c47a59a3b6dc6907116bb168631b2a76bc12dafd65cadf903245810ef3b18d5b53965dc9cb122845d051fbff3aa66f63cdd586bab9e12886a79d495d71a162c45149720757e9d9a048653f7f35561cf60da0b94"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "7e920597a5fadad19cb8e1187db5b011b0a76a251574f5e9b9989ac6653d141b6fa5ce3c52547bbe86d402dd48824161cc8878f3119babfa8aa7d8a10e13388a7b13e757f18e8a197d590630ae826754356b835415503e98ce1a18afbca08e622f204a81d3b44a1fa34ed102256b326d7483746520d04dd58dc538b4880c67cdea02c70a26fa862c6033dd058e602dac8e62f01bd8f136a6bdf12233a721c78aa43f388537aaa6f53eb072b9168b4531a191f6418f3e1c849f5501cd60c9c69da7aa4870de952e18c014d453d4f3e4b75ec2"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "4e4adc459b6568c0d56ac440a3ed0d4773a1d7eede921ca044cac399348a14e11dd8eb059f40114ab86a7a2c7e74ebdbd56f2ae5e0e73e55ba7d8ed4b2fc52ce950e15866fedf526fe6bf208f5fa9df49329a1fcd0b30e1add7f2e94dd1bd083a37d8439d2ffcb51e889053b3f0863bd1055c0c3c23ad03c4be9f430d5d0822a7c9884caafa2f36e1e8c86a2fc36b54270703cea7e054f54b5e4bc410240ef566075ab1f50ca11"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "f2acc89b73dd124fd95fe1e61f8a2f4e8dd63b60a448a6779c12b0492a6ddd4d9febd4d43227bf"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "3c85eeec4f9643aac3b317b6498577d7b306d049d2ada198c07df884e25dc10fa25a959fd4034d2957fc436629893382fd952a632bd023e81e462e912ba94af54d63923a2a4a5bc5eb0c63faef5ab99b21f0e181d2b97c5845b1951057cc603f9b2dd3ea36188bacccd7"}, @INET_DIAG_REQ_BYTECODE={0xae, 0x1, "b8a7a96835b8aa32c0380bccf215e5f11659ff31d8f55f3fc8b3853b2ce2afb49a44c1233067a318fc21d3d7861e49dcde670ba0e26e5135a951a6a80d4fce5080992aafa11ee35db102805fb4a31689b19c16f1206edb0a37a1279321bef984200f957efe762a6253f3a1912bdd7492e71fb5d2ec366f7314eb268863daf5cd767bbdd9a7549566d5f729def0471bcc7e832d8b38baefede2e3607f26e6feb2ec1039380bf2e414ace8"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "3cd3d71e1e5f72da4c48895f52cd60891ac8551ccb35372b2ee65d7012b8eb239dd586600ae9c1461cc568f51ccfe9827a840e393069face7e0197a82b90ecb0ddb02efe05720f7d25a67a5caeff77a9b07ac20202f72d6000a0cbc29a6b5938fdae32ac0f840286785b9d738dc780aa32b9460c794b96372da746a1db71ad734dcfcfd6044d408e1d9c62e4213f88c4095ddcf67cb8de7b1a8939e5fdc8cc5d2433957d7d372df8e420ef7586b30f0892a796b3e5b3987d07085435aefe3e2818fe2a6601a1f4ae9b25f36de214677acd27271890fd8c3036d626f7c5aec3e9fe4b4c3f0323ec1931849a"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "7abae2cea92b2bd761e9afd3dccabbf3ef50298e6b678f34fcb22f363db2160463c683e6b9d24fed9c21e84138eceab868552b572cd97fd2a5826f215ce35900ea757234df1be8050c8a1ed4843a250868705dcf7314bd8195b8e12ea2689fb6aefa01aba70acffa1e2b5db9700e"}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x8001}, 0x4000090) 3.458845962s ago: executing program 3 (id=1691): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 64) sendto$inet6(r4, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time={0x1f00}, {}, {0xe}, @queue}], 0x1c) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (rerun: 64) r5 = gettid() (async) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) r8 = syz_io_uring_setup(0x5f3, &(0x7f0000000140)={0x0, 0x2919, 0x1000}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18}) (async, rerun: 32) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) write$binfmt_misc(r7, &(0x7f0000000000)="180c4552", 0x4) (async) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000bdb000/0x2000)=nil}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.39844169s ago: executing program 3 (id=1692): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.243768478s ago: executing program 2 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, 0x0, 0x0) accept(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01020000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) 3.151906586s ago: executing program 1 (id=1694): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000980), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000009c0)={0x7, 0x5, 0x40}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) r3 = syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x2e0e, 0x0, 0x0, 0xffffffffffffffa2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x4000000, 0x1, 0x3, 0x2}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004200, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000751000/0x2000)=nil}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r6, @ANYRES16=r7, @ANYBLOB="0100000000000000000023000000180001801400010000007a5f74756e00000000000000000005000200010000004b50ce556b50c36a24774ce2187fcefcb42fbbf6955131af7417aa4c4437428abea58a70ef1aa0cc3d4f0342e7"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc000) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x38011, r6, 0x0) fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000080)='disBard', &(0x7f0000000140)='\x00', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000007, 0x10, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2.976269576s ago: executing program 4 (id=1695): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000045000000040000000fa2"], 0x45}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r8 = fcntl$getown(r4, 0x9) sched_setattr(r8, &(0x7f0000000180)={0x38, 0x0, 0x23, 0x1, 0x2, 0x4, 0x1, 0x9, 0x7ff, 0x60a1b014}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080ffff00000200ba659a2400000900000079040000080000000000010000000000f09eb8d2159fb806bc21e6b1fb46b39e99949d110d493f49f75163f671edc54c252b04feee43baaf9bd474b64973135fcda536c16c7fb8ed4fc9bd3ae3c152f7026b02d961018ea711fa42d19326b95ede369021cec8cd78bb5c2b7b2d85863b4bdb5eaa083ef89d01ac6c83a8179d1267d57b904efbbd19d695b8e5483424f0899d2781540425c311e5456fa74b7804557bf9ca18f88c1814f0fc1a41fbc2764faa4d9cb2a2a3eef6bb8dce1faa509600cd56096e1a3ce8774a024266e47e21b0f2a91a9d50cac202c48aac20e11f77abab37b6dcfab958450f00000000000000000000159783e41e77941ee23445364a79eab84bf9e03f2d034298"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x40000, 0x4) fsetxattr(r11, &(0x7f0000000500)=@random={'user.', '^^}+{-{\x00'}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000200)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x7, {0x2, 0x0, 0x20, 0x7, 0x80, 0x1000000}}, 0xc) r12 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000b, 0x80012, r12, 0x9c945000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x0) 2.887039814s ago: executing program 3 (id=1696): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400005e, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)="66db87cbdf8941448586dc1fb770fc2d4f52a231e367435f076bf3ac115eb918b54acc373ddfb9ceb0a0e86be3f02d6df20e3d0609bdb5069bf994f994d994a1b26ae9652908a592b978e251", 0x4c) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.885533874s ago: executing program 0 (id=1697): syz_usb_connect$hid(0x0, 0x90, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c040090400000103000000092109000001228c0009058103"], 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000900)=""/135) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x40, 0x9, {}, {0x1, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r4, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendfile(r8, r7, 0x0, 0x100000002) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000040)={0x3, 0x8, 0x80, 0x0, 0xd}) 2.205375919s ago: executing program 4 (id=1698): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r2, &(0x7f0000000700)=""/115, 0x73, 0x5) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000780)=0x6dc9) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000980)={0x1, 0xffffffff, 0x8001, 0x5, 0x1, 0x5}) 2.088055917s ago: executing program 1 (id=1699): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x80, &(0x7f0000000540)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3fb) read$char_usb(r2, &(0x7f0000000380)=""/69, 0x45) 2.015933464s ago: executing program 2 (id=1700): memfd_secret(0x80000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x78a9, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x7ffc, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x64010100, @loopback}, {0x1f, 0x7c, 0x0, @empty}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.95775117s ago: executing program 2 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000005c0)={0x1, 0x4, 0x0, {0x1, @sdr={0x38415261, 0x9}}, 0x2a6b000}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000000000000013000000050001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000380140001"], 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x5}) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d00004800000000000690780a010100ac1e0001830b48000000007f000001440c05000000000000000000860600"/70, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000000041e97"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000005c0)={0x1, 0x4, 0x0, {0x1, @sdr={0x38415261, 0x9}}, 0x2a6b000}) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060101000000000000000013000000050001"], 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c000380140001"], 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) (async) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x5}) (async) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d00004800000000000690780a010100ac1e0001830b48000000007f000001440c05000000000000000000860600"/70, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000000041e97"], 0x0) (async) 1.843865209s ago: executing program 2 (id=1702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x2000000000000000}, 0x0) socket(0x1, 0x803, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x800000, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x404, &(0x7f0000000440)={[{0xed, 0x4e00, "32597b24840f233bc2ffe840e91cf2aca67cca3b3a50aa822193fcd3ee8bdfb537eb46d2b04ff6db1684f0bda8fd3834f8d5e94d5cc843d5bf325c223b87494b14cc3fff9938a0cb0961194cfc1317ab5054b89b8b280c3940de27341d4520a4c371b5834d1ed43734dfb63931b99e42623365bfa856151256c7f45c603b9a3ef4539529e709b6db78641ab5295880ce1db5b2e4e208e913426d1180b51ac7b6cffda120cea9cf9909e712e8629e0ca6caaae078e0f82cb9866d618cc9aed9a88c8d1a7b597cfcbbcf4a52be2fe2dbfbf47a38279391a4845946c858c256781913fb8fca907cf763a880bfb503"}, {0x45, 0x4e00, "b599f5dd61699a3d09782e8d9798620d7b23ed570d167cf20ff7be062bdbd883f25905c15d8494c9a6a097f635dac45dc56636ce1f258863f54552ca1b1d9dec615e26ed14"}, {0x79, 0x4e00, "3d27e6056ff07245cfd71756283d8430cd3dd3ca4420824da31aa82b1369e13c53fa66d1a6d194adc2eb4ee017c2d9f7c979ca3a4270b75a63824b2443660092ad4c8ed86aa17814fc067a571b38525f7be7e53812fc468f1d3cf98cd4f38f32fd610dd8eb6d866ac4913f6a01b69c830e02594f0d66cb5b55"}, {0x21, 0x4e00, "d749a78830cf8c6c2daa6c095f12045043c7996ea36a491f558077052d7ff1b457"}, {0x215, 0x4e00, "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"}]}) eventfd(0xe) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='aufs\x00', 0x0) r8 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x16) 1.824848608s ago: executing program 3 (id=1703): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9a, 0x1, 0x1, 0x0, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006402000000008001340"], 0x64}}, 0x24002800) r3 = epoll_create1(0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r3], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB=' \ad'], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000000c0)={0x2000}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 912.94743ms ago: executing program 1 (id=1704): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "77d0"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e21, @multicast2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x8, 0x9, 0xd5}, 0x14) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x48, 0x118, 0x3ff, "8d618dd0ffc7e8f123e954eed124b4c1138791b3fe330a322fdff59a74c9f817ee44e703cc4cb5cfab2d5de92f1fe38e62ee460e4a"}], 0x48}, 0x40) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022050000"], 0x0}, 0x0) syz_usb_connect(0x6, 0x1b, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x17, 0x2a, 0x7b, 0x20, 0x2001, 0x3a01, 0xe6fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3, 0x8, 0xd0, 0x9}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3852}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0xfffffffffffffcbc, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r7, @ANYRES16=r6, @ANYRES8=r5, @ANYRES32], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_timedreceive(r9, 0x0, 0x0, 0x8e9, 0x0) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000000000)=0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 1 (id=1705): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=&(0x7f0000000180)=0xa3}}) syz_usb_connect(0x2, 0x440, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT], 0x0) kernel console output (not intermixed with test programs): ck [ 434.001804][ T5919] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 434.137336][ T10] usb 4-1: USB disconnect, device number 87 [ 434.162930][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 434.173814][ T5919] usb 3-1: config 0 has no interfaces? [ 434.182138][ T5919] usb 3-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 434.193856][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.203212][ T5919] usb 3-1: Product: syz [ 434.207413][ T5919] usb 3-1: Manufacturer: syz [ 434.212166][ T5919] usb 3-1: SerialNumber: syz [ 434.219378][ T5919] usb 3-1: config 0 descriptor?? [ 434.426806][ T5921] usb 3-1: USB disconnect, device number 63 [ 434.788264][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.798801][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.011100][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.020162][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.028107][ T5921] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 435.161889][ T5921] usb 4-1: device descriptor read/64, error -71 [ 435.402503][ T5921] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 435.531886][ T5921] usb 4-1: device descriptor read/64, error -71 [ 435.645188][ T5921] usb usb4-port1: attempt power cycle [ 435.982081][ T5921] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 436.002362][ T5921] usb 4-1: device descriptor read/8, error -71 [ 436.242487][ T5921] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 436.272340][ T5921] usb 4-1: device descriptor read/8, error -71 [ 436.281861][ T5969] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 436.439935][ T5921] usb usb4-port1: unable to enumerate USB device [ 436.463285][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.485273][ T5969] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 436.530708][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.606121][ T5969] usb 3-1: config 0 descriptor?? [ 436.940796][T10745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1154'. [ 436.950735][T10745] unsupported nlmsg_type 40 [ 437.058992][ T5969] hkems 0003:2006:0118.0014: unknown main item tag 0x3 [ 437.083458][ T5969] hkems 0003:2006:0118.0014: unknown main item tag 0x2 [ 437.090418][ T5969] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 437.128313][ T5969] hkems 0003:2006:0118.0014: hidraw0: USB HID v0.01 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 437.166170][ T5919] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 437.178978][ T5969] hkems 0003:2006:0118.0014: no inputs found [ 437.185397][ T5969] hkems 0003:2006:0118.0014: force feedback init failed [ 437.332132][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 437.341330][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.362357][ T5919] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.375668][ T5919] usb 5-1: New USB device found, idVendor=16f0, idProduct=10bb, bcdDevice=de.8e [ 437.391957][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.433103][ T5919] usb 5-1: Product: syz [ 437.437755][ T5919] usb 5-1: Manufacturer: syz [ 437.443038][ T5919] usb 5-1: SerialNumber: syz [ 437.451205][ T5919] usb 5-1: config 0 descriptor?? [ 