last executing test programs: 17.741911225s ago: executing program 4 (id=982): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x3b) sendmsg$inet6(r3, &(0x7f0000002880)={&(0x7f0000000040)={0xa, 0x4e23, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000002840)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x18}, 0x5) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x51ad, &(0x7f00000003c0)={0x0, 0x3, 0x4, 0x3, 0x280274}, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x44c2, 0x0, 0x2, 0xfffffffd}, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x20048014}, 0x850) r4 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc0106442, &(0x7f0000000080)) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r5, @ANYRES64=r2], 0x0) 13.440487737s ago: executing program 4 (id=996): r0 = socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x2, 0x3, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0xeffd, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @empty, 0x0, 0x0, 0x0, 0x5}}) 12.959745286s ago: executing program 4 (id=998): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x17) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, "84"}]}}, 0x0}, 0x0) 10.640711354s ago: executing program 4 (id=1005): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x8, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r5}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8.091438299s ago: executing program 3 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001060000000400000000070000001c0e7d"], 0x18}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00001a2f00010400000000bfdbdf25000000006d0df477aff8b70383892c41a27e2644cbab8bef2ae8528f8d075b2cda22f41ea137c9767aef7a9257cbb82c306e3e16283a8a6ab429458bc3e42ad59000b58d6de46578c6f823ded2e1b52f263606eddbc09d239c3b233980da214c09e6e6143a965d89d5bf7859ed1f8afaaa16c960258d00bd", @ANYRES32=0x0, @ANYBLOB="21000000008000001c0012800800010067726500100002800400120006000e0000000000"], 0x3c}}, 0x40000) 7.915637072s ago: executing program 3 (id=1015): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400e40, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002200)=[@text64={0x40, &(0x7f00000000c0)="450f01c2c42285930cee440f0092bfa59b8466b810018ed848b800800000000000000f23c80f21f835080030000f23f8410f01cf48b8c4000000000000000f23c80f21f835000010000f23f848b800000000008000000f23c00f21f83501000a000f23f8f30fd6c0664a0f38f517", 0x6e}], 0x1, 0x1, &(0x7f00000023c0)=[@dstype0={0x6, 0xa}], 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002280)=ANY=[@ANYRES32=r7, @ANYBLOB="67e114e166a7d112c2f72c26dc721a138d8b7d8bb15922ca2e1bd5c7b8d3f01e0cd9b3ea7a843f8a7a6d5867ae9c9d4e3fa33529bd07645fc9d015e906a015cdb761f8238413a5fcb84a3ef3189497982585c4138433665334cad31613f351e51602bc2af875bbef0a015118931bb47bf2fd8741c12ce999c5c818262b9f5051c292e6abcbec02baef2f448f7035a7f0a452bdb80fdc9197f616703fedc2d4744f540106b843c2e9d971fa0368a7f10e16c004f5dedf61af3f041fec2b17c3c7dd975f43701ee8ba66d5ab2dfeff95ff55662396f464d51d7f69b203f71c68644b4fce2064791c999924", @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x40, 0x0) 6.315583165s ago: executing program 4 (id=1018): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)}], 0x1}, 0x4000000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x3f, &(0x7f0000000440)={0x5, 0xf, 0x3f, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xc, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x7fffffb, 0xf000, 0x1, [0x3fc0]}, @ssp_cap={0x10, 0x10, 0xa, 0xbc, 0x1, 0x8, 0x1e00, 0x5, [0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x0, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a05ffeb00000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c00038008000240000000000800014000000000180003801400010073697430000000000000000000000000140000001000010000000000000000000000000a"], 0xa8}}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581", @ANYRES8], 0x0) 6.315217637s ago: executing program 1 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_uring_setup(0x1581, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x15, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50) syz_open_procfs(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x25) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xfffffffd, 0x2}, 0x10) 5.606306803s ago: executing program 1 (id=1020): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x5, &(0x7f0000000480)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}, {0x28, 0x0, 0x0, 0x6ebf}, {0x5, 0xe, 0x7}, {0x1ff, 0x5, 0x6c, 0x1}]}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010829bd70000000000000000000769a16501da8f7f5e7a60d6aba8cf0", @ANYRES32=0x0, @ANYBLOB="100100001432040008001f0006000000140035006e723000"/36], 0x3c}, 0x1, 0x0, 0x0, 0x4841}, 0x884) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='xprtrdma_frwr_maperr\x00', r3}, 0x18) (async) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d040005000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000940)={0x0, 0x0, 0x0, &(0x7f0000002600)=""/4096, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000007780)=""/4097, 0x0, 0x3000}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0xffffffff) (async) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x66842, 0x6010461ec2d2257d) inotify_add_watch(r8, 0x0, 0xf00004ee) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) (async) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000009000000eabf9d64aaec730df629f78ebc32", @ANYRES8, @ANYBLOB="01002dc265a4580f16d3cb000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40800) (async) getsockname$l2tp(r5, &(0x7f0000000340)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10) (async) dup3(r2, r5, 0x6700000000000000) (async) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 5.57625698s ago: executing program 3 (id=1021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0xe, 0xc4, {0xc4, 0x5, "661041d63ca0582370e6f05eb90678250cb0635db32d363fe0e8974671c860db8790414c21d13db0d8d76220ca6ff2c8a21ac36cf11e522e5a1751145cb7714771f7c5c13f0bb05a77a638e16b39bcf6170a7145b1c55a9b73c06141fb5bbfc34dc4afc8f72168bec46594eda8aad7a1b16f706dcd2e142819bc0547f16864b552667728572139e5524fdd2cb7778226c1c642559afcb1b8f964361e77131b9a479d87c3db586a944aef0e9006e9987be673e0b52c5d6e3e3b2ce808c2d2aea14cb4"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x3aca77d568862a87, "7fda1055"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xd7, 0x1, {0x22, 0xcb1}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x20, 0x15, 0x78, "91ffad455dd5ac0a9e9fd8ed76b0b1ed4306dda26f19682f28e3a71e0327188c1c32e6e0c2a0fffcc7570c4d5f21266e997b99e6752feec993915fcc0bf0cc2a8f0117de8dc24ace2aaedcd52f0b440738d483166fcc369885ea439afa4b750faf2c817e73a0c5fd3ce88f196098a5c5f3886f13162ed11e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000400)={0x20, 0x1, 0x93, "d5fcb42b96fb373b31fa075476dbbdeca04288d12130985f74162cc28171713c17531f3bc5681722f6f13b821ea71ce439a2b3b75475ee4d1979f66768f1c92c2aa306aabdefe965baa7c40561c69cacb0eeec1d026afa34e9ca81064bf9535a950fb02ffd9fff13db6d3d499661b07952786fc8df48d2018df7db5fdc793a994a487c944ffbed6b504cc4d00c252e9275960c"}, &(0x7f0000000340)={0x20, 0x3, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000001c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.252985591s ago: executing program 1 (id=1023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1}, {{@in6=@dev, 0x0, 0xa9}, 0x2, @in6=@dev, 0x0, 0x2, 0x0, 0x5}, {{@in=@remote, 0x0, 0x33}, 0x2, @in=@empty}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0) 5.067625953s ago: executing program 1 (id=1025): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x80000001, 0x975, {{0x14, 0x4, 0x0, 0x8, 0x50, 0x65, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0xf, 0x67, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x8, [{@multicast2, 0x8815}, {@rand_addr=0x64010102}, {@multicast1, 0x3}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48040}, 0x20040000) 4.615755774s ago: executing program 1 (id=1027): unshare(0x66000080) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x4, "25671805"}, 0xc) sendto$inet6(r0, &(0x7f00000000c0)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201575022ba5f20"], 0x0) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 4.415436774s ago: executing program 2 (id=1028): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000013c0)={0x8, 0x0, &(0x7f0000001340)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8501, 0x0) io_setup(0x3, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) dup(r1) syz_io_uring_setup(0x341b, &(0x7f0000000380)={0x0, 0x5079, 0x20000, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netpci0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 4.397779209s ago: executing program 0 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="630000004ec6"}) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000080)='stack\x00') syz_clone(0x2100, &(0x7f0000000000)="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", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="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") creat(&(0x7f0000000380)='./file0\x00', 0x0) unshare(0x24020000) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) epoll_create1(0x80000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002080), 0x22202, 0x0) epoll_create(0x4) syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r7, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.357245912s ago: executing program 0 (id=1030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) openat$zero(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000a00000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 3.02035562s ago: executing program 1 (id=1031): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x23, 0x5, 0xe38, 0x14, 0x4, 0x8, 0x1, 0x20, 0x2, 0x66, 0x4, 0x7, 0xf800, 0x4, 0x3, 0x400, [0x2, 0x1ff]}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000000)) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_cmd={0x23, 0x5, 0xe38, 0x14, 0x4, 0x8, 0x1, 0x20, 0x2, 0x66, 0x4, 0x7, 0xf800, 0x4, 0x3, 0x400, [0x2, 0x1ff]}}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000000)) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) 2.586366617s ago: executing program 3 (id=1032): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0x59488ed0, 0x2040) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000e3ff0b000000180005800800010075647000050002"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x30d, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x32}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24004904}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r4, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r2, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x84, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}, {0x68, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x64, 0x1, "c1481aeb63b28bd48068684c710ae9355da8a3ef4495c6fbe7d5296053e60ca59cc271136b94379eced32d5e6a91a021c01c249c0b68b1d1cdd74b5dd30519ea6cc25906ff41667612e9b803a074f73f78fe3ba5a1bf69dc59a73a104fd76dcb"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x12}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r2, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x84, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}, {0x68, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x64, 0x1, "c1481aeb63b28bd48068684c710ae9355da8a3ef4495c6fbe7d5296053e60ca59cc271136b94379eced32d5e6a91a021c01c249c0b68b1d1cdd74b5dd30519ea6cc25906ff41667612e9b803a074f73f78fe3ba5a1bf69dc59a73a104fd76dcb"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x12}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x4045) 