437.700844][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.732468][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.838543][ T5919] usb 3-1: USB disconnect, device number 64 [ 437.993536][ T30] audit: type=1326 audit(1751305094.142:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431038e929 code=0x7ffc0000 [ 438.135124][ T30] audit: type=1326 audit(1751305094.142:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431038e929 code=0x7ffc0000 [ 438.161233][ T30] audit: type=1326 audit(1751305094.202:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f431038e929 code=0x7ffc0000 [ 438.190331][ T30] audit: type=1326 audit(1751305094.202:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431038e929 code=0x7ffc0000 [ 438.339347][ T30] audit: type=1326 audit(1751305094.202:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431038e929 code=0x7ffc0000 [ 438.698272][T10765] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1160'. [ 439.581643][ C0] hrtimer: interrupt took 25919 ns [ 439.844628][T10740] delete_channel: no stack [ 439.865564][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.880416][ T5921] usb 5-1: USB disconnect, device number 80 [ 439.900509][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.302629][ T5921] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 440.491958][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 440.511962][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.552444][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.592020][ T5921] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 440.624732][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.675263][ T5921] usb 5-1: config 0 descriptor?? [ 440.927904][T10799] bond0: (slave bridge_slave_1): Releasing backup interface [ 440.953739][T10800] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 441.104369][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.149228][ T5921] redragon 0003:0C45:760B.0015: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 441.161985][T10799] bond5: (slave ip6gretap1): Removing an active aggregator [ 441.170519][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.193946][T10799] bond5: (slave ip6gretap1): Releasing backup interface [ 441.249664][T10799] ip6gretap1: left promiscuous mode [ 441.288225][T10799] ip6gretap1: left allmulticast mode [ 441.335992][ T5921] usb 5-1: USB disconnect, device number 81 [ 441.484541][ T30] audit: type=1326 audit(1751305097.652:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8466f8e929 code=0x7ffc0000 [ 441.508351][ T30] audit: type=1326 audit(1751305097.652:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8466f8e929 code=0x7ffc0000 [ 441.536725][ T30] audit: type=1326 audit(1751305097.652:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f8466f8e929 code=0x7ffc0000 [ 441.567414][ T30] audit: type=1326 audit(1751305097.652:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8466f8e929 code=0x7ffc0000 [ 441.590761][ T30] audit: type=1326 audit(1751305097.652:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.3.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8466f8e929 code=0x7ffc0000 [ 441.893024][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 441.980055][T10825] syzkaller1: entered promiscuous mode [ 442.001669][T10825] syzkaller1: entered allmulticast mode [ 442.108041][T10828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.253276][T10833] bridge0: port 1(syz_tun) entered blocking state [ 442.282246][T10833] bridge0: port 1(syz_tun) entered disabled state [ 442.289032][T10833] syz_tun: entered allmulticast mode [ 442.305255][T10833] bridge0: port 1(syz_tun) entered blocking state [ 442.312728][T10833] bridge0: port 1(syz_tun) entered forwarding state [ 442.953988][T10850] input: syz1 as /devices/virtual/input/input35 [ 443.316018][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059332000: rx timeout, send abort [ 443.667902][T10861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.816140][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059331c00: rx timeout, send abort [ 443.825622][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059332000: abort rx timeout. Force session deactivation [ 444.324441][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059331c00: abort rx timeout. Force session deactivation [ 444.443183][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.452491][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.503392][T10880] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1194'. [ 444.828986][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1196'. [ 445.127669][ T121] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 445.311686][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 445.331334][ T121] usb 4-1: config 0 interface 0 has no altsetting 0 [ 445.380538][ T121] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 445.397235][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.403722][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.589468][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.610735][ T121] usb 4-1: Product: syz [ 445.634482][ T121] usb 4-1: Manufacturer: syz [ 445.643222][ T121] usb 4-1: SerialNumber: syz [ 445.655534][T10899] sock: sock_set_timeout: `syz.4.1200' (pid 10899) tries to set negative timeout [ 445.669026][ T121] usb 4-1: config 0 descriptor?? [ 445.880642][ T121] gs_usb 4-1:0.0: Configuring for 196 interfaces [ 445.887926][ T121] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 445.905589][ T121] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 446.249946][ T121] usb 4-1: USB disconnect, device number 92 [ 446.269066][T10910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.054091][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.272622][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 447.872121][T10931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.882004][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.908491][T10931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.012065][ T9] usb 4-1: device descriptor read/64, error -71 [ 448.304336][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 448.471654][ T9] usb 4-1: device descriptor read/64, error -71 [ 448.622467][ T9] usb usb4-port1: attempt power cycle [ 448.836716][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c455c00: rx timeout, send abort [ 448.891485][T10952] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1211'. [ 448.992417][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 449.036807][ T9] usb 4-1: device descriptor read/8, error -71 [ 449.081436][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 449.081457][ T30] audit: type=1326 audit(1751305105.232:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10953 comm="syz.2.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f431038e929 code=0x0 [ 449.173754][T10955] usb usb8: usbfs: process 10955 (syz.2.1212) did not claim interface 0 before use [ 449.298123][T10959] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1213'. [ 449.311801][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 449.336836][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c455000: rx timeout, send abort [ 449.346486][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c455c00: abort rx timeout. Force session deactivation [ 449.372485][ T9] usb 4-1: device descriptor read/8, error -71 [ 449.492086][ T9] usb usb4-port1: unable to enumerate USB device [ 449.734214][T10965] loop4: detected capacity change from 0 to 7 [ 449.749498][ T6102] Dev loop4: unable to read RDB block 7 [ 449.761968][ T6102] loop4: unable to read partition table [ 449.768119][ T6102] loop4: partition table beyond EOD, truncated [ 449.778897][T10965] Dev loop4: unable to read RDB block 7 [ 449.790471][T10965] loop4: unable to read partition table [ 449.814309][T10965] loop4: partition table beyond EOD, truncated [ 449.822110][T10965] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 449.845138][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c455000: abort rx timeout. Force session deactivation [ 450.747636][T10986] netlink: 'syz.2.1220': attribute type 23 has an invalid length. [ 450.959370][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.990801][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.435525][T11002] loop6: detected capacity change from 0 to 1 [ 451.454173][ T6102] Dev loop6: unable to read RDB block 1 [ 451.460834][ T6102] loop6: unable to read partition table [ 451.476153][ T6102] loop6: partition table beyond EOD, truncated [ 451.530546][T11002] Dev loop6: unable to read RDB block 1 [ 451.568391][T11002] loop6: unable to read partition table [ 451.571750][ T5919] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 451.612765][T11002] loop6: partition table beyond EOD, truncated [ 451.650846][T11002] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 451.821804][ T5919] usb 4-1: device descriptor read/64, error -71 [ 451.969128][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.986527][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 451.998036][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.111709][ T5919] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 452.261781][ T5919] usb 4-1: device descriptor read/64, error -71 [ 452.422230][ T5919] usb usb4-port1: attempt power cycle [ 452.541228][T11015] netlink: 'syz.0.1230': attribute type 4 has an invalid length. [ 452.580896][T11015] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1230'. [ 452.608660][ T30] audit: type=1326 audit(1751305108.772:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 452.677199][ T30] audit: type=1326 audit(1751305108.772:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 452.740794][ T30] audit: type=1326 audit(1751305108.812:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 452.835422][ T5919] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 452.847903][ T30] audit: type=1326 audit(1751305108.822:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 452.919665][ T5919] usb 4-1: device descriptor read/8, error -71 [ 453.046027][ T30] audit: type=1326 audit(1751305108.822:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 453.099226][ T30] audit: type=1326 audit(1751305108.822:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 453.122206][ T30] audit: type=1326 audit(1751305108.822:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 453.149003][ T30] audit: type=1326 audit(1751305108.822:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 453.172076][ T30] audit: type=1326 audit(1751305108.822:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.4.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5afad8e929 code=0x7ffc0000 [ 453.194619][ T5919] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 453.411882][ T5919] usb 4-1: device descriptor read/8, error -71 [ 453.601846][ T5919] usb usb4-port1: unable to enumerate USB device [ 453.941751][ T5921] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 454.102333][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 454.109626][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.126022][ T5921] usb 3-1: config 1 has an invalid interface number: 160 but max is 0 [ 454.141117][ T5921] usb 3-1: config 1 has no interface number 0 [ 454.147434][ T5921] usb 3-1: config 1 interface 160 has no altsetting 0 [ 454.164695][ T5921] usb 3-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 454.174045][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.185679][ T5921] usb 3-1: Product: Ь [ 454.189851][ T5921] usb 3-1: Manufacturer: ᭍餠柶醨痸鰧뫄⺎틽⪥璇ꤣ艿﫸䷚ㅜᥨ華鿄ꩲᩈ걇笟 [ 454.218276][ T5921] usb 3-1: SerialNumber: syz [ 454.448931][ T5921] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 454.469876][ T5921] visor 3-1:1.160: Handspring Visor / Palm OS converter detected [ 454.500180][ T5921] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 454.543485][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 454.543504][ T30] audit: type=1326 audit(1751305110.712:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94459858e7 code=0x7fc00000 [ 454.581028][ T5921] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 454.608738][ T5921] usb 3-1: USB disconnect, device number 65 [ 454.652912][ T5921] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 454.669833][ T30] audit: type=1326 audit(1751305110.712:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f944592ab19 code=0x7fc00000 [ 454.729328][ T5921] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 454.762053][ T5919] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 454.774864][ T5921] visor 3-1:1.160: device disconnected [ 454.784590][ T30] audit: type=1326 audit(1751305110.712:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f944592abdf code=0x7fc00000 [ 454.811858][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 454.850160][ T30] audit: type=1326 audit(1751305110.712:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f944598e929 code=0x7fc00000 [ 454.939417][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.950791][ T5919] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 454.961633][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 454.968983][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.980087][ T9] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 455.001614][ T9] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 455.018114][ T5919] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58 [ 455.027768][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 455.037687][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.048994][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 455.060923][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.069979][ T9] usb 4-1: Product: syz [ 455.079502][ T9] usb 4-1: Manufacturer: syz [ 455.086742][ T5919] usb 5-1: config 0 descriptor?? [ 455.096096][ T9] usb 4-1: SerialNumber: syz [ 455.132881][T11056] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 455.452029][ T5921] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 455.592487][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input37 [ 455.606962][ T9] usb 4-1: USB disconnect, device number 101 [ 455.611993][ T5921] usb 3-1: device descriptor read/64, error -71 [ 455.618882][ T5188] bcm5974 4-1:1.0: could not read from device [ 455.872161][ T5921] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 455.876272][ T7402] udevd[7402]: Error opening device "/dev/input/event4": No such file or directory [ 455.901394][ T7402] udevd[7402]: Unable to EVIOCGABS device "/dev/input/event4" [ 455.910735][ T7402] udevd[7402]: Unable to EVIOCGABS device "/dev/input/event4" [ 455.919566][ T7402] udevd[7402]: Unable to EVIOCGABS device "/dev/input/event4" [ 455.934580][ T7402] udevd[7402]: Unable to EVIOCGABS device "/dev/input/event4" [ 456.013590][ T5921] usb 3-1: device descriptor read/64, error -71 [ 456.152335][ T5921] usb usb3-port1: attempt power cycle [ 456.321074][ T5969] usb 5-1: USB disconnect, device number 82 [ 456.531661][ T5921] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 456.602147][ T5921] usb 3-1: device descriptor read/8, error -71 [ 456.762139][ T5969] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 456.842113][ T5921] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 456.883018][ T5921] usb 3-1: device descriptor read/8, error -71 [ 456.890951][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 456.902630][ T5969] usb 5-1: device descriptor read/64, error -71 [ 456.914901][T11071] vlan2: entered allmulticast mode [ 457.001133][ T5921] usb usb3-port1: unable to enumerate USB device [ 457.181955][ T5969] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 457.341845][ T5969] usb 5-1: device descriptor read/64, error -71 [ 457.487401][ T5969] usb usb5-port1: attempt power cycle [ 457.841668][ T5969] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 457.863293][ T5969] usb 5-1: device descriptor read/8, error -71 [ 458.118068][ T5969] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 458.137557][T11081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.165772][ T5969] usb 5-1: device descriptor read/8, error -71 [ 458.292087][ T5969] usb usb5-port1: unable to enumerate USB device [ 458.568919][T11090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.223960][ T30] audit: type=1326 audit(1751305115.372:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.2.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f431038e929 code=0x0 [ 459.296690][T11097] fuse: Bad value for 'user_id' [ 459.301873][T11097] fuse: Bad value for 'user_id' [ 459.310175][T11097] loop2: detected capacity change from 0 to 7 [ 459.320928][ T6102] Dev loop2: unable to read RDB block 7 [ 459.327433][ T6102] loop2: unable to read partition table [ 459.344396][ T6102] loop2: partition table beyond EOD, truncated [ 459.355386][T11097] Dev loop2: unable to read RDB block 7 [ 459.364019][T11097] loop2: unable to read partition table [ 459.370075][T11097] loop2: partition table beyond EOD, truncated [ 459.376988][T11097] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 459.571949][ T5921] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 459.792122][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 459.800433][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 459.815169][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 459.829421][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 459.839803][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 459.852434][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 459.881034][ T5921] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 459.891044][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.940484][ T44] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 460.205207][ T5921] usb 3-1: Product: syz [ 460.239566][ T5921] usb 3-1: Manufacturer: syz [ 460.244861][ T5921] usb 3-1: SerialNumber: syz [ 460.297075][ T5921] usb 3-1: config 0 descriptor?? [ 460.315153][ T44] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 460.407642][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.550962][ T44] usb 4-1: config 0 descriptor?? [ 460.755589][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 460.806718][ T5921] input input38: Device does not respond to id packet M [ 460.923226][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 460.930692][ T5921] input input38: Device does not respond to id packet P [ 461.078517][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.108404][ T5921] input input38: Device does not respond to id packet B [ 461.150769][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.166726][ T5921] input input38: Device does not respond to id packet N [ 461.192487][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.220282][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.244428][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.270040][ T5921] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 461.367913][ T5921] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 461.469635][ T5921] usb 3-1: USB disconnect, device number 70 [ 461.729752][ T30] audit: type=1326 audit(1751305117.892:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.4.1260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f5afad8e929 code=0x0 [ 461.751641][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.840146][ T44] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 461.854005][ T44] usb 4-1: USB disconnect, device number 102 [ 462.112893][T11060] Set syz1 is full, maxelem 65536 reached [ 462.285159][T11137] ip6tnl1: entered promiscuous mode [ 462.297886][T11137] ip6tnl1: entered allmulticast mode [ 462.635423][T11147] binder: 11143:11147 ioctl c0306201 0 returned -14 [ 462.703872][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1266'. [ 462.745363][T11153] binder: 11143:11153 ioctl c0306201 0 returned -14 [ 463.012400][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 463.124618][T11158] xfrm1: entered promiscuous mode [ 464.400752][T11194] veth1_to_bond: entered allmulticast mode [ 464.512782][T11194] veth1_to_bond: left allmulticast mode [ 466.137387][T11227] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 466.148564][T11227] program syz.3.1283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.236917][T11227] input: syz0 as /devices/virtual/input/input39 [ 466.259703][T11227] input: failed to attach handler leds to device input39, error: -6 [ 466.629549][T11234] loop4: detected capacity change from 0 to 7 [ 466.655142][T11234] Dev loop4: unable to read RDB block 7 [ 466.667671][T11234] loop4: unable to read partition table [ 466.690496][T11234] loop4: partition table beyond EOD, truncated [ 466.713884][T11234] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 467.332909][ T5843] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 468.325783][T11250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 468.333245][T11250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.339659][T11250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.357995][T11250] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 468.378150][T11250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 468.417293][T11250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.631406][T11265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.640449][T11265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.727252][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 468.861040][T11268] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3225710783 (206445490112 ns) > initial count (177449368832 ns). Using initial count to start timer. [ 468.914411][ T10] usb 5-1: device descriptor read/64, error -71 [ 468.937130][T11268] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3925589830 (7851179660 ns) > initial count (51638876 ns). Using initial count to start timer. [ 469.146690][T11278] xt_hashlimit: max too large, truncated to 1048576 [ 469.161046][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1299'. [ 469.203149][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 469.322059][ T5919] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 469.350383][ T10] usb 5-1: device descriptor read/64, error -71 [ 469.519711][ T10] usb usb5-port1: attempt power cycle [ 469.557984][ T5919] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 469.574732][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.576500][T11286] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1300'. [ 469.606278][ T5919] usb 4-1: Product: syz [ 469.736610][ T5919] usb 4-1: Manufacturer: syz [ 469.751616][ T5919] usb 4-1: SerialNumber: syz [ 469.772083][ T5919] usb 4-1: config 0 descriptor?? [ 469.782298][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 469.877137][ T10] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 469.915359][ T10] usb 5-1: device descriptor read/8, error -71 [ 470.200333][ T5919] airspy 4-1:0.0: Board ID: 00 [ 470.205909][ T5919] airspy 4-1:0.0: Firmware version: [ 470.222035][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 470.254245][ T10] usb 5-1: device descriptor read/8, error -71 [ 470.342113][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 470.342138][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 470.382521][ T10] usb usb5-port1: unable to enumerate USB device [ 470.421973][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 470.427378][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 471.372002][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 471.561831][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 471.586002][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 471.602940][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.624137][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.634878][ T5919] airspy 4-1:0.0: usb_control_msg() failed -110 request 12 [ 471.654465][ T5919] airspy 4-1:0.0: Registered as swradio24 [ 471.670503][ T5919] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 471.682233][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.712559][ T5919] usb 4-1: USB disconnect, device number 103 [ 471.718718][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.750147][T11313] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 471.751619][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 471.756701][T11313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 471.776083][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.784423][T11313] vhci_hcd vhci_hcd.0: Device attached [ 471.806855][T11314] vhci_hcd: connection closed [ 471.822188][ T12] vhci_hcd: stop threads [ 471.839438][ T12] vhci_hcd: release socket [ 471.856354][ T12] vhci_hcd: disconnect device [ 471.953335][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.977985][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.034149][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 472.039870][ T10] usbtmc 3-1:16.0: can't read capabilities [ 472.340730][ T5969] usb 3-1: USB disconnect, device number 71 [ 472.341654][T11301] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 472.410635][T11329] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1311'. [ 472.421694][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 472.557402][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.576696][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.441826][ T5969] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 473.609672][ T5969] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 473.619066][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.633142][ T5969] usb 4-1: config 0 descriptor?? [ 473.650393][ T5969] gspca_main: spca508-2.14.0 probing 8086:0110 [ 474.077911][T11354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.185904][T11354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.325702][ T5969] gspca_spca508: reg_read err -71 [ 474.333467][ T5969] gspca_spca508: reg_read err -71 [ 474.338937][ T5969] gspca_spca508: reg_read err -71 [ 474.345495][ T5969] gspca_spca508: reg write: error -71 [ 474.350945][ T5969] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 474.407509][ T5969] usb 4-1: USB disconnect, device number 104 [ 474.641739][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 474.801629][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 474.817367][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 474.845443][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.896129][ T10] usb 3-1: config 0 descriptor?? [ 474.942871][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 475.136439][ T10] usb 3-1: Detected FT232B [ 476.271731][ T9] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 476.405884][T11389] veth1_macvtap: left promiscuous mode [ 476.443542][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 476.452015][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 476.465630][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.506292][ T5919] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 476.528107][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 476.544238][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 476.559654][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 476.568342][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 476.579378][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.591807][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 476.631837][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 476.670901][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 476.681924][ T5919] usb 5-1: device descriptor read/64, error -71 [ 476.691351][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 476.729323][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.748174][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 476.760246][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 476.783792][ T9] usb 4-1: string descriptor 0 read error: -22 [ 476.790168][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 476.801753][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.830386][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 476.923178][ T5919] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 477.025479][ T9] usb 4-1: USB disconnect, device number 105 [ 477.072094][ T5919] usb 5-1: device descriptor read/64, error -71 [ 477.191987][ T5919] usb usb5-port1: attempt power cycle [ 477.244879][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 477.276812][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 477.329033][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 477.365725][ T10] usb 3-1: USB disconnect, device number 72 [ 477.383440][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 477.394827][ T7402] udevd[7402]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 477.394917][T11395] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 477.412711][ T10] ftdi_sio 3-1:0.0: device disconnected [ 477.432492][ T7402] udevd[7402]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 477.504946][T11395] bond8: entered promiscuous mode [ 477.523824][T11395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 477.582981][ T5919] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 477.624783][ T5919] usb 5-1: device descriptor read/8, error -71 [ 477.646418][T11397] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.666111][T11397] bond8: (slave bond9): making interface the new active one [ 477.674041][T11397] bond9: entered promiscuous mode [ 477.702319][T11397] bond8: (slave bond9): Enslaving as an active interface with an up link [ 477.841806][ T5969] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 477.911804][ T5919] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 477.962599][ T5919] usb 5-1: device descriptor read/8, error -71 [ 477.993390][ T5969] usb 4-1: device descriptor read/64, error -71 [ 478.082201][ T5919] usb usb5-port1: unable to enumerate USB device [ 478.241694][ T5969] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 478.359543][T11411] binder: 11406:11411 ioctl 5404 200000000000 returned -22 [ 478.381680][ T5969] usb 4-1: device descriptor read/64, error -71 [ 478.492308][ T5969] usb usb4-port1: attempt power cycle [ 478.831617][ T5969] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 478.862281][ T5969] usb 4-1: device descriptor read/8, error -71 [ 479.121980][ T5969] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 479.152816][ T5969] usb 4-1: device descriptor read/8, error -71 [ 479.272474][ T5969] usb usb4-port1: unable to enumerate USB device [ 479.669542][T11430] loop4: detected capacity change from 0 to 7 [ 479.700831][T11426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.714675][ T6102] Dev loop4: unable to read RDB block 7 [ 479.722448][ T6102] loop4: unable to read partition table [ 479.728347][ T6102] loop4: partition table beyond EOD, truncated [ 479.743525][T11426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.756439][T11430] Dev loop4: unable to read RDB block 7 [ 479.765924][T11430] loop4: unable to read partition table [ 479.776309][T11430] loop4: partition table beyond EOD, truncated [ 479.799618][T11430] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 479.989495][T11432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.123531][ T30] audit: type=1326 audit(1751305136.292:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.190902][ T30] audit: type=1326 audit(1751305136.322:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.216497][ T30] audit: type=1326 audit(1751305136.322:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.258289][ T30] audit: type=1326 audit(1751305136.322:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.351601][ T30] audit: type=1326 audit(1751305136.322:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.470936][ T30] audit: type=1326 audit(1751305136.322:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.536229][ T30] audit: type=1326 audit(1751305136.322:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.589199][ T5919] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 480.600978][ T30] audit: type=1326 audit(1751305136.322:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.632710][ T30] audit: type=1326 audit(1751305136.322:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.734150][ T30] audit: type=1326 audit(1751305136.322:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11435 comm="syz.0.