2.414298413s ago: executing program 2 (id=1033): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) 2.183754197s ago: executing program 3 (id=1034): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) (async, rerun: 64) r1 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) listen(r1, 0xfffffffd) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) (async) listen(r0, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) (async, rerun: 32) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r12, 0x4068aea3, 0x0) 2.140306333s ago: executing program 2 (id=1035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="0f20c035000001000f22c0470f01c32e2ef30f09670fc73c3066460f38815800c443154927f72e0f01f766420f3882432c66b883008ed00f219a", 0x3a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000240)={0x2, 0x641, &(0x7f0000000080)="f3ff7bacddaffc6edffdb108664eb1eda7812332831723bc6bb44912e7e941cc5130f53c8927bf40e52c944aa78c7248a4a10dd4f1cb3d30852e6306a9973253d5cbad80830333edf89bd1cd63f06042445cc068ff0fddb49e2cce81bc8badde242cc460364d5b32945b552c05cf6fab7a676bafdb4f4b1c1435d007566292b22f6b5f4a31490c3c2407b91c62be30b7456f84cd6dedd919477228fafdc964e979c1e613bf86f84f8fcd748298685bc62ab7fe926271f2d0855247a7f31c06031fc114eee282626beab685c32788e7c3d7fe7dde51ec5f70df856e2899f9f8fbeee1c2ab9cc9c2920e01b386b859491a9f4e6c5899a930f2080f10508ead", &(0x7f0000000200)="303e5c182ccb79661e9037bddfe136026fd0a21610308ad6fc5a1491cc38cb68bbb09b842e897a79631afcd0e03b14172ac471dd", 0xfe, 0x34}) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x68, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.989530844s ago: executing program 4 (id=1036): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xebee) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.723602953s ago: executing program 3 (id=1037): r0 = syz_open_procfs(0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000130a030000a8180000000000000002000000a1bb84ebaf4a845c5e5d7a2743e79d8994bfeb0ac2142269a7e2a2f6051557ab9d54d23bfb3bfefe943446cf4a5024a5e9cb1a9d2b1ede47bbccd87dc6e8efb9b3ff1ab931ed21ebb25b6a3c0886c8e5da1f8e9fa29feb614451d1a6f410e62ec6981355a04c51b419d724b14c"], 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x10, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010903010902120001000000000904"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000180)) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80020000160001000000001000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000a0000000000000000000000000000000000000008001f00010000000c001500"], 0x280}}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) fchown(r8, r10, 0x0) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000701, r10, &(0x7f0000000200)) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000901000000af89"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.520473185s ago: executing program 2 (id=1038): unshare(0x22020400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20401, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000240)=0x8) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.297228142s ago: executing program 0 (id=1039): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x65ee, 0x149040) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'full', 0x20, 0x7}, 0x2f) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x4, 0x0, [0x0, 0x0, 0x0], [0xffffff80, 0x7, 0x8000, 0x6], [0x1, 0x90a, 0x1, 0xff], [0x5, 0x2de, 0x2, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4800040c}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x401, 0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xb}, @NFULA_CFG_MODE={0xa, 0x2, {0x9}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x40}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x7, 0x222001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x7, 0x7}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r5, 0xfffffffd, 0xd62c, 0x2, 0x2, [], [0x40000, 0x4, 0x1, 0x10], [0x2, 0x19, 0x1, 0xbe], [0x6, 0x7, 0x1, 0xff]}) open$dir(&(0x7f0000000480)='./file0\x00', 0x8301, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000004c0)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f00000005c0)={&(0x7f0000000500)="c0f0dd8fecdb000a2525e324f5bbe0e926281367983538c14f235938b6fd6e51237999f287fcd2de1b8239353cd0a60c8604803b78f45a4547c75d20bcfee363a471359d16097fd54489c5cc526eb48b3726b248a385d345d7ccf90ee34bd98fba96f006c4b66a908a06670ccfd29f4469d12017481c57f8afe01e0f1281ac47d5cc493d7262a1f578be0a059c1654be5f921bf0c30caaa65859b18adc595d", 0x9f}) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x16, 0x1, '/dev/input/mouse#\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xd, 0x1, '-!)$.+:#\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000740)={0xf760, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000780)={r8, 0x8}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="fa173b784560"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="03616642e58f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40004) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000940)={&(0x7f0000000900)=[0x0], 0x1, r6}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x22040880}, 0x80000) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000b00), 0x14000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000b40)={0x0, 0x0, r7}) socket$packet(0x11, 0x0, 0x300) sendmmsg(r9, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b80)="34f2b5a5ccf603dc516efa3a62d349199ef99e19b3f0587205e2758831a62e1ff4da8f8e84a1b3f4a7e6e37e5f09e0c00312bc89ea8ae2b8184df9ee68be91d4dcb2957e8063a52d7c33", 0x4a}], 0x1}}], 0x1, 0x20000000) pread64(r4, &(0x7f0000000c80)=""/7, 0x7, 0xfff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1, 0x0) getpeername$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0xdd59, 0x800, 0x4, 0x0, 0xffffffffffffffff, 0xf, '\x00', r10, r9, 0x2, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x3b, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='GPL\x00', 0x9, 0x82, &(0x7f0000001040)=""/130, 0x41000, 0xc, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x3, 0x4, 0x2, 0x400}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[{0x5, 0x5, 0xa, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001280)={r12, r10, 0x25, 0x12, @void}, 0x10) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000012c0)={@local, 0x200}) 1.215589487s ago: executing program 2 (id=1040): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x7ffe, 0x0) (async) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000002600)={&(0x7f0000002500), 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x70, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffffffff}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x0, 0x4, 0x2, 0x6}, {0x1, 0x5, 0x9, 0x7}, {0x3, 0x2, 0x8000c}], 0x10, 0x4f}, 0x94) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f00000024c0)={0x6, 'geneve1\x00', {0xdc}, 0x2}) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1c002fd, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0x3, 0xd}, {0x8, 0x8}}}, 0x24}}, 0x40004) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000009400001b030a01010000000000000000010000000900010073797a30000000000900030073797a320000000054000000060a010400000000000000000100000008000b40000000002c000480140001800b000100657874686472000004000280140001800c000100588fbeeefd206269747769736500040002800900010073797a3000000000140000001100010000000000000000000700000a"], 0xc8}}, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00') read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) (async) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000040)=0xa, 0x4) 1.09475788s ago: executing program 0 (id=1041): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x3, 0x2, 0x401, 0x2, 0x6, 0x401, 0xe7c, 0xfe0}}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.036994305s ago: executing program 0 (id=1042): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xd, 0x30, 0x8, 0x8}, &(0x7f0000000040)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xd, 0x30, 0x8, 0x8}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}}, 0x10, 0x3}, 0x90) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x1}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x1}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) (async) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0xee01, &(0x7f0000000280)) (async) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000901, 0xee01, &(0x7f0000000280)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3, 0xfffffc01, 0x1, 0x10142, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x3, 0x0, r6, 0x4, '\x00', r7, r8, 0x4, 0x5}, 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r11, 0x222, 0x70bd2c, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc13}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0xc010) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc13}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0xc010) syz_usbip_server_init(0x3) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000780)={r1, 0x2}, 0x8) getrlimit(0x5, &(0x7f00000007c0)) r14 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800), 0x600300, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r14, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)=""/17, 0x11}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/42, 0x2a}], 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r14, 0x0, &(0x7f0000000980)=[{&(0x7f0000000840)=""/17, 0x11}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000940)=""/42, 0x2a}], 0x4) r15 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000009c0), 0x20e100, 0x0) poll(&(0x7f0000000a00)=[{r4, 0x2}, {r5, 0x2010}, {r2}, {r5, 0x8000}, {r9, 0x2641}, {r15, 0x2}, {r8, 0x400}], 0x7, 0x3d) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000a40)={0x40, 0x4, 0x2}, 0x10) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r14, 0x4068aea3, &(0x7f0000000a80)) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000b40)=@req={0x28, &(0x7f0000000b00)={'pimreg\x00', @ifru_names='veth1_virt_wifi\x00'}}) 327.416564ms ago: executing program 0 (id=1043): r0 = syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xf5, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x5, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x22, 0x1, 0x6, 0x7f, 0x33}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x61, 0x2, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x8, 0x80, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x2, 0x50, 0x7ff}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000002100df4d2abd700000000000020010000000000000000000140011006e657464657673696d30000000000000080002", @ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000004) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd26, 0x0, {{0x12}, {@val={0x8}, @void}}}, 0x1c}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, r2, 0x0) r3 = mq_open(&(0x7f0000000740)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r3, &(0x7f00000004c0)={0x800, 0x10, 0xa, 0x3000}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/180, 0xb4, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000080)=""/92, 0x5c, 0x7fff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000280)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x3, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x4045090) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r10, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1044): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) (async) r3 = syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x20, 