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 480.786654][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 480.817198][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.838010][T11457] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[11457] [ 480.842892][ T5919] usb 3-1: no configurations [ 480.950940][ T5919] usb 3-1: can't read configurations, error -22 [ 482.376612][T11471] IPv6: sit2: Disabled Multicast RS [ 482.390768][T11471] sit2: entered allmulticast mode [ 482.711631][ T5919] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 482.981769][ T5919] usb 3-1: device descriptor read/64, error -71 [ 483.024363][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.048426][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.281877][ T5919] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 483.431885][ T5919] usb 3-1: device descriptor read/64, error -71 [ 483.559551][ T5919] usb usb3-port1: attempt power cycle [ 484.007202][ T5919] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 484.067158][ T5919] usb 3-1: device descriptor read/8, error -71 [ 484.341874][ T5919] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 484.456924][ T5919] usb 3-1: device descriptor read/8, error -71 [ 484.551972][ T5969] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 484.572536][ T5919] usb usb3-port1: unable to enumerate USB device [ 484.723658][ T5969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.757456][ T5969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.778173][ T5969] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.828727][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.842040][ T5969] usb 5-1: SerialNumber: syz [ 485.271645][ T5919] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 485.422147][ T5919] usb 4-1: device descriptor read/64, error -71 [ 485.691666][ T5919] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 485.844385][ T5919] usb 4-1: device descriptor read/64, error -71 [ 485.869616][T11517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.879788][T11517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.881639][ T9] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 485.964694][ T5919] usb usb4-port1: attempt power cycle [ 486.043698][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.056986][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 486.069982][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 486.084721][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 486.094574][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.113782][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 486.125202][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 486.134662][ T9] usb 3-1: Product: syz [ 486.138883][ T9] usb 3-1: Manufacturer: syz [ 486.146313][ T9] usb 3-1: SerialNumber: syz [ 486.163298][ T9] usb 3-1: config 0 descriptor?? [ 486.301667][ T5919] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 486.323532][ T5919] usb 4-1: device descriptor read/8, error -71 [ 486.376849][ T9] radio-si470x 3-1:0.0: DeviceID=0xf8b8 ChipID=0xc707 [ 486.561765][ T5919] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 486.577759][ T9] radio-si470x 3-1:0.0: software version 248, hardware version 184 [ 486.591021][ T5919] usb 4-1: device descriptor read/8, error -71 [ 486.702099][ T5919] usb usb4-port1: unable to enumerate USB device [ 486.778224][ T9] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 486.819244][ T9] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 486.839853][ T9] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 486.863344][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 486.912906][ T9] usb 3-1: USB disconnect, device number 79 [ 487.195647][ T5969] usb 5-1: 0:2 : does not exist [ 487.250921][ T5969] usb 5-1: USB disconnect, device number 95 [ 487.381187][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.761680][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 487.761698][ T30] audit: type=1400 audit(1751305143.922:1390): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11533 comm="syz.4.1369" [ 487.805098][ T44] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 487.971668][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 487.984801][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.015405][ T44] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=ce.6f [ 488.031615][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.050080][ T44] usb 3-1: Product: syz [ 488.054976][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 488.063904][ T44] usb 3-1: Manufacturer: syz [ 488.074368][ T44] usb 3-1: SerialNumber: syz [ 488.102590][ T44] usb 3-1: config 0 descriptor?? [ 488.125613][ T44] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 488.139825][T11539] loop4: detected capacity change from 0 to 7 [ 488.149557][ T7402] Dev loop4: unable to read RDB block 7 [ 488.156035][ T7402] loop4: unable to read partition table [ 488.162740][ T7402] loop4: partition table beyond EOD, truncated [ 488.173712][T11539] Dev loop4: unable to read RDB block 7 [ 488.179364][T11539] loop4: unable to read partition table [ 488.192691][T11539] loop4: partition table beyond EOD, truncated [ 488.216283][T11539] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 488.236145][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 488.257364][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 488.287063][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.313250][ T44] usb 3-1: qt2_attach - failed to power on unit: -71 [ 488.325569][ T9] usb 5-1: config 0 descriptor?? [ 488.334222][ T44] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 488.389147][ T44] usb 3-1: USB disconnect, device number 80 [ 488.465813][T11545] fuse: Bad value for 'fd' [ 488.476143][T11543] fuse: Bad value for 'fd' [ 488.499953][T11541] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1642504120 (13140032960 ns) > initial count (744665392 ns). Using initial count to start timer. [ 488.530732][T11541] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 488.535287][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 488.697478][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.751589][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 488.801668][ T9] usb 5-1: media controller created [ 488.859322][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.924312][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.933217][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.261951][ T44] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 489.421633][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 489.440984][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.447852][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.458377][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.467195][ T44] usb 3-1: Product: syz [ 489.471412][ T44] usb 3-1: Manufacturer: syz [ 489.476826][ T44] usb 3-1: SerialNumber: syz [ 489.482805][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.515943][ T44] usb 3-1: config 0 descriptor?? [ 489.728254][ T44] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 490.470421][T11571] ip6gretap1: entered promiscuous mode [ 490.476783][T11571] ip6gretap1: entered allmulticast mode [ 490.810909][ T9] az6027: usb out operation failed. (-71) [ 490.860830][ T9] az6027: usb out operation failed. (-71) [ 490.888374][ T9] stb0899_attach: Driver disabled by Kconfig [ 490.894912][ T9] az6027: no front-end attached [ 490.894912][ T9] [ 490.905200][ T9] az6027: usb out operation failed. (-71) [ 490.910983][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 490.940295][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 490.976111][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 490.983115][ T44] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 491.016135][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 491.154404][ T9] usb 5-1: USB disconnect, device number 96 [ 491.349637][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 492.281357][ T9] usb 3-1: USB disconnect, device number 81 [ 492.542300][ T30] audit: type=1804 audit(1751305148.702:1391): pid=11585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1382" name="/newroot/230/file0" dev="tmpfs" ino=1208 res=1 errno=0 [ 493.351743][ T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 493.595007][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 493.611665][ T9] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 493.641766][ T9] usb 4-1: config 220 has no interface number 2 [ 493.651884][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 493.681601][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 493.691803][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 493.708946][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 493.724163][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 493.733837][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.747862][ T9] usb 4-1: Product: syz [ 493.753804][ T9] usb 4-1: Manufacturer: syz [ 493.758571][ T9] usb 4-1: SerialNumber: syz [ 494.013069][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.033464][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.120352][ T9] usb 4-1: selecting invalid altsetting 0 [ 494.127561][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 494.134379][ T9] usb 4-1: No valid video chain found. [ 494.154938][ T9] usb 4-1: selecting invalid altsetting 0 [ 494.160718][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 494.181407][ T9] usb 4-1: USB disconnect, device number 114 [ 494.187742][ T10] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 494.383460][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 494.400866][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.411048][ T10] usb 5-1: Product: syz [ 494.421230][ T10] usb 5-1: Manufacturer: syz [ 494.429550][ T10] usb 5-1: SerialNumber: syz [ 494.442931][ T10] usb 5-1: config 0 descriptor?? [ 494.913303][ T5921] usb 5-1: USB disconnect, device number 97 [ 495.061948][ T44] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 495.084170][ T5969] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 495.258894][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.308319][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.342258][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.354302][ T44] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.363978][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.377077][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.389715][ T5969] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 495.491116][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.504492][ T44] usb 4-1: config 0 descriptor?? [ 495.530842][ T5969] usb 3-1: config 0 descriptor?? [ 495.723586][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 495.742498][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 495.760346][ T44] usb 4-1: USB disconnect, device number 115 [ 495.976183][ T5969] hid-udraw 0003:20D6:CB17.0016: item fetching failed at offset 3/7 [ 495.998797][ T5969] hid-udraw 0003:20D6:CB17.0016: parse failed [ 496.018732][ T5969] hid-udraw 0003:20D6:CB17.0016: probe with driver hid-udraw failed with error -22 [ 496.174880][ T10] usb 3-1: USB disconnect, device number 82 [ 496.242821][ T44] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 496.412262][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 496.446401][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.497933][ T44] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 496.537716][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.568140][ T44] usb 4-1: config 0 descriptor?? [ 496.664210][ T5969] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 496.873851][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.893122][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.919159][ T5969] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 496.947235][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.969155][ T5969] usb 5-1: config 0 descriptor?? [ 496.989246][ T44] kye 0003:0458:5016.0017: control desc unexpectedly large [ 497.007761][ T44] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0017/input/input41 [ 497.124326][ T44] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0017/input/input42 [ 497.208292][ T44] kye 0003:0458:5016.0017: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 497.403774][ T5969] acrux 0003:1A34:F705.0018: item fetching failed at offset 5/7 [ 497.404562][ T5969] acrux 0003:1A34:F705.0018: parse failed [ 497.404644][ T5969] acrux 0003:1A34:F705.0018: probe with driver acrux failed with error -22 [ 497.604883][ T5969] usb 5-1: USB disconnect, device number 98 [ 497.737712][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.754999][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.794352][ T10] usb 4-1: USB disconnect, device number 116 [ 497.952857][T11661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.007078][T11661] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1407'. [ 498.374975][ T5969] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 498.531934][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 498.543568][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.557762][ T5969] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 498.569021][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.594571][ T5969] usb 3-1: config 0 descriptor?? [ 498.823879][T11667] fuse: Bad value for 'fd' [ 498.830679][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.840170][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.044188][ T10] usb 3-1: USB disconnect, device number 83 [ 499.176242][T11683] fuse: Unknown parameter 'pcr' [ 499.463737][ T5969] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 499.676946][ T5969] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 499.698841][ T5969] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.778159][ T5969] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.807424][ T5969] usb 4-1: config 0 interface 0 has no altsetting 0 [ 499.857105][ T5969] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 499.902343][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.932969][ T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 499.962300][ T5969] usb 4-1: config 0 descriptor?? [ 500.148841][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 500.163209][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.190410][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.232005][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.267674][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 500.321710][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.338813][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.363931][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.393976][ T10] usb 3-1: Manufacturer: syz [ 500.396613][ T5969] pyra 0003:1E7D:2C24.0019: item fetching failed at offset 10/11 [ 500.419553][ T10] usb 3-1: config 0 descriptor?? [ 500.438269][ T5969] pyra 0003:1E7D:2C24.0019: parse failed [ 500.492050][ T5969] pyra 0003:1E7D:2C24.0019: probe with driver pyra failed with error -22 [ 500.628846][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1415'. [ 500.729045][ T5969] usb 4-1: USB disconnect, device number 117 [ 500.822926][ T10] rc_core: IR keymap rc-hauppauge not found [ 500.828898][ T10] Registered IR keymap rc-empty [ 500.848066][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 500.916970][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 500.982522][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 501.008347][T11727] binder: BINDER_SET_CONTEXT_MGR already set [ 501.014799][T11727] binder: 11721:11727 ioctl 4018620d 200000000040 returned -16 [ 501.046361][T11727] binder: 11721:11727 ioctl c0306201 200000000240 returned -11 [ 501.132267][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 501.162659][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.183054][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.204926][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.245500][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.314853][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.368082][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.401760][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.485009][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.595481][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.599463][T11734] binder: BINDER_SET_CONTEXT_MGR already set [ 501.609698][T11734] binder: 11733:11734 ioctl 4018620d 200000000040 returned -16 [ 501.633545][T11734] binder: 11733:11734 ioctl c0306201 200000000540 returned -11 [ 501.644793][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 501.696540][ T10] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 501.717797][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.408861][T11747] batman_adv: batadv0: Interface deactivated: dummy0 [ 502.421185][T11747] batman_adv: batadv0: Removing interface: dummy0 [ 502.474707][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.504928][T11747] bond0: (slave bond_slave_0): Releasing backup interface [ 502.522032][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.597997][T11747] team0: Port device team_slave_0 removed [ 502.613694][T11747] team0: Port device team_slave_1 removed [ 502.620833][T11747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.673233][T11747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.688778][T11747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.813713][ T5969] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 502.851663][ T10] usb 3-1: USB disconnect, device number 84 [ 503.061732][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 503.088361][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.174743][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.230262][ T5969] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 503.282751][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.353916][ T5969] usb 5-1: config 0 descriptor?? [ 503.861609][ T5958] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 504.060601][ T5958] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 504.071162][ T5958] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 504.092019][ T5958] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 504.101289][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.110266][ T5969] usbhid 5-1:0.0: can't add hid device: -71 [ 504.129193][ T5969] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 504.140649][ T5958] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.180339][ T5958] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 504.208583][ T5969] usb 5-1: USB disconnect, device number 99 [ 504.244659][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.518219][T11769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.535183][T11769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.720870][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.748966][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.767336][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.795115][T11776] binder_alloc: binder_alloc_mmap_handler: 11775 200000ffd000-200001000000 already mapped failed -16 [ 504.827405][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.837872][T11777] binder: BINDER_SET_CONTEXT_MGR already set [ 504.847790][T11777] binder: 11775:11777 ioctl 4018620d 200000000040 returned -16 [ 504.862621][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.879715][T11776] binder_alloc: binder_alloc_mmap_handler: 11775 200000ffd000-200001000000 already mapped failed -16 [ 504.894844][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.897570][T11777] binder: BINDER_SET_CONTEXT_MGR already set [ 504.931222][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.022165][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.039302][T11777] binder: 11775:11777 ioctl 4018620d 200000000040 returned -16 [ 505.050612][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.070522][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.099430][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.156536][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.311051][T11790] netlink: 'syz.3.1441': attribute type 20 has an invalid length. [ 505.489852][ T30] audit: type=1326 audit(1751305161.652:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 505.590210][ T30] audit: type=1326 audit(1751305161.682:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 505.682333][ T30] audit: type=1326 audit(1751305161.682:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 505.865925][ T30] audit: type=1326 audit(1751305161.682:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 506.001273][T11810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 506.002550][ T30] audit: type=1326 audit(1751305161.682:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 506.283283][ T30] audit: type=1326 audit(1751305161.682:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 506.646247][ T30] audit: type=1326 audit(1751305161.692:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 506.852333][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.858780][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.041381][ T30] audit: type=1326 audit(1751305161.702:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 507.138726][ T30] audit: type=1326 audit(1751305161.702:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 507.284615][ T30] audit: type=1326 audit(1751305161.702:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.0.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa02118e929 code=0x7ffc0000 [ 507.539233][ T10] usb 3-1: USB disconnect, device number 85 [ 507.549055][T11761] delete_channel: no stack [ 508.002098][ T5969] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 508.142176][ T5969] usb 3-1: device descriptor read/64, error -71 [ 508.394000][ T5921] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 508.402062][ T5969] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 508.420439][T11844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.531985][ T5969] usb 3-1: device descriptor read/64, error -71 [ 508.543528][ T5921] usb 4-1: device descriptor read/64, error -71 [ 508.554544][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.563390][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.644705][ T5969] usb usb3-port1: attempt power cycle [ 508.781658][ T5921] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 508.911843][ T5921] usb 4-1: device descriptor read/64, error -71 [ 508.982589][ T5969] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 509.013742][ T5969] usb 3-1: device descriptor read/8, error -71 [ 509.022188][ T5921] usb usb4-port1: attempt power cycle [ 509.261755][ T5969] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 509.306165][ T5969] usb 3-1: device descriptor read/8, error -71 [ 509.375276][ T5921] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 509.432619][ T5969] usb usb3-port1: unable to enumerate USB device [ 509.439149][ T5921] usb 4-1: device descriptor read/8, error -71 [ 509.483742][T11856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1465'. [ 509.494530][T11854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.518552][T11854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.551060][T11854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.598545][T11854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.696540][ T5921] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 509.722450][ T5921] usb 4-1: device descriptor read/8, error -71 [ 509.834949][ T5921] usb usb4-port1: unable to enumerate USB device [ 510.210705][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.230001][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.124180][ T5921] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 511.294025][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 511.313901][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.337748][ T5921] usb 5-1: config 0 descriptor?? [ 511.424513][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 511.596166][ T5921] usb 5-1: USB disconnect, device number 100 [ 511.788983][T11887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1475'. [ 511.882643][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'. [ 511.947741][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 512.172044][T11897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1477'. [ 512.248671][T11899] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 512.463447][T11899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.519919][T11901] bond2: (slave veth3): Enslaving as an active interface with a down link [ 512.595189][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 512.606637][T11899] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 512.682149][T11905] vlan3: entered allmulticast mode [ 513.003898][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1482'. [ 513.014292][T11916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1482'. [ 513.027106][T11916] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1482'. [ 513.512153][ T5921] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 513.661953][ T5921] usb 4-1: device descriptor read/64, error -71 [ 513.912032][ T5921] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 514.101923][ T5921] usb 4-1: device descriptor read/64, error -71 [ 514.648065][ T5921] usb usb4-port1: attempt power cycle [ 515.015987][ T5958] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 515.052025][ T5921] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 515.112262][ T5921] usb 4-1: device descriptor read/8, error -71 [ 515.223866][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 515.252624][ T5958] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.273928][ T5958] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.356081][ T5958] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 515.381756][ T5921] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 515.401034][ T5958] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 515.412862][ T5921] usb 4-1: device descriptor read/8, error -71 [ 515.474144][ T5958] usb 3-1: Product: syz [ 515.478379][ T5958] usb 3-1: Manufacturer: syz [ 515.535559][ T5921] usb usb4-port1: unable to enumerate USB device [ 515.540180][ T5958] hub 3-1:4.0: USB hub found [ 515.741688][ T5958] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 515.956720][T11947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.970621][T11947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.303035][ T5921] usb 3-1: USB disconnect, device number 90 [ 516.311045][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1495'. [ 516.692292][ T5921] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 516.803394][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b4f400: rx timeout, send abort [ 516.871623][ T5921] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 516.879969][ T5921] usb 4-1: config 0 has no interface number 0 [ 516.887095][ T5921] usb 4-1: config 0 interface 29 has no altsetting 0 [ 516.912964][ T5921] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 516.922710][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.930794][ T5921] usb 4-1: Product: syz [ 516.935398][ T5921] usb 4-1: Manufacturer: syz [ 516.940070][ T5921] usb 4-1: SerialNumber: syz [ 516.950328][ T5921] usb 4-1: config 0 descriptor?? [ 517.039949][T11963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 517.073632][ T44] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 517.187373][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 517.203062][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 517.252066][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 517.267285][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 517.281580][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.300058][ T44] usb 3-1: Product: syz [ 517.303497][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b4c400: rx timeout, send abort [ 517.312560][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b4f400: abort rx timeout. Force session deactivation [ 517.330148][T11972] netlink: 'syz.1.1499': attribute type 10 has an invalid length. [ 517.341257][ T44] usb 3-1: Manufacturer: syz [ 517.354230][ T5921] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 517.363201][ T44] usb 3-1: SerialNumber: syz [ 517.390119][ T44] usb 3-1: config 0 descriptor?? [ 517.396203][T11972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1499'. [ 517.415821][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 517.425167][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 517.464887][T11972] dummy0: entered promiscuous mode [ 517.473684][ T44] usb 3-1: Found UVC 0.00 device syz (046d:0721) [ 517.480811][ T44] usb 3-1: No valid video chain found. [ 517.502338][T11972] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 517.576621][T11978] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 517.701430][ T10] usb 3-1: USB disconnect, device number 91 [ 517.718793][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 517.729945][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 517.812587][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033b4c400: abort rx timeout. Force session deactivation [ 518.837159][T11999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 519.852058][ T5958] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 519.987867][ T5921] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 520.030283][ T5921] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 520.072085][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 520.075072][ T5958] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 520.077382][ T44] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 520.134951][ T5958] usb 5-1: can't read configurations, error -61 [ 520.190498][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1508'. [ 520.212175][ T5921] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 520.274539][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 520.318297][ T5921] usb 4-1: USB disconnect, device number 126 [ 520.321626][ T5958] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 520.354937][ T44] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 520.374884][T12015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1508'. [ 520.394085][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.456716][ T44] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 520.492294][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 520.506476][ T5958] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 520.530056][ T5958] usb 5-1: can't read configurations, error -61 [ 520.574596][T12013] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 520.580839][ T5958] usb usb5-port1: attempt power cycle [ 520.621698][T12015] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.770419][T12015] syz.3.1508 (12015) used greatest stack depth: 19320 bytes left [ 520.962200][ T5958] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 521.005771][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 521.024879][ T5958] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 521.040688][ T5958] usb 5-1: can't read configurations, error -61 [ 521.201703][ T5958] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 521.273886][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 521.316426][ T5958] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 521.327762][ T5958] usb 5-1: can't read configurations, error -61 [ 521.335548][ T5958] usb usb5-port1: unable to enumerate USB device [ 523.141792][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.285592][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.348100][ T44] usb 3-1: can't set config #1, error -71 [ 523.432860][ T44] usb 3-1: USB disconnect, device number 92 [ 523.901773][ T44] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 524.076874][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.135859][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.171244][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.220462][ T44] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 524.251710][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.301898][ T44] usb 3-1: config 0 descriptor?? [ 524.783346][T12074] netlink: 'syz.2.1522': attribute type 8 has an invalid length. [ 524.829838][ T44] hid-udraw 0003:20D6:CB17.001A: item fetching failed at offset 3/7 [ 524.858934][ T44] hid-udraw 0003:20D6:CB17.001A: parse failed [ 524.898937][ T44] hid-udraw 0003:20D6:CB17.001A: probe with driver hid-udraw failed with error -22 [ 525.043678][ T5958] usb 3-1: USB disconnect, device number 93 [ 525.151616][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 525.373542][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.410457][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 525.420420][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.479722][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 525.479739][ T30] audit: type=1326 audit(1751305181.642:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.530255][ T10] usb 5-1: config 0 descriptor?? [ 525.563565][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 525.611426][ T30] audit: type=1326 audit(1751305181.682:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.641410][ T30] audit: type=1326 audit(1751305181.702:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.670601][ T30] audit: type=1326 audit(1751305181.702:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.756834][ T30] audit: type=1326 audit(1751305181.702:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.851666][ T30] audit: type=1326 audit(1751305181.712:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.881864][ T30] audit: type=1326 audit(1751305181.712:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.904885][ T30] audit: type=1326 audit(1751305181.712:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.937330][ T30] audit: type=1326 audit(1751305181.762:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 525.980540][ T30] audit: type=1326 audit(1751305181.762:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.1.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944598e929 code=0x7ffc0000 [ 526.051608][ T5921] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 526.077668][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 526.102638][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 526.129462][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 526.138941][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 526.190437][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 526.244516][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 526.270779][ T5921] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 526.280264][ T5921] usb 3-1: config 0 has no interface number 0 [ 526.516830][ T5921] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 526.521903][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 526.526833][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.716004][ T5921] usb 3-1: Product: syz [ 526.720314][ T5921] usb 3-1: Manufacturer: syz [ 526.725034][ T5921] usb 3-1: SerialNumber: syz [ 526.740034][ T5921] usb 3-1: config 0 descriptor?? [ 526.746951][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 526.767083][ T5921] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 526.977067][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 527.049616][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 527.065729][ T5921] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 527.135277][ T5921] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 527.292321][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 527.322246][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 527.365456][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 527.410761][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 527.431963][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 527.453677][ T10] pwc: Registered as video103. [ 527.946338][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input46 [ 527.967137][ T10] usb 5-1: USB disconnect, device number 105 [ 529.020337][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 529.041816][ T44] usb 3-1: USB disconnect, device number 94 [ 529.097838][ T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 529.422343][ T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 529.434818][ T44] quatech2 3-1:0.51: device disconnected [ 530.344345][ T10] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 530.408683][T12175] dummy0: entered promiscuous mode [ 530.425098][T12175] vlan2: entered promiscuous mode [ 530.523578][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 530.563857][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.617322][ T10] usb 3-1: config 0 descriptor?? [ 530.660123][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 530.852639][T12171] x_tables: unsorted entry at hook 1 [ 531.162045][T12182] kernel profiling enabled (shift: 6) [ 531.654210][ T10] gp8psk: usb in 128 operation failed. [ 531.665354][ T10] gp8psk: usb in 137 operation failed. [ 531.688001][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 531.756623][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 531.819881][ T10] usb 3-1: USB disconnect, device number 95 [ 532.109971][T12208] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 533.876077][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.906842][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.533798][T12246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.406008][T12258] netlink: 'syz.1.1566': attribute type 30 has an invalid length. [ 536.008121][T12266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.041039][T12266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.332675][T12281] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 537.372722][T12281] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.471912][ T44] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 538.696005][ T44] usb 5-1: config 0 has an invalid interface number: 206 but max is 1 [ 538.707114][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.718608][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 538.752781][ T44] usb 5-1: config 0 has no interface number 0 [ 538.850585][T12310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.881133][T12310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.890830][ T44] usb 5-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 539.135235][ T44] usb 5-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 539.157518][T12310] syzkaller1: entered promiscuous mode [ 539.221818][T12310] syzkaller1: entered allmulticast mode [ 539.313144][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 539.468660][ T44] usb 5-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 12336, setting to 64 [ 539.480258][ T44] usb 5-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 539.494058][ T44] usb 5-1: config 0 interface 206 has no altsetting 0 [ 539.504391][ T44] usb 5-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 539.514088][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.515741][T12317] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 539.523036][ T44] usb 5-1: Product: syz [ 539.538237][ T44] usb 5-1: Manufacturer: syz [ 539.543347][ T44] usb 5-1: SerialNumber: syz [ 539.555026][ T44] usb 5-1: config 0 descriptor?? [ 539.582526][T12298] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 539.674633][T12317] sctp: [Deprecated]: syz.2.1584 (pid 12317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.674633][T12317] Use struct sctp_sack_info instead [ 539.726673][T12320] syzkaller1: entered promiscuous mode [ 539.733965][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 539.755402][T12320] syzkaller1: entered allmulticast mode [ 540.466958][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 540.466976][ T30] audit: type=1400 audit(1751305196.632:1465): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147C8A3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 540.530789][T12327] random: crng reseeded on system resumption [ 540.882141][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 541.062132][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 541.095971][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 541.119220][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.40 [ 541.123190][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 541.172906][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.224477][ T10] usb 3-1: Product: ﳅ㒋厪鈦⏼쟔ꊚ帆ೕ昅掭茗띱頥㪏쇂澴굄쓵쳟ᯖﲋ鼑勠䆷쵻샺⡐絰剖元⛔๠䦈禨垽჆믲䵻댥ຨс倪⺬冹夀䅒纎䑰㽛 [ 541.236286][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 541.273024][ T10] usb 3-1: Manufacturer: ч [ 541.285651][ T10] usb 3-1: SerialNumber: љ [ 541.351706][ T44] usb 5-1: USB disconnect, device number 106 [ 541.602140][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.904481][T12368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.927977][T12368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.437302][T12376] loop2: detected capacity change from 0 to 7 [ 543.452780][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 543.469137][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 543.508549][ T10] usb 3-1: USB disconnect, device number 96 [ 543.511792][T12376] Dev loop2: unable to read RDB block 7 [ 543.520110][T12376] loop2: AHDI p1 p2 p3 [ 543.582226][T12376] loop2: partition table partially beyond EOD, truncated [ 543.632637][T12376] loop2: p1 start 1601398130 is beyond EOD, truncated [ 543.691656][T12376] loop2: p2 start 1702059890 is beyond EOD, truncated [ 543.702688][T12386] binder: BINDER_SET_CONTEXT_MGR already set [ 543.709815][T12386] binder: 12385:12386 ioctl 4018620d 200000000040 returned -16 [ 543.719853][T12386] binder: 12385:12386 ioctl c0306201 200000000240 returned -11 [ 544.062212][T12394] loop6: detected capacity change from 0 to 2560 [ 544.130851][T12395] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 544.162263][T12394] buffer_io_error: 23 callbacks suppressed [ 544.162277][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 544.176968][T12395] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 544.280850][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 544.455619][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 544.479714][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 544.632734][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 544.694425][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 544.775184][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 545.118917][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 545.130501][ T5843] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 545.149947][T12407] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:00, vlan:0) [ 545.208160][T12394] ldm_validate_partition_table(): Disk read failed. [ 545.286968][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 545.306672][ T51] Bluetooth: hci3: unexpected event 0x01 length: 4 > 1 [ 545.367539][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1606'. [ 545.461025][T12394] Buffer I/O error on dev loop6, logical block 0, async page read [ 545.491913][T12394] Dev loop6: unable to read RDB block 0 [ 545.498143][T12394] loop6: unable to read partition table [ 545.651833][T12394] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 546.024173][T12418] netlink: 'syz.2.1609': attribute type 10 has an invalid length. [ 546.051934][T12419] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 546.141663][T12418] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 546.232685][T12420] fanotify_encode_fh: 864 callbacks suppressed [ 546.232701][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.247511][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.267531][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.288257][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.310053][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.329824][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.338919][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.370391][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.389959][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.415122][T12420] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 546.544134][ T9258] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 547.124578][T12434] fuse: Bad value for 'fd' [ 547.142805][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 547.231625][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.273142][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.561753][ T5919] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 547.691939][ T5919] usb 4-1: device descriptor read/64, error -71 [ 547.750878][ T51] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 547.971939][ T5919] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 548.113301][ T5919] usb 4-1: device descriptor read/64, error -71 [ 548.265081][ T5919] usb usb4-port1: attempt power cycle [ 548.476674][ T44] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 548.621622][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 548.691644][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 548.700810][ T5919] usb 4-1: device descriptor read/8, error -71 [ 548.801806][ T44] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 548.810368][ T44] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 548.820056][ T44] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 548.829505][ T44] usb 3-1: config 250 has no interface number 0 [ 548.840446][ T44] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 548.852360][ T5921] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 548.881009][ T44] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 548.928864][ T44] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 548.960812][ T44] usb 3-1: config 250 interface 228 has no altsetting 0 [ 548.989771][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 548.999371][ T44] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 549.001829][ T5919] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 549.015469][ T44] usb 3-1: Product: syz [ 549.019833][ T44] usb 3-1: SerialNumber: syz [ 549.038333][ T5919] usb 4-1: device descriptor read/8, error -71 [ 549.045130][ T5921] usb 5-1: config 0 has no interfaces? [ 549.060369][ T44] hub 3-1:250.228: bad descriptor, ignoring hub [ 549.068853][ T5921] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 549.078813][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.087372][ T5921] usb 5-1: Product: syz [ 549.097029][ T5921] usb 5-1: Manufacturer: syz [ 549.106693][ T44] hub 3-1:250.228: probe with driver hub failed with error -5 [ 549.119680][ T5921] usb 5-1: SerialNumber: syz [ 549.147974][ T5921] usb 5-1: config 0 descriptor?? [ 549.186811][ T5919] usb usb4-port1: unable to enumerate USB device [ 549.247792][ T44] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 97 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 549.673797][ C1] usblp0: nonzero read bulk status received: -71 [ 549.852819][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 550.761587][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 551.442105][ T5921] usb 5-1: USB disconnect, device number 107 [ 552.203850][ T5958] usb 3-1: USB disconnect, device number 97 [ 552.219473][ T5958] usblp0: removed [ 552.481998][ T44] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 552.678444][T12518] IPv6: sit1: Disabled Multicast RS [ 552.889473][ T44] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 552.914144][ T44] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 552.931215][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.940220][ T44] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 552.955395][T12461] delete_channel: no stack [ 552.971724][ T44] usb 5-1: config 220 has no interface number 2 [ 552.978212][ T44] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 553.001623][ T44] usb 5-1: config 220 interface 0 has no altsetting 0 [ 553.008456][ T44] usb 5-1: config 220 interface 76 has no altsetting 0 [ 553.017437][ T44] usb 5-1: config 220 interface 1 has no altsetting 0 [ 553.055398][ T44] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 553.062891][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.072414][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.082375][ T44] usb 5-1: Product: syz [ 553.086623][ T44] usb 5-1: Manufacturer: syz [ 553.091292][ T44] usb 5-1: SerialNumber: syz [ 553.335246][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.344326][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.560698][ T44] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 553.570067][ T44] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 553.578941][ T44] usb 5-1: No valid video chain found. [ 553.597864][ T44] usb 5-1: selecting invalid altsetting 0 [ 553.636125][ T44] usb 5-1: selecting invalid altsetting 0 [ 553.642398][ T44] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 553.704677][ T44] usb 5-1: USB disconnect, device number 108 [ 554.441795][ T5958] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 554.622865][ T5958] usb 4-1: device descriptor read/64, error -71 [ 554.687628][T12548] ip6t_srh: unknown srh invflags 7863 [ 554.862263][ T5958] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 555.021536][ T5958] usb 4-1: device descriptor read/64, error -71 [ 555.131908][ T5958] usb usb4-port1: attempt power cycle [ 555.482102][ T5958] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 555.544628][ T5958] usb 4-1: device descriptor read/8, error -71 [ 555.761977][ T44] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 555.811776][ T5958] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 555.852669][ T5958] usb 4-1: device descriptor read/8, error -71 [ 555.925259][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 555.933273][ T44] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 555.962166][ T5958] usb usb4-port1: unable to enumerate USB device [ 555.968938][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.985169][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.989467][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.996212][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.008446][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.024428][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.038121][ T44] usb 3-1: Product: syz [ 556.044675][ T44] usb 3-1: Manufacturer: syz [ 556.049397][ T44] usb 3-1: SerialNumber: syz [ 556.496332][ T44] usb 3-1: 0:2 : does not exist [ 557.148106][ T44] usb 3-1: USB disconnect, device number 98 [ 557.299685][T12597] loop2: detected capacity change from 0 to 7 [ 557.415390][ T5843] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 557.783692][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.807576][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.834826][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.855399][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.451708][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 558.601875][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 558.616487][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 558.645001][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 558.672254][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 558.677263][ T5919] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 558.704638][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 558.741917][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.792761][ T44] usb 4-1: config 0 descriptor?? [ 558.813982][T12622] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 558.845926][ T44] hub 4-1:0.0: USB hub found [ 558.851527][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 558.872105][ T5919] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 558.901969][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 558.911579][ T5919] usb 3-1: can't read configurations, error -61 [ 558.936837][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1672'. [ 558.955784][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'. [ 559.041151][ T44] hub 4-1:0.0: 2 ports detected [ 559.054924][ T5919] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 559.230410][T12643] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1672'. [ 559.245501][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 559.252276][ T5919] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 559.265813][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 559.280928][ T5919] usb 3-1: can't read configurations, error -61 [ 559.305160][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 559.323902][ T44] usb 4-1: USB disconnect, device number 10 [ 559.331254][ T5919] usb usb3-port1: attempt power cycle [ 559.474332][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.533951][ T5921] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 559.589757][ T5921] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 559.741625][ T5919] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 559.801918][ T44] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 559.814378][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 559.820722][ T5919] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 559.837702][T12657] fido_id[12657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 559.854360][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 559.864116][ T5919] usb 3-1: can't read configurations, error -61 [ 559.959684][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.985604][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.001805][ T5919] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 560.033942][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.043919][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.053788][ T44] usb 4-1: Product: syz [ 560.056884][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 560.075668][ T44] usb 4-1: Manufacturer: syz [ 560.084815][ T5919] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 560.103695][ T5919] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 560.109186][ T44] usb 4-1: SerialNumber: syz [ 560.121734][ T5919] usb 3-1: can't read configurations, error -61 [ 560.134879][ T5919] usb usb3-port1: unable to enumerate USB device [ 560.368129][ T44] usb 4-1: 0:2 : does not exist [ 560.379484][ T44] usb 4-1: unit 9 not found! [ 560.405592][ T44] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 560.463340][ T44] usb 4-1: USB disconnect, device number 11 [ 560.561224][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.752922][T12674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.787792][T12674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.982117][ T5921] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 562.052697][T12683] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 562.059290][T12683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 562.092879][T12683] vhci_hcd vhci_hcd.0: Device attached [ 562.131249][T12684] vhci_hcd: connection closed [ 562.131821][ T9251] vhci_hcd: stop threads [ 562.151857][ T5921] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 562.155190][ T9251] vhci_hcd: release socket [ 562.160060][ T5921] usb 5-1: config 0 has no interface number 0 [ 562.182034][ T5921] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 562.191213][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.196906][ T9251] vhci_hcd: disconnect device [ 562.209480][ T5921] usb 5-1: Product: syz [ 562.219597][ T5921] usb 5-1: Manufacturer: syz [ 562.241863][ T5921] usb 5-1: SerialNumber: syz [ 562.257410][ T5921] usb 5-1: config 0 descriptor?? [ 562.271309][T12689] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 562.526338][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.540448][ T5921] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 562.550412][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.567419][ T5921] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 562.576403][ T5921] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 562.584721][ T5921] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 562.596393][ T5921] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 562.677832][T12695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.702562][T12698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'. [ 562.722912][T12695] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 562.768451][T12698] netlink: 'syz.1.1684': attribute type 7 has an invalid length. [ 562.788183][T12695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.788200][T12698] netlink: 'syz.1.1684': attribute type 8 has an invalid length. [ 562.788217][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 562.796209][T12695] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 562.906607][T12703] FAULT_INJECTION: forcing a failure. [ 562.906607][T12703] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 562.936143][T12695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.944370][T12698] erspan0: entered promiscuous mode [ 562.950951][T12698] batadv_slave_1: entered promiscuous mode [ 562.957719][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.2.1686 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 562.957739][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.957753][T12703] Call Trace: [ 562.957759][T12703] [ 562.957766][T12703] dump_stack_lvl+0x189/0x250 [ 562.957793][T12703] ? __pfx____ratelimit+0x10/0x10 [ 562.957814][T12703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.957835][T12703] ? __pfx__printk+0x10/0x10 [ 562.957851][T12703] ? __might_fault+0xb0/0x130 [ 562.957872][T12703] should_fail_ex+0x414/0x560 [ 562.957893][T12703] _copy_from_user+0x2d/0xb0 [ 562.957906][T12703] ___sys_sendmsg+0x158/0x2a0 [ 562.957925][T12703] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.957967][T12703] ? __fget_files+0x2a/0x420 [ 562.957986][T12703] ? __fget_files+0x3a0/0x420 [ 562.958009][T12703] __x64_sys_sendmsg+0x19b/0x260 [ 562.958028][T12703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.958051][T12703] ? __pfx_ksys_write+0x10/0x10 [ 562.958068][T12703] ? do_syscall_64+0xbe/0x3b0 [ 562.958091][T12703] do_syscall_64+0xfa/0x3b0 [ 562.958110][T12703] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.958129][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.958143][T12703] ? clear_bhb_loop+0x60/0xb0 [ 562.958160][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.958176][T12703] RIP: 0033:0x7f431038e929 [ 562.958191][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.958203][T12703] RSP: 002b:00007f4311150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.958217][T12703] RAX: ffffffffffffffda RBX: 00007f43105b5fa0 RCX: 00007f431038e929 [ 562.958227][T12703] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 562.958236][T12703] RBP: 00007f4311150090 R08: 0000000000000000 R09: 0000000000000000 [ 562.958245][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.958253][T12703] R13: 0000000000000000 R14: 00007f43105b5fa0 R15: 00007f43106dfa28 [ 562.958274][T12703] [ 562.972742][T12704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.062256][T12695] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 563.184588][T12674] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1680'. [ 563.225788][T12695] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 563.248719][T12695] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 563.337986][T12695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 563.379126][T12695] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 563.451597][ T5921] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 563.603973][ T5921] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 563.626587][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 563.638130][ T5921] usb 3-1: config 0 has an invalid interface number: 2 but max is -1 [ 563.649385][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.666096][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 563.678654][ T5921] usb 3-1: config 0 has no interface number 0 [ 563.687589][ T5921] usb 3-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.708427][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 563.721916][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.730380][ T5921] usb 3-1: Product: syz [ 563.735588][ T5921] usb 3-1: Manufacturer: syz [ 563.740545][ T5921] usb 3-1: SerialNumber: syz [ 563.762598][ T5921] usb 3-1: config 0 descriptor?? [ 563.974916][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.983779][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.019961][ T5921] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 564.037001][ T5921] usb 3-1: MIDIStreaming interface descriptor not found [ 564.066346][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.075871][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.127001][ T5921] usb 3-1: USB disconnect, device number 103 [ 564.191017][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.318288][T12717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.459381][T12724] sctp: [Deprecated]: syz.3.1692 (pid 12724) Use of int in max_burst socket option. [ 564.459381][T12724] Use struct sctp_assoc_value instead [ 564.809958][ T5919] usb 5-1: USB disconnect, device number 109 [ 564.942510][ T5919] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 564.993366][ T5919] keyspan 5-1:0.133: device disconnected [ 565.317671][T12744] vivid-007: disconnect [ 565.432349][T12742] vivid-007: reconnect [ 565.745889][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.756405][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.822837][T12757] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 565.877897][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 565.941787][ T5919] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 565.991746][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.011881][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.233127][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.259129][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.308043][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.330096][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.340250][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.369856][ T5919] usb 5-1: config 0 descriptor?? [ 566.432071][ T5921] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 566.531625][ T44] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 566.573367][ T5921] usb 4-1: device descriptor read/64, error -71 [ 566.758565][ T44] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 566.769253][ T44] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 566.783784][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.793551][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.810826][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.844994][ T5919] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 566.882549][ T5921] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 566.909791][ T44] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 566.923773][ T6102] udevd[6102]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.990682][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.055049][ T5921] usb 4-1: device descriptor read/64, error -71 [ 567.071840][T12770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.082018][T12770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.110181][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.169786][ T5921] usb usb4-port1: attempt power cycle [ 567.171339][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.196558][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.532093][ T5921] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 567.562267][ T5921] usb 4-1: device descriptor read/8, error -71 [ 567.802021][ T5921] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 567.819937][T12779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.832296][ T5921] usb 4-1: device descriptor read/8, error -71 [ 567.834208][T12779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.942093][ T5921] usb usb4-port1: unable to enumerate USB device [ 568.125664][ C1] plantronics 0003:047F:FFFF.001C: usb_submit_urb(ctrl) failed: -1 [ 568.265233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.272082][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.633433][T12791] Cannot find del_set index 0 as target [ 568.926204][T12795] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 568.929785][ T44] usb 5-1: USB disconnect, device number 110 [ 569.034657][T12772] delete_channel: no stack [ 569.046568][ T5921] usb 3-1: USB disconnect, device number 104 [ 569.841808][ T44] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 570.006831][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 570.080887][ T44] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 570.200260][ T44] usb 5-1: config 0 has no interface number 0 [ 570.239764][ T44] usb 5-1: config 0 interface 132 has no altsetting 0 [ 570.304352][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 570.340435][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.367113][ T44] usb 5-1: Product: syz [ 570.400300][ T44] usb 5-1: Manufacturer: syz [ 570.410967][ T44] usb 5-1: SerialNumber: syz [ 570.458672][ T44] usb 5-1: config 0 descriptor?? [ 570.862147][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.881199][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.925826][ T44] cdc_subset 5-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Belkin, eTEK, or compatible, fa:d8:7f:70:3e:c2 [ 570.934832][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.962609][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.033519][ T44] usb 5-1: USB disconnect, device number 111 [ 571.053554][ T44] cdc_subset 5-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Belkin, eTEK, or compatible [ 629.706029][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.713462][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.145039][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.151995][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.541715][ T31] INFO: task kworker/0:4:5899 blocked for more than 143 seconds. [ 729.549495][ T31] Not tainted 6.16.0-rc4-syzkaller #0 [ 729.555522][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.564238][ T31] task:kworker/0:4 state:D stack:20968 pid:5899 tgid:5899 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 729.576339][ T31] Workqueue: usb_hub_wq hub_event [ 729.581491][ T31] Call Trace: [ 729.584788][ T31] [ 729.587720][ T31] __schedule+0x16f5/0x4d00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 729.592368][ T31] ? schedule+0x165/0x360 [ 729.597023][ T31] ? __pfx___schedule+0x10/0x10 [ 729.602282][ T31] ? schedule+0x91/0x360 [ 729.606567][ T31] schedule+0x165/0x360 [ 729.610749][ T31] usb_kill_urb+0x1be/0x2d0 [ 729.615557][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 729.620634][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 729.627099][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 729.632291][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 729.637895][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 729.642989][ T31] usb_control_msg+0x232/0x3e0 [ 729.647794][ T31] hub_port_init+0xbf9/0x2800 [ 729.652658][ T31] hub_event+0x2518/0x4a00 [ 729.657163][ T31] ? __pfx_hub_event+0x10/0x10 [ 729.662257][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 729.668028][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.673641][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 729.679404][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 729.685562][ T31] process_scheduled_works+0xade/0x17b0 [ 729.691181][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 729.697628][ T31] worker_thread+0x8a0/0xda0 [ 729.702507][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 729.745264][ T31] ? __kthread_parkme+0x7b/0x200 [ 729.750278][ T31] kthread+0x70e/0x8a0 [ 729.807568][ T31] ? __pfx_worker_thread+0x10/0x10 [ 729.813171][ T31] ? __pfx_kthread+0x10/0x10 [ 729.817820][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.851505][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.856803][ T31] ? __pfx_kthread+0x10/0x10 [ 729.889898][ T31] ret_from_fork+0x3fc/0x770 [ 729.894793][ T5958] usb 2-1: USB disconnect, device number 22 [ 729.905859][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 729.911035][ T31] ? __switch_to_asm+0x39/0x70 [ 729.918570][ T31] ? __switch_to_asm+0x33/0x70 [ 729.923617][ T31] ? __pfx_kthread+0x10/0x10 [ 729.928259][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.933441][ T31] [ 729.962058][ T31] [ 729.962058][ T31] Showing all locks held in the system: [ 729.977390][ T31] 5 locks held by kworker/u8:0/12: [ 730.012268][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 730.051430][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 730.091454][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 730.100520][ T31] #3: ffffffff99cfbce0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 730.151448][ T31] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 730.161248][ T31] 1 lock held by khungtaskd/31: [ 730.191514][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 730.201846][ T31] 3 locks held by kworker/1:1/44: [ 730.206912][ T31] 3 locks held by kworker/u8:5/61: [ 730.212634][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 730.222899][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 730.234821][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 730.244139][ T31] 1 lock held by klogd/5192: [ 730.248757][ T31] 2 locks held by getty/5600: [ 730.253795][ T31] #0: ffff88803079a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 730.264358][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 730.280089][ T31] 5 locks held by kworker/0:4/5899: [ 730.287548][ T31] #0: ffff8880226ad948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 730.311496][ T31] #1: ffffc90004f77bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 730.331508][ T31] #2: ffff888144b03198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 730.340487][ T31] #3: ffff888144b06510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 730.391435][ T31] #4: ffff888144b43f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 730.401213][ T31] 3 locks held by kworker/0:6/5919: [ 730.447508][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 730.491429][ T31] #1: ffffc900050c7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 730.525070][ T31] #2: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 730.558054][ T31] 1 lock held by syz.3.589/8460: [ 730.571643][ T31] #0: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 730.621695][ T31] 3 locks held by kworker/u8:14/9249: [ 730.627130][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 730.668125][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 730.689627][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 730.698776][ T31] 1 lock held by syz.4.1635/12505: [ 730.707480][ T31] #0: ffffffff8f50f7c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 730.716718][ T31] [ 730.719072][ T31] ============================================= [ 730.719072][ T31] [ 730.770607][ T31] NMI backtrace for cpu 0 [ 730.770627][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 730.770649][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.770661][ T31] Call Trace: [ 730.770669][ T31] [ 730.770677][ T31] dump_stack_lvl+0x189/0x250 [ 730.770709][ T31] ? __wake_up_klogd+0xd9/0x110 [ 730.770735][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.770765][ T31] ? __pfx__printk+0x10/0x10 [ 730.770799][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 730.770826][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 730.770847][ T31] ? _printk+0xcf/0x120 [ 730.770872][ T31] ? __pfx__printk+0x10/0x10 [ 730.770895][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 730.770923][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 730.770951][ T31] watchdog+0xfee/0x1030 [ 730.770980][ T31] ? watchdog+0x1de/0x1030 [ 730.771014][ T31] kthread+0x70e/0x8a0 [ 730.771040][ T31] ? __pfx_watchdog+0x10/0x10 [ 730.771065][ T31] ? __pfx_kthread+0x10/0x10 [ 730.771088][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.771114][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.771140][ T31] ? __pfx_kthread+0x10/0x10 [ 730.771164][ T31] ret_from_fork+0x3fc/0x770 [ 730.771194][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 730.771228][ T31] ? __switch_to_asm+0x39/0x70 [ 730.771247][ T31] ? __switch_to_asm+0x33/0x70 [ 730.771264][ T31] ? __pfx_kthread+0x10/0x10 [ 730.771285][ T31] ret_from_fork_asm+0x1a/0x30 [ 730.771345][ T31] [ 730.771352][ T31] Sending NMI from CPU 0 to CPUs 1: [ 730.927938][ C1] NMI backtrace for cpu 1 [ 730.927955][ C1] CPU: 1 UID: 0 PID: 8460 Comm: syz.3.589 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 730.927974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.927985][ C1] RIP: 0010:stack_trace_consume_entry+0x5/0x280 [ 730.928009][ C1] Code: f0 5b 41 5e 5d c3 cc cc cc cc cc e8 05 11 ba 09 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff [ 730.928024][ C1] RSP: 0018:ffffc9000fe6f5f8 EFLAGS: 00000286 [ 730.928039][ C1] RAX: ffffffff81000130 RBX: ffffc9000fe6f6c0 RCX: 1c619501a6234c00 [ 730.928051][ C1] RDX: 0000000000000001 RSI: ffffffff81000130 RDI: ffffc9000fe6f6c0 [ 730.928069][ C1] RBP: ffffc9000fe6f690 R08: ffffc9000fe6ff48 R09: 0000000000000000 [ 730.928080][ C1] R10: ffffc9000fe6f658 R11: ffffffff81ace6d0 R12: ffff88807c16bc00 [ 730.928093][ C1] R13: 1ffff92001fcdeec R14: ffffffff81ace6d0 R15: ffffc9000fe6f608 [ 730.928105][ C1] FS: 0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 730.928119][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.928130][ C1] CR2: 000055b77b821fd0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 730.928145][ C1] Call Trace: [ 730.928150][ C1] [ 730.928157][ C1] arch_stack_walk+0x10d/0x150 [ 730.928176][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.928196][ C1] stack_trace_save+0x9c/0xe0 [ 730.928213][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 730.928236][ C1] save_stack+0xf5/0x1f0 [ 730.928252][ C1] ? __pfx_save_stack+0x10/0x10 [ 730.928266][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 730.928282][ C1] ? vfree+0x25a/0x400 [ 730.928296][ C1] ? kcov_close+0x28/0x50 [ 730.928315][ C1] ? __fput+0x449/0xa70 [ 730.928335][ C1] ? task_work_run+0x1d1/0x260 [ 730.928354][ C1] ? do_exit+0x6b5/0x22e0 [ 730.928371][ C1] ? do_group_exit+0x21c/0x2d0 [ 730.928388][ C1] ? get_signal+0x1286/0x1340 [ 730.928411][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 730.928431][ C1] ? exit_to_user_mode_loop+0x75/0x110 [ 730.928453][ C1] ? do_syscall_64+0x2bd/0x3b0 [ 730.928482][ C1] ? page_ext_put+0x97/0xc0 [ 730.928501][ C1] __reset_page_owner+0x71/0x1f0 [ 730.928518][ C1] __free_frozen_pages+0xc71/0xe70 [ 730.928540][ C1] vfree+0x25a/0x400 [ 730.928556][ C1] ? __pfx_kcov_close+0x10/0x10 [ 730.928576][ C1] kcov_close+0x28/0x50 [ 730.928596][ C1] __fput+0x449/0xa70 [ 730.928622][ C1] task_work_run+0x1d1/0x260 [ 730.928644][ C1] ? __pfx_task_work_run+0x10/0x10 [ 730.928665][ C1] ? kmem_cache_free+0x18f/0x400 [ 730.928683][ C1] do_exit+0x6b5/0x22e0 [ 730.928705][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 730.928722][ C1] ? do_raw_spin_lock+0x121/0x290 [ 730.928741][ C1] ? __pfx_do_exit+0x10/0x10 [ 730.928768][ C1] do_group_exit+0x21c/0x2d0 [ 730.928787][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.928811][ C1] get_signal+0x1286/0x1340 [ 730.928845][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 730.928866][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 730.928890][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 730.928919][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 730.928943][ C1] exit_to_user_mode_loop+0x75/0x110 [ 730.928966][ C1] do_syscall_64+0x2bd/0x3b0 [ 730.928989][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.929011][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.929027][ C1] ? clear_bhb_loop+0x60/0xb0 [ 730.929046][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.929068][ C1] RIP: 00fb:0x294e66b3c7c44cb4 [ 730.929082][ C1] Code: Unable to access opcode bytes at 0x294e66b3c7c44c8a. [ 730.929090][ C1] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 730.929106][ C1] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 730.929119][ C1] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 730.929131][ C1] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 730.929143][ C1] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 730.929156][ C1] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 730.929177][ C1] [ 731.342477][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 731.349375][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 731.359458][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.369532][ T31] Call Trace: [ 731.372834][ T31] [ 731.375766][ T31] dump_stack_lvl+0x99/0x250 [ 731.380365][ T31] ? __asan_memcpy+0x40/0x70 [ 731.384962][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.390389][ T31] ? __pfx__printk+0x10/0x10 [ 731.395008][ T31] panic+0x2db/0x790 [ 731.398945][ T31] ? __pfx_panic+0x10/0x10 [ 731.403386][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 731.409239][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 731.414640][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 731.420802][ T31] watchdog+0x102d/0x1030 [ 731.425142][ T31] ? watchdog+0x1de/0x1030 [ 731.429569][ T31] kthread+0x70e/0x8a0 [ 731.433646][ T31] ? __pfx_watchdog+0x10/0x10 [ 731.438330][ T31] ? __pfx_kthread+0x10/0x10 [ 731.442927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 731.448134][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.453358][ T31] ? __pfx_kthread+0x10/0x10 [ 731.457978][ T31] ret_from_fork+0x3fc/0x770 [ 731.462583][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 731.467705][ T31] ? __switch_to_asm+0x39/0x70 [ 731.472465][ T31] ? __switch_to_asm+0x33/0x70 [ 731.477226][ T31] ? __pfx_kthread+0x10/0x10 [ 731.481812][ T31] ret_from_fork_asm+0x1a/0x30 [ 731.486578][ T31] [ 731.489969][ T31] Kernel Offset: disabled [ 731.494296][ T31] Rebooting in 86400 seconds..