0x8, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) (async) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0xffe, 0x0, 0x0) kernel console output (not intermixed with test programs): r: syz [ 291.894814][ T5905] usb 3-1: config 0 descriptor?? [ 292.201815][ T2151] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 292.539546][ T2151] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.555288][ T2151] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 292.574926][ T2151] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.853671][ T2151] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 292.899254][ T2151] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 293.019962][ T2151] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.112242][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.145426][ T2151] usb 4-1: Product: syz [ 293.165173][ T2151] usb 4-1: Manufacturer: syz [ 293.191050][ T2151] cdc_wdm 4-1:1.0: skipping garbage [ 293.200860][ T2151] cdc_wdm 4-1:1.0: skipping garbage [ 293.247266][ T2151] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 293.300635][ T2151] cdc_wdm 4-1:1.0: Unknown control protocol [ 293.391149][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.398041][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.405035][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.411690][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.418492][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.425216][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.434961][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.441622][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.447964][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.454691][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.462912][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.469559][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.476122][ T5898] usb 4-1: USB disconnect, device number 61 [ 293.483185][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 293.489832][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 293.495916][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 293.925083][ T5905] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 294.077109][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.106087][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.156892][ T5905] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.257047][ T5905] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.338130][ T5905] usb 1-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 294.364269][ T2151] usb 3-1: USB disconnect, device number 45 [ 294.367969][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.412901][ T5905] usb 1-1: Product: syz [ 294.425115][ T5822] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 294.427527][ T5905] usb 1-1: Manufacturer: syz [ 294.483774][ T5905] usb 1-1: SerialNumber: syz [ 294.536514][ T5905] cdc_ncm 1-1:1.0: skipping garbage [ 294.597491][ T5822] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.615987][ T5822] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.751535][ T8646] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 294.769116][ T5822] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.822276][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.840973][ T8646] netlink: 'syz.2.672': attribute type 29 has an invalid length. [ 295.118567][ T5905] cdc_ncm 1-1:1.0: bind() failure [ 295.131367][ T5905] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 295.136821][ T8634] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 295.140539][ T5905] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 295.156014][ T5905] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 295.173833][ T5905] usb 1-1: USB disconnect, device number 40 [ 295.209976][ T8646] netlink: 500 bytes leftover after parsing attributes in process `syz.2.672'. [ 295.222772][ T5822] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.572016][ T5822] usb 2-1: USB disconnect, device number 59 [ 296.001743][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.041869][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.149994][ T5822] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 296.216653][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 296.333619][ T5822] usb 2-1: config 0 has no interfaces? [ 296.388743][ T5822] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.426555][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.479194][ T5822] usb 2-1: Product: syz [ 296.490240][ T5822] usb 2-1: Manufacturer: syz [ 296.500407][ T5822] usb 2-1: SerialNumber: syz [ 296.557254][ T5822] usb 2-1: config 0 descriptor?? [ 296.786609][ T8674] IPv6: addrconf: prefix option has invalid lifetime [ 296.793889][ T8674] IPv6: addrconf: prefix option has invalid lifetime [ 296.937171][ T8661] netlink: 'syz.1.675': attribute type 30 has an invalid length. [ 297.375353][ T8681] geneve2: entered promiscuous mode [ 297.390379][ T5822] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 297.596950][ T5822] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 297.609499][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.626237][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.639138][ T8688] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.684362][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.693929][ T8688] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.704786][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.718981][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.720533][ T8688] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.733393][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.756631][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.770246][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.789598][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.797110][ T8688] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.812659][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.822505][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.837475][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 297.847865][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.863658][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.965346][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.134102][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.147500][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.162376][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.172122][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.182086][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.202529][ T8696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.684'. [ 298.836909][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.845032][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 298.854410][ T5822] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 298.865669][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 298.875234][ T5822] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 298.893874][ T5822] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 298.921044][ T5822] usb 5-1: Product: syz [ 298.931687][ T5822] usb 5-1: Manufacturer: syz [ 299.005429][ T5822] usb 5-1: SerialNumber: syz [ 299.216591][ T5822] usb 5-1: config 0 descriptor?? [ 299.252407][ T5822] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 299.397337][ T8702] random: crng reseeded on system resumption [ 299.980306][ T5920] usb 2-1: USB disconnect, device number 60 [ 300.081485][ T5822] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 300.171908][ T5822] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.495173][ T10] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 300.505101][ T5822] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 300.789321][ T5822] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 300.798756][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.839775][ T5822] usb 3-1: Product: syz [ 300.847665][ T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 300.855114][ T5822] usb 3-1: Manufacturer: syz [ 300.865833][ T5822] usb 3-1: SerialNumber: syz [ 300.873720][ T10] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 300.900751][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.918280][ T5822] usb 3-1: config 0 descriptor?? [ 300.940624][ T10] usb 2-1: Product: syz [ 300.971863][ T10] usb 2-1: Manufacturer: syz [ 301.002239][ T10] usb 2-1: SerialNumber: syz [ 301.277139][ T8707] input: syz1 as /devices/virtual/input/input17 [ 301.383184][ T8710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.688'. [ 301.520111][ T10] usb 2-1: selecting invalid altsetting 1 [ 301.536148][ T8727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.546382][ T8727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.587503][ T10] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 301.587634][ T10] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 301.632864][ T10] usb 2-1: USB disconnect, device number 61 [ 302.022600][ T5898] usb 5-1: USB disconnect, device number 68 [ 302.042192][ T5898] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 302.198553][ T10] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 302.368067][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 64: 65, using maximum allowed: 30 [ 302.405798][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.438260][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.469787][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 302.511673][ T10] usb 4-1: config 0 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 65 [ 302.543187][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.569987][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.00 [ 302.589682][ T5822] usb 3-1: Firmware version (0.0) predates our first public release. [ 302.601895][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.619162][ T5822] usb 3-1: Please update to version 0.2 or newer [ 302.643072][ T10] usb 4-1: config 0 descriptor?? [ 302.668810][ T8729] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 302.706014][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 302.961003][ T8745] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 302.967602][ T8745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 303.017990][ T8745] vhci_hcd vhci_hcd.0: Device attached [ 303.104558][ T10] apple 0003:05AC:0230.000F: unknown global tag 0xc [ 303.136810][ T10] apple 0003:05AC:0230.000F: item 0 1 1 12 parsing failed [ 303.175464][ T10] apple 0003:05AC:0230.000F: parse failed [ 303.190943][ T10] apple 0003:05AC:0230.000F: probe with driver apple failed with error -22 [ 303.205519][ T5898] vhci_hcd: vhci_device speed not set [ 303.263780][ T24] usb 3-1: USB disconnect, device number 46 [ 303.324932][ T5898] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 303.495249][ T5822] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 303.683463][ T5822] usb 1-1: config 0 has no interfaces? [ 303.721316][ T5822] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 303.791857][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.820897][ T5822] usb 1-1: Product: syz [ 303.860319][ T5822] usb 1-1: Manufacturer: syz [ 303.888581][ T5822] usb 1-1: SerialNumber: syz [ 303.902097][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 303.902111][ T30] audit: type=1804 audit(1751452960.444:59): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.698" name="/newroot/149/file0" dev="tmpfs" ino=785 res=1 errno=0 [ 303.984803][ T5822] usb 1-1: config 0 descriptor?? [ 304.656479][ T8747] vhci_hcd: connection reset by peer [ 304.693155][ T7399] vhci_hcd: stop threads [ 304.708292][ T7399] vhci_hcd: release socket [ 304.727852][ T7399] vhci_hcd: disconnect device [ 304.940236][ T5822] usb 4-1: USB disconnect, device number 62 [ 305.124995][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 305.318624][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.330761][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.356562][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 305.372626][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 305.393041][ T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 305.411443][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.430217][ T10] usb 2-1: Product: syz [ 305.447050][ T10] usb 2-1: Manufacturer: syz [ 305.469926][ T10] usb 2-1: SerialNumber: syz [ 305.508590][ T10] usb 2-1: config 0 descriptor?? [ 305.519728][ T10] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 305.834922][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 305.998505][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 306.011736][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.40 [ 306.022941][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.032456][ T10] usb 4-1: Product: syz [ 306.042369][ T10] usb 4-1: Manufacturer: Ð [ 306.054155][ T10] usb 4-1: SerialNumber: syz [ 306.072320][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 306.312287][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 306.331038][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 306.365317][ T10] usb 4-1: USB disconnect, device number 63 [ 306.790085][ T24] usb 1-1: USB disconnect, device number 42 [ 307.128160][ T5822] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 307.284976][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 307.307029][ T5822] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 307.316091][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.342084][ T5822] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.352108][ T5822] usb 4-1: config 1 has no interface number 0 [ 307.362659][ T5822] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 307.387839][ T5822] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 307.405744][ T5822] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.415263][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.423543][ T5822] usb 4-1: Product: syz [ 307.435147][ T5822] usb 4-1: Manufacturer: syz [ 307.442688][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.464546][ T5822] usb 4-1: SerialNumber: syz [ 307.469634][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.495735][ T24] usb 1-1: config 0 descriptor?? [ 307.515448][ T24] cp210x 1-1:0.0: cp210x converter detected [ 307.531137][ T5842] Bluetooth: hci4: Malformed Event: 0x02 [ 307.894034][ T10] usb 2-1: USB disconnect, device number 62 [ 307.907473][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.916857][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 307.949866][ T5920] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 307.969073][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.023662][ T5822] usb 4-1: USB disconnect, device number 64 [ 308.181771][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 308.465031][ T5822] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 308.497850][ T5898] vhci_hcd: vhci_device speed not set [ 308.625209][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 308.639033][ T5822] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.655071][ T5822] usb 4-1: config 0 has no interface number 0 [ 308.731305][ T5822] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 308.758419][ T5822] usb 4-1: config 0 interface 1 has no altsetting 0 [ 308.807180][ T5822] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 308.816321][ T978] usb 1-1: USB disconnect, device number 43 [ 308.821450][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.832724][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.841318][ T5822] usb 4-1: Product: syz [ 308.850746][ T5822] usb 4-1: Manufacturer: syz [ 308.905089][ T5822] usb 4-1: SerialNumber: syz [ 308.922251][ T978] cp210x 1-1:0.0: device disconnected [ 308.946263][ T5822] usb 4-1: config 0 descriptor?? [ 309.025070][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 309.364399][ T10] usb 3-1: config 0 has no interfaces? [ 309.383224][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.408810][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.445237][ T8813] IPVS: Scheduler module ip_vs_ not found [ 309.566394][ T10] usb 3-1: Product: syz [ 309.622613][ T10] usb 3-1: Manufacturer: syz [ 309.671653][ T10] usb 3-1: SerialNumber: syz [ 309.791224][ T10] usb 3-1: config 0 descriptor?? [ 309.854978][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 310.079522][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 310.089771][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 310.097950][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 310.114625][ T24] usb 1-1: config 7 has an invalid interface number: 199 but max is 1 [ 310.157908][ T24] usb 1-1: config 7 has an invalid interface number: 251 but max is 1 [ 310.169186][ T24] usb 1-1: config 7 has no interface number 0 [ 310.210849][ T24] usb 1-1: config 7 has no interface number 1 [ 310.293745][ T24] usb 1-1: config 7 interface 251 has no altsetting 0 [ 310.325765][ T24] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=14.2b [ 310.348575][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.367799][ T24] usb 1-1: Product: syz [ 310.378984][ T24] usb 1-1: Manufacturer: syz [ 310.392974][ T24] usb 1-1: SerialNumber: syz [ 310.475019][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 310.548524][ T30] audit: type=1326 audit(1751452967.104:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.4.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x0 [ 310.677459][ T24] usb 1-1: USB disconnect, device number 44 [ 310.686101][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.696667][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.730716][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 310.751530][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.775337][ T10] usb 2-1: SerialNumber: syz [ 311.113583][ T5822] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 311.169997][ T5822] cx231xx 4-1:0.1: Not found matching IAD interface [ 311.247662][ T5822] usb 4-1: USB disconnect, device number 65 [ 311.280643][ T10] usb 2-1: 0:2 : does not exist [ 311.418272][ T10] usb 2-1: USB disconnect, device number 63 [ 311.570530][ T6921] udevd[6921]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.694988][ T5822] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 311.750419][ T5898] usb 3-1: USB disconnect, device number 47 [ 311.865132][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 311.907405][ T8858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 311.956492][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 312.096187][ T5822] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 312.123740][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.172984][ T5822] usb 4-1: config 0 descriptor?? [ 312.179652][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.190124][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.414974][ T10] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 312.466649][ T8865] binder: 8863:8865 ioctl c0306201 200000000040 returned -11 [ 312.606946][ T10] usb 2-1: device descriptor read/all, error -71 [ 312.759829][ T5822] uclogic 0003:2179:0053.0010: interface is invalid, ignoring [ 312.964094][ T5920] usb 4-1: USB disconnect, device number 66 [ 313.025957][ T978] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 313.237469][ T978] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 313.253917][ T978] usb 5-1: config 0 has no interface number 0 [ 313.276961][ T978] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 313.299099][ T978] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 313.321319][ T978] usb 5-1: config 0 interface 255 has no altsetting 0 [ 313.334677][ T978] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 313.349861][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.378861][ T978] usb 5-1: config 0 descriptor?? [ 313.402074][ T978] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 313.768585][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.775500][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.784134][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.872617][ T8875] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 313.908418][ T8875] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 314.135189][ T5920] usb 5-1: USB disconnect, device number 70 [ 314.214943][ T5822] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 314.385182][ T5822] usb 4-1: device descriptor read/64, error -71 [ 314.715006][ T5822] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 314.927645][ T5822] usb 4-1: device descriptor read/64, error -71 [ 315.036296][ T5822] usb usb4-port1: attempt power cycle [ 315.415108][ T5822] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 315.469937][ T5822] usb 4-1: device descriptor read/8, error -71 [ 315.795063][ T5822] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 316.095398][ T8930] syz_tun: entered allmulticast mode [ 316.124157][ T8929] syz_tun: left allmulticast mode [ 316.160811][ T5822] usb 4-1: device descriptor read/8, error -71 [ 316.275264][ T5822] usb usb4-port1: unable to enumerate USB device [ 316.308919][ T8935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.318158][ T978] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 316.495051][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 316.520080][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.550361][ T978] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.568698][ T978] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 316.582188][ T978] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 316.593262][ T978] usb 2-1: Product: syz [ 316.603997][ T978] usb 2-1: Manufacturer: syz [ 316.611270][ T978] usb 2-1: SerialNumber: syz [ 316.624284][ T978] usb 2-1: config 0 descriptor?? [ 317.057833][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 317.218905][ T10] usb 1-1: device descriptor read/64, error -71 [ 317.235537][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.242000][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.327095][ T8948] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 317.495401][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 317.634967][ T10] usb 1-1: device descriptor read/64, error -71 [ 317.755028][ T2151] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 317.760203][ T10] usb usb1-port1: attempt power cycle [ 317.925072][ T2151] usb 4-1: Using ep0 maxpacket: 16 [ 317.941667][ T2151] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 317.952595][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.964775][ T2151] usb 4-1: Product: syz [ 317.978071][ T2151] usb 4-1: Manufacturer: syz [ 318.001034][ T2151] usb 4-1: SerialNumber: syz [ 318.025683][ T2151] r8152-cfgselector 4-1: Unknown version 0x0000 [ 318.039142][ T2151] r8152-cfgselector 4-1: config 0 descriptor?? [ 318.114922][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 318.145819][ T10] usb 1-1: device descriptor read/8, error -71 [ 318.385123][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 318.440037][ T10] usb 1-1: device descriptor read/8, error -71 [ 318.575448][ T10] usb usb1-port1: unable to enumerate USB device [ 318.803496][ T2151] r8152-cfgselector 4-1: Unknown version 0x0000 [ 318.823978][ T2151] r8152-cfgselector 4-1: bad CDC descriptors [ 318.855593][ T2151] r8152-cfgselector 4-1: USB disconnect, device number 71 [ 318.951824][ T5920] usb 2-1: USB disconnect, device number 66 [ 319.404993][ T5920] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 319.412771][ T2151] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 319.572169][ T5920] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 319.586502][ T2151] usb 4-1: config 0 has no interfaces? [ 319.592187][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.611106][ T5920] usb 2-1: config 0 descriptor?? [ 319.617262][ T2151] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 319.631044][ T2151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.639239][ T2151] usb 4-1: Product: syz [ 319.643776][ T2151] usb 4-1: Manufacturer: syz [ 319.659684][ T2151] usb 4-1: SerialNumber: syz [ 319.722026][ T2151] usb 4-1: config 0 descriptor?? [ 319.735944][ T5822] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 319.895017][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 319.911925][ T5822] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 319.932911][ T5822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.966011][ T8966] program syz.3.748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.979267][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.988924][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.062672][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.074437][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.086798][ T5822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.100777][ T5822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.144967][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.198793][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.209582][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.428202][ T5822] usb 5-1: usb_control_msg returned -32 [ 320.433866][ T5822] usbtmc 5-1:16.0: can't read capabilities [ 320.625098][ T2151] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 320.779878][ T2151] usb 1-1: descriptor type invalid, skip [ 320.788196][ T8961] netlink: 56 bytes leftover after parsing attributes in process `syz.4.747'. [ 320.800508][ T2151] usb 1-1: descriptor type invalid, skip [ 320.809094][ T2151] usb 1-1: descriptor type invalid, skip [ 320.822356][ T2151] usb 1-1: descriptor type invalid, skip [ 320.833543][ T2151] usb 1-1: config 7 has an invalid interface number: 210 but max is 0 [ 320.950408][ T2151] usb 1-1: config 7 has no interface number 0 [ 320.964773][ T2151] usb 1-1: config 7 interface 210 has no altsetting 0 [ 321.003576][ T2151] usb 1-1: New USB device found, idVendor=04f2, idProduct=aff8, bcdDevice=31.a2 [ 321.012885][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.026811][ T2151] usb 1-1: Product: syz [ 321.041626][ T2151] usb 1-1: Manufacturer: syz [ 321.043520][ T30] audit: type=1326 audit(1751452977.594:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.076603][ T30] audit: type=1326 audit(1751452977.594:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.080259][ T2151] usb 1-1: SerialNumber: syz [ 321.099942][ T30] audit: type=1326 audit(1751452977.594:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.128435][ T30] audit: type=1326 audit(1751452977.594:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.153310][ T30] audit: type=1326 audit(1751452977.624:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.180570][ T30] audit: type=1326 audit(1751452977.624:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.222484][ T30] audit: type=1326 audit(1751452977.624:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 321.479931][ T2151] usb 1-1: USB disconnect, device number 49 [ 322.001533][ T8985] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 322.031717][ T978] usb 5-1: USB disconnect, device number 71 [ 322.038120][ T8961] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 322.139826][ T24] usb 2-1: USB disconnect, device number 67 [ 322.610135][ T8998] netlink: 'syz.4.760': attribute type 13 has an invalid length. [ 322.697800][ T24] usb 4-1: USB disconnect, device number 72 [ 322.775520][ T978] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 322.959191][ T978] usb 2-1: config 0 has no interfaces? [ 322.964926][ T978] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 323.026598][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.076995][ T5905] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 323.095201][ T978] usb 2-1: config 0 descriptor?? [ 323.194976][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 323.330770][ T5905] usb 1-1: config 0 has no interfaces? [ 323.341608][ T5905] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.352994][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.367132][ T5905] usb 1-1: Product: syz [ 323.371325][ T5905] usb 1-1: Manufacturer: syz [ 323.379833][ T5905] usb 1-1: SerialNumber: syz [ 323.384590][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 323.392078][ T5905] usb 1-1: config 0 descriptor?? [ 323.400426][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 323.446052][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.498217][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 323.547699][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.594238][ T24] usb 4-1: Product: syz [ 323.603177][ T24] usb 4-1: Manufacturer: syz [ 323.671429][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 323.682451][ T24] usb 4-1: SerialNumber: syz [ 323.781224][ T24] usb 4-1: config 0 descriptor?? [ 323.807636][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.852997][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 323.941148][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.764'. [ 323.988042][ T2151] usb 2-1: USB disconnect, device number 68 [ 324.536110][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 324.543255][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 324.616170][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 324.786947][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.797419][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 324.798468][ T10] usb 2-1: device descriptor read/64, error -71 [ 324.812705][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 324.819531][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.078615][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 325.265243][ T10] usb 2-1: device descriptor read/64, error -71 [ 325.375479][ T10] usb usb2-port1: attempt power cycle [ 325.489099][ T5905] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 325.618128][ T5898] usb 4-1: USB disconnect, device number 73 [ 325.625577][ T5898] em28xx 4-1:0.0: Disconnecting em28xx [ 325.643026][ T5898] em28xx 4-1:0.0: Freeing device [ 325.671740][ T5905] usb 5-1: config 3 has an invalid interface number: 168 but max is 0 [ 325.680981][ T5905] usb 5-1: config 3 has no interface number 0 [ 325.698927][ T5905] usb 5-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 325.735897][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 325.775627][ T5905] usb 5-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 325.788549][ T5905] usb 5-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 325.805654][ T10] usb 2-1: device descriptor read/8, error -71 [ 325.816290][ T5905] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 325.847467][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.875693][ T9033] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 326.007635][ T978] usb 1-1: USB disconnect, device number 50 [ 326.055879][ T9039] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 326.069812][ T9039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 326.086131][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 326.086354][ T5905] usb 5-1: string descriptor 0 read error: -71 [ 326.106128][ T10] usb 2-1: device descriptor read/8, error -71 [ 326.114418][ T5905] keyspan 5-1:3.168: Keyspan 2 port adapter converter detected [ 326.128763][ T5905] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 1 [ 326.138619][ T5905] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 84 [ 326.169454][ T5905] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 2 [ 326.190983][ T5898] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 326.215161][ T10] usb usb2-port1: unable to enumerate USB device [ 326.223203][ T5905] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 326.258397][ T5905] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 88 [ 326.269130][ T5905] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 6 [ 326.285643][ T5905] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 326.339274][ T5905] usb 5-1: USB disconnect, device number 72 [ 326.357393][ T5905] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 326.398378][ T5905] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 326.413723][ T5905] keyspan 5-1:3.168: device disconnected [ 326.444130][ T5898] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 326.454090][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.468198][ T5898] usb 4-1: Product: syz [ 326.545243][ T5898] usb 4-1: Manufacturer: syz [ 326.549959][ T5898] usb 4-1: SerialNumber: syz [ 326.594640][ T5898] usb 4-1: config 0 descriptor?? [ 326.605149][ T24] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 326.628758][ T5898] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 326.802414][ T24] usb 1-1: config 0 has no interfaces? [ 326.819510][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.829103][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.839030][ T24] usb 1-1: Product: syz [ 326.850586][ T24] usb 1-1: Manufacturer: syz [ 326.856067][ T24] usb 1-1: SerialNumber: syz [ 326.862809][ T24] usb 1-1: config 0 descriptor?? [ 326.924752][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 327.083988][ T9045] program syz.0.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.098784][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.109095][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.171300][ T9059] netlink: 'syz.4.777': attribute type 2 has an invalid length. [ 327.219745][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.220879][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.244418][ T9059] lm;Ê-: entered promiscuous mode [ 327.325292][ T5898] gspca_sunplus: reg_r err -71 [ 327.325389][ T5898] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 327.344382][ T5898] usb 4-1: USB disconnect, device number 74 [ 327.785455][ T5905] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 327.916262][ T5905] usb 2-1: device descriptor read/64, error -71 [ 328.125095][ T5920] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 328.164950][ T5905] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 328.165105][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 328.290142][ T5920] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.307093][ T5905] usb 2-1: device descriptor read/64, error -71 [ 328.307098][ T5920] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 328.348670][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.358136][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.367403][ T5920] usb 5-1: Product: syz [ 328.374712][ T5920] usb 5-1: Manufacturer: syz [ 328.385345][ T5920] usb 5-1: SerialNumber: syz [ 328.392907][ T24] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 328.408509][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.456469][ T24] usb 4-1: Product: syz [ 328.466588][ T5920] cdc_mbim 5-1:1.0: skipping garbage [ 328.477233][ T24] usb 4-1: Manufacturer: syz [ 328.492549][ T24] usb 4-1: SerialNumber: syz [ 328.507982][ T5905] usb usb2-port1: attempt power cycle [ 328.553564][ T24] usb 4-1: config 0 descriptor?? [ 328.622797][ T24] ch341 4-1:0.0: ch341-uart converter detected [ 328.669483][ T9071] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 328.680263][ T30] audit: type=1326 audit(1751452985.224:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 328.716500][ T30] audit: type=1326 audit(1751452985.224:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 328.758092][ T30] audit: type=1326 audit(1751452985.224:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 328.812388][ T30] audit: type=1326 audit(1751452985.224:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 328.849327][ T30] audit: type=1326 audit(1751452985.224:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e52b code=0x7ffc0000 [ 328.855064][ T5905] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 328.910241][ T30] audit: type=1326 audit(1751452985.224:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e52b code=0x7ffc0000 [ 328.960436][ T5905] usb 2-1: device descriptor read/8, error -71 [ 329.017366][ T30] audit: type=1326 audit(1751452985.224:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e52b code=0x7ffc0000 [ 329.064220][ T30] audit: type=1326 audit(1751452985.264:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e52b code=0x7ffc0000 [ 329.184457][ T30] audit: type=1326 audit(1751452985.264:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e52b code=0x7ffc0000 [ 329.213360][ T30] audit: type=1326 audit(1751452985.264:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9791bc11e5 code=0x7ffc0000 [ 329.236223][ T5905] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 329.270681][ T5905] usb 2-1: device descriptor read/8, error -71 [ 329.376438][ T9071] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 329.390462][ T5905] usb usb2-port1: unable to enumerate USB device [ 329.412208][ T5920] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 329.420624][ T5920] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 329.450912][ T5920] wwan wwan0: port wwan0mbim0 attached [ 329.478705][ T5920] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, f6:e4:24:24:79:d8 [ 329.621022][ T5898] usb 5-1: USB disconnect, device number 73 [ 329.630154][ T5898] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 329.728155][ T5898] wwan wwan0: port wwan0mbim0 disconnected [ 329.791016][ T24] usb 4-1: failed to send control message: -71 [ 329.801108][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 329.847563][ T24] usb 4-1: USB disconnect, device number 75 [ 329.897438][ T24] ch341 4-1:0.0: device disconnected [ 330.250321][ T24] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 330.501044][ T9078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 330.543722][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.574622][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 330.585032][ T5905] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 330.602390][ T24] usb 4-1: can't read configurations, error -71 [ 330.644445][ T5898] usb 1-1: USB disconnect, device number 51 [ 330.748535][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.769280][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.798916][ T5905] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 330.823116][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 330.837796][ T5905] usb 5-1: SerialNumber: syz [ 330.865237][ T5920] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 331.047059][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.069072][ T5920] usb 2-1: config 0 has no interface number 0 [ 331.100197][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 331.114440][ T5898] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 331.117519][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 331.128327][ T5905] usb 5-1: 0:2 : does not exist [ 331.133562][ T5920] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.170750][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.202936][ T5920] usb 2-1: config 0 descriptor?? [ 331.219359][ T5905] usb 5-1: USB disconnect, device number 74 [ 331.219898][ T9113] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 331.262100][ T9093] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 331.269305][ T9113] veth1_macvtap: left promiscuous mode [ 331.288241][ T5920] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 331.298610][ T9113] team0: Device veth1_macvtap failed to register rx_handler [ 331.335152][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 331.372808][ T5898] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 331.396479][ T5898] usb 1-1: config 0 has no interface number 0 [ 331.414243][ T5898] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.456786][ T5898] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 331.481090][ T5920] usb 2-1: USB disconnect, device number 77 [ 331.505649][ T5898] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 331.544881][ T5898] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.618076][ T5898] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 331.651151][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.675111][ T5898] usb 1-1: Product: syz [ 331.705602][ T5898] usb 1-1: Manufacturer: syz [ 331.725010][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 331.735138][ T5898] usb 1-1: SerialNumber: syz [ 331.743759][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 331.765761][ T5898] usb 1-1: config 0 descriptor?? [ 331.855045][ T5920] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 331.892927][ T9130] netlink: 56 bytes leftover after parsing attributes in process `syz.4.790'. [ 331.914990][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 331.923493][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 331.952728][ T9125] syzkaller1: entered promiscuous mode [ 331.961626][ T9125] syzkaller1: entered allmulticast mode [ 331.965766][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 331.986461][ T24] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 331.989687][ T5898] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 331.995938][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.022798][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'. [ 332.038243][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 332.053454][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 332.134010][ T24] usb 4-1: config 0 descriptor?? [ 332.149903][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 44212, setting to 64 [ 332.179657][ T5905] usb 1-1: USB disconnect, device number 52 [ 332.351277][ T5920] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 332.465057][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.559746][ T5920] usb 2-1: config 0 descriptor?? [ 332.593762][ T5920] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 332.821986][ T5833] usb 2-1: USB disconnect, device number 78 [ 333.232092][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 333.275461][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.334169][ T24] usb 4-1: USB disconnect, device number 78 [ 333.392479][ T5905] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 333.520640][ T9152] dlm: non-version read from control device 36 [ 333.589880][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 333.612426][ T5905] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 333.642143][ T5905] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 333.659314][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.704805][ T5905] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 333.725018][ T5833] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 333.763906][ T5905] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 333.775022][ T5905] usb 1-1: New USB device strings: Mfr=33, Product=0, SerialNumber=0 [ 333.793643][ T5905] usb 1-1: Manufacturer: syz [ 333.873302][ T9161] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 333.905356][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 333.914241][ T5833] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 333.932664][ T5833] usb 3-1: config 0 has no interface number 0 [ 333.943449][ T5833] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 333.965641][ T5833] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 333.983327][ T5833] usb 3-1: config 0 interface 126 has no altsetting 0 [ 333.994321][ T5833] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 334.006527][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.014650][ T5833] usb 3-1: Product: syz [ 334.019377][ T5833] usb 3-1: Manufacturer: syz [ 334.035402][ T5833] usb 3-1: SerialNumber: syz [ 334.053827][ T5833] usb 3-1: config 0 descriptor?? [ 334.071789][ T9147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 334.099569][ T5905] usb 1-1: USB disconnect, device number 53 [ 334.101848][ T9147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 334.195257][ T5898] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 334.365000][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 334.375494][ T5898] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 334.385717][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.399862][ T5898] usb 4-1: Product: syz [ 334.404105][ T5898] usb 4-1: Manufacturer: syz [ 334.409780][ T5898] usb 4-1: SerialNumber: syz [ 334.420062][ T5898] usb 4-1: config 0 descriptor?? [ 334.457924][ T5898] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 334.473478][ T5833] ir_usb 3-1:0.126: IR Dongle converter detected [ 334.511717][ T5833] usb 3-1: IRDA class descriptor not found, device not bound [ 334.554137][ T5833] usb 3-1: USB disconnect, device number 48 [ 334.646541][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.655756][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.682885][ T5898] gspca_sn9c2028: read1 error -71 [ 334.700465][ T5898] gspca_sn9c2028: read1 error -71 [ 334.725021][ T5898] gspca_sn9c2028: read1 error -71 [ 334.742037][ T5898] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 334.772017][ T5898] usb 4-1: USB disconnect, device number 79 [ 334.888659][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 334.888678][ T30] audit: type=1326 audit(1751452991.444:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.4.805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x0 [ 334.965121][ T5833] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 335.124934][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 335.136237][ T5833] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 335.151425][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.202792][ T5833] pvrusb2: Hardware description: Terratec Grabster AV400 [ 335.235277][ T5833] pvrusb2: ********** [ 335.251803][ T5833] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 335.280230][ T5833] pvrusb2: Important functionality might not be entirely working. [ 335.295377][ T5833] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 335.340146][ T5833] pvrusb2: ********** [ 335.381923][ T2343] pvrusb2: Invalid write control endpoint [ 335.463999][ T9199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.552355][ T2343] pvrusb2: Invalid write control endpoint [ 335.561817][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 335.577085][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 335.579326][ T978] usb 3-1: USB disconnect, device number 49 [ 335.590832][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 335.591890][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 335.622053][ T2343] pvrusb2: Device being rendered inoperable [ 335.631513][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 335.640523][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 335.670975][ T2343] pvrusb2: Attached sub-driver cx25840 [ 335.689518][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 335.714322][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 335.745106][ T24] usb 4-1: device descriptor read/64, error -71 [ 335.756222][ T9203] binder: BINDER_SET_CONTEXT_MGR already set [ 335.763703][ T9203] binder: 9202:9203 ioctl 4018620d 200000000040 returned -16 [ 335.985305][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 336.114993][ T5905] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 336.115079][ T24] usb 4-1: device descriptor read/64, error -71 [ 336.255511][ T5905] usb 1-1: device descriptor read/64, error -71 [ 336.265990][ T24] usb usb4-port1: attempt power cycle [ 336.393476][ T30] audit: type=1804 audit(1751452992.944:99): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.814" name="file0" dev="ramfs" ino=25762 res=1 errno=0 [ 336.505283][ T5905] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 336.556711][ T978] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 336.586285][ T9216] netlink: 87 bytes leftover after parsing attributes in process `syz.1.815'. [ 336.628020][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 336.648234][ T5905] usb 1-1: device descriptor read/64, error -71 [ 336.656244][ T24] usb 4-1: device descriptor read/8, error -71 [ 336.727572][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.738936][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.751014][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.764281][ T978] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 336.775958][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.785562][ T5905] usb usb1-port1: attempt power cycle [ 336.795499][ T978] usb 3-1: config 0 descriptor?? [ 336.852599][ T9221] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.817'. [ 336.905627][ T24] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 336.935798][ T24] usb 4-1: device descriptor read/8, error -71 [ 336.957816][ T9222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'. [ 337.045479][ T24] usb usb4-port1: unable to enumerate USB device [ 337.164984][ T5905] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 337.185691][ T5905] usb 1-1: device descriptor read/8, error -71 [ 337.219783][ T978] kye 0003:0458:5011.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 337.231674][ T978] kye 0003:0458:5011.0011: unbalanced collection at end of report description [ 337.241548][ T978] kye 0003:0458:5011.0011: parse failed [ 337.248214][ T978] kye 0003:0458:5011.0011: probe with driver kye failed with error -22 [ 337.425069][ T5905] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 337.445873][ T5905] usb 1-1: device descriptor read/8, error -71 [ 337.557054][ T5905] usb usb1-port1: unable to enumerate USB device [ 337.977581][ T9233] netlink: 'syz.4.819': attribute type 29 has an invalid length. [ 337.989738][ T9233] netlink: 'syz.4.819': attribute type 29 has an invalid length. [ 338.000838][ T9233] netlink: 500 bytes leftover after parsing attributes in process `syz.4.819'. [ 338.133828][ T9236] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 338.147706][ T9236] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 338.157863][ T9236] netlink: 144 bytes leftover after parsing attributes in process `syz.1.820'. [ 338.177808][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'. [ 338.823024][ T978] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 339.035106][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 339.042102][ T978] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.053733][ T978] usb 4-1: config 0 has no interface number 0 [ 339.094501][ T978] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.118439][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.142339][ T978] usb 4-1: Product: syz [ 339.154913][ T978] usb 4-1: Manufacturer: syz [ 339.174717][ T978] usb 4-1: SerialNumber: syz [ 339.191673][ T978] usb 4-1: config 0 descriptor?? [ 339.233288][ T978] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 339.265308][ T5898] usb 3-1: USB disconnect, device number 50 [ 339.305954][ T5833] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 339.369007][ T9242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.467945][ T978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 339.486526][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 339.507272][ T5833] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.508144][ T978] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 339.533763][ T5833] usb 1-1: config 0 has no interface number 0 [ 339.554220][ T5833] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 339.571163][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.594937][ T5833] usb 1-1: Product: syz [ 339.599218][ T5833] usb 1-1: Manufacturer: syz [ 339.624457][ T5833] usb 1-1: SerialNumber: syz [ 339.654400][ T5833] usb 1-1: config 0 descriptor?? [ 339.709692][ T5833] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 339.769814][ T5833] usb 1-1: selecting invalid altsetting 1 [ 339.795698][ T5833] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 339.851497][ T9250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.873126][ T5833] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 339.911028][ T9240] usb 1-1: dvb_usb_ce6230: I2C read not implemented [ 339.951406][ T5833] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 339.962200][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 339.974131][ T5898] usb 4-1: USB disconnect, device number 84 [ 340.032956][ T5833] usb 1-1: media controller created [ 340.112748][ T5898] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 340.133753][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.198042][ T5898] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.258719][ T5898] quatech2 4-1:0.51: device disconnected [ 341.081508][ T30] audit: type=1326 audit(1751452997.634:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="syz.2.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x0 [ 341.225689][ T5833] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 341.233042][ T5833] zl10353_read_register: readreg error (reg=127, ret==-110) [ 341.613204][ T9303] mmap: syz.3.836 (9303): VmData 45936640 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 342.629013][ T9321] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 342.892368][ T30] audit: type=1326 audit(1751452999.444:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.1.847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f691498e929 code=0x0 [ 342.995076][ T5920] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 343.114980][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 343.145045][ T5920] usb 4-1: device descriptor read/64, error -71 [ 343.255041][ T24] usb 3-1: device descriptor read/64, error -71 [ 343.445662][ T5920] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 343.561116][ T9348] tipc: Enabling of bearer rejected, failed to enable media [ 343.575373][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 343.715192][ T5920] usb 4-1: device descriptor read/64, error -71 [ 343.722735][ T24] usb 3-1: device descriptor read/64, error -71 [ 343.855418][ T5920] usb usb4-port1: attempt power cycle [ 343.861236][ T24] usb usb3-port1: attempt power cycle [ 344.225068][ T5898] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 344.234964][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 344.242767][ T5920] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 344.265908][ T24] usb 3-1: device descriptor read/8, error -71 [ 344.272506][ T5920] usb 4-1: device descriptor read/8, error -71 [ 344.450429][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.473702][ T5898] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 344.488045][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.525006][ T5920] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 344.525735][ T5898] usb 5-1: config 0 descriptor?? [ 344.532779][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 344.596941][ T5920] usb 4-1: device descriptor read/8, error -71 [ 344.603947][ T24] usb 3-1: device descriptor read/8, error -71 [ 344.706323][ T5920] usb usb4-port1: unable to enumerate USB device [ 344.748903][ T9351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.760387][ T9351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.815297][ T24] usb usb3-port1: unable to enumerate USB device [ 345.060667][ T5898] elecom 0003:056E:00FC.0012: unknown main item tag 0x3 [ 345.078590][ T5898] elecom 0003:056E:00FC.0012: unknown main item tag 0x0 [ 345.111350][ T5898] elecom 0003:056E:00FC.0012: unknown main item tag 0x0 [ 345.153578][ T5898] elecom 0003:056E:00FC.0012: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 346.553708][ T9379] Failed to get privilege flags for destination (handle=0x2:0xd) [ 346.828871][ T5920] usb 5-1: USB disconnect, device number 76 [ 347.185903][ T9387] fuse: Bad value for 'fd' [ 347.294960][ T5920] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 347.397577][ T30] audit: type=1326 audit(1751453003.954:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.3.863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f640058e929 code=0x0 [ 347.485101][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 347.505125][ T5920] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 347.519272][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.529213][ T5920] usb 5-1: Product: syz [ 347.533640][ T5920] usb 5-1: Manufacturer: syz [ 347.549919][ T5920] usb 5-1: SerialNumber: syz [ 347.590099][ T5920] usb 5-1: config 0 descriptor?? [ 347.691305][ T9401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.864'. [ 347.692822][ T5920] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 347.902181][ T5920] gspca_stk1135: reg_w 0x5 err -71 [ 347.913207][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 347.925338][ T5920] gspca_stk1135: Sensor write failed [ 347.950515][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 347.999376][ T5920] gspca_stk1135: Sensor write failed [ 348.053462][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 348.080488][ T5920] gspca_stk1135: Sensor read failed [ 348.088245][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 348.112349][ T5920] gspca_stk1135: Sensor read failed [ 348.133570][ T5920] gspca_stk1135: Detected sensor type unknown (0x0) [ 348.169973][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 348.191130][ T5920] gspca_stk1135: Sensor read failed [ 348.202342][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 348.225288][ T5920] gspca_stk1135: Sensor read failed [ 348.233934][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 348.244391][ T5920] gspca_stk1135: Sensor write failed [ 348.259920][ T5920] gspca_stk1135: serial bus timeout: status=0x00 [ 348.282252][ T5920] gspca_stk1135: Sensor write failed [ 348.298182][ T5920] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 348.334233][ T5920] usb 5-1: USB disconnect, device number 77 [ 348.365010][ T5822] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 348.555222][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 348.624766][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.642533][ T5822] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 348.658962][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.686988][ T5822] usb 3-1: config 0 descriptor?? [ 348.695095][ T24] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 348.715120][ T9409] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 348.872505][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.915093][ T24] usb 4-1: config 0 has no interface number 0 [ 348.925772][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 348.954961][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 348.983231][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 349.002574][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.026425][ T24] usb 4-1: config 0 descriptor?? [ 349.051260][ T9412] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 349.066735][ T24] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 349.163531][ T5822] elecom 0003:056E:010D.0013: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.2-1/input0 [ 349.288846][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.368247][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.515496][ T5822] usb 4-1: USB disconnect, device number 89 [ 349.540618][ T5898] usb 3-1: USB disconnect, device number 55 [ 349.766546][ T978] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 349.894952][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 349.973584][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 350.035555][ T24] usb 5-1: device descriptor read/64, error -71 [ 350.064680][ T978] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 350.088790][ T978] usb 2-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 350.118180][ T978] usb 2-1: config 0 has no interface number 0 [ 350.124336][ T978] usb 2-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.144985][ T5898] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 350.184165][ T978] usb 2-1: config 0 interface 12 has no altsetting 0 [ 350.194028][ T978] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 350.203483][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.213534][ T978] usb 2-1: Product: syz [ 350.223661][ T978] usb 2-1: Manufacturer: syz [ 350.242944][ T978] usb 2-1: SerialNumber: syz [ 350.270693][ T978] usb 2-1: config 0 descriptor?? [ 350.275010][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 350.305997][ T978] f81534 2-1:0.12: required endpoints missing [ 350.314947][ T5898] usb 3-1: device descriptor read/64, error -71 [ 350.415015][ T24] usb 5-1: device descriptor read/64, error -71 [ 350.575126][ T5898] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 350.626714][ T24] usb usb5-port1: attempt power cycle [ 350.715005][ T5898] usb 3-1: device descriptor read/64, error -71 [ 350.835473][ T5898] usb usb3-port1: attempt power cycle [ 350.842071][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 351.076288][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 351.091721][ T9364] syz.0.854 (9364): drop_caches: 1 [ 351.096992][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 351.104360][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.115741][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.144194][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 351.154178][ T10] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 351.166921][ T9365] syz.0.854 (9365): drop_caches: 1 [ 351.172923][ T10] usb 4-1: Product: syz [ 351.187536][ T10] usb 4-1: Manufacturer: syz [ 351.192180][ T10] usb 4-1: SerialNumber: syz [ 351.259425][ T10] appletouch 4-1:1.0: Could not find int-in endpoint [ 351.295147][ T24] usb 5-1: device descriptor read/8, error -71 [ 351.307856][ T5898] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 351.337669][ T5898] usb 3-1: device descriptor read/8, error -71 [ 351.365546][ T10] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 351.407664][ T10] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 351.535103][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 351.572775][ T24] usb 5-1: device descriptor read/8, error -71 [ 351.585054][ T5898] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 351.615687][ T5898] usb 3-1: device descriptor read/8, error -71 [ 351.695367][ T24] usb usb5-port1: unable to enumerate USB device [ 351.725390][ T5898] usb usb3-port1: unable to enumerate USB device [ 352.117005][ T9457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.127371][ T9457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.783328][ T9471] sctp: [Deprecated]: syz.2.881 (pid 9471) Use of int in maxseg socket option. [ 352.783328][ T9471] Use struct sctp_assoc_value instead [ 352.803092][ T9471] sctp: [Deprecated]: syz.2.881 (pid 9471) Use of int in maxseg socket option. [ 352.803092][ T9471] Use struct sctp_assoc_value instead [ 352.878903][ T9476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.892781][ T30] audit: type=1326 audit(1751453009.444:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.2.882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeebf8e929 code=0x0 [ 353.196080][ T5898] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 353.360769][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.365819][ T5822] usb 2-1: USB disconnect, device number 79 [ 353.388091][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.586567][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.596641][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.605242][ T5898] usb 3-1: Product: syz [ 353.764387][ T5898] usb 3-1: Manufacturer: syz [ 353.894873][ T5898] usb 3-1: SerialNumber: syz [ 353.916427][ T5822] usb 4-1: USB disconnect, device number 90 [ 354.355293][ T10] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 354.545177][ T10] usb 2-1: device descriptor read/64, error -71 [ 354.835015][ T10] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 354.976911][ T10] usb 2-1: device descriptor read/64, error -71 [ 355.105455][ T10] usb usb2-port1: attempt power cycle [ 355.346495][ T5822] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 355.504983][ T10] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 355.536057][ T10] usb 2-1: device descriptor read/8, error -71 [ 355.594917][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 355.613599][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.636150][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.657860][ T5822] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 355.668966][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.690712][ T5822] usb 4-1: config 0 descriptor?? [ 355.785689][ T10] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 355.805794][ T10] usb 2-1: device descriptor read/8, error -71 [ 355.927557][ T10] usb usb2-port1: unable to enumerate USB device [ 355.990968][ T5898] usb 3-1: 0:2 : does not exist [ 356.003625][ T5898] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 356.115835][ T5898] usb 3-1: USB disconnect, device number 60 [ 356.319728][ T5822] usbhid 4-1:0.0: can't add hid device: -71 [ 356.328624][ T5822] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 356.366150][ T5822] usb 4-1: USB disconnect, device number 91 [ 357.118283][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'. [ 357.719965][ T978] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 357.907204][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.949121][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.950451][ T30] audit: type=1326 audit(1751453014.504:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.004892][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.034888][ T978] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 358.046416][ T30] audit: type=1326 audit(1751453014.504:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.064662][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.068608][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.083099][ T30] audit: type=1326 audit(1751453014.504:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.115014][ T30] audit: type=1326 audit(1751453014.544:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.137215][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.154652][ T30] audit: type=1326 audit(1751453014.544:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.179377][ T978] usb 2-1: config 0 descriptor?? [ 358.215946][ T30] audit: type=1326 audit(1751453014.544:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.258734][ T30] audit: type=1326 audit(1751453014.544:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.290628][ T30] audit: type=1326 audit(1751453014.544:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.324626][ T30] audit: type=1326 audit(1751453014.544:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.353783][ T30] audit: type=1326 audit(1751453014.544:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.4.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9791b8e929 code=0x7ffc0000 [ 358.437253][ T978] usbhid 2-1:0.0: can't add hid device: -71 [ 358.443274][ T978] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 358.480897][ T978] usb 2-1: USB disconnect, device number 84 [ 358.745752][ T5822] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 359.076491][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 359.124189][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.136293][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 359.150282][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.163760][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 359.173874][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.202596][ T5822] usb 5-1: config 0 descriptor?? [ 359.221827][ T9532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.293611][ T5822] hub 5-1:0.0: USB hub found [ 359.449877][ T5822] hub 5-1:0.0: 2 ports detected [ 359.968182][ T9512] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 359.975543][ T9512] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 359.987623][ T9512] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 360.367748][ T9547] dvmrp8: entered allmulticast mode [ 360.386254][ T9550] dvmrp8: left allmulticast mode [ 360.654984][ T978] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 360.665149][ T5898] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 360.856281][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.866603][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.196997][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 361.202339][ T978] usb 2-1: config 2 has an invalid interface number: 172 but max is 1 [ 361.221056][ T5898] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 361.232177][ T978] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 361.250783][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.263484][ T978] usb 2-1: config 2 has an invalid interface number: 83 but max is 1 [ 361.306107][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.315398][ T978] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 361.324325][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.327845][ T9561] fuse: Bad value for 'fd' [ 361.332550][ T978] usb 2-1: config 2 has no interface number 0 [ 361.343278][ T5898] usb 3-1: Product: syz [ 361.348861][ T978] usb 2-1: config 2 has no interface number 1 [ 361.375064][ T5898] usb 3-1: Manufacturer: syz [ 361.380203][ T978] usb 2-1: config 2 interface 172 altsetting 218 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 361.433572][ T5822] hub 5-1:0.0: set hub depth failed [ 361.435047][ T5898] usb 3-1: SerialNumber: syz [ 361.491848][ T978] usb 2-1: config 2 interface 172 altsetting 218 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 361.505301][ T5822] usb 5-1: USB disconnect, device number 82 [ 361.518220][ T978] usb 2-1: config 2 interface 172 altsetting 218 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 361.581146][ T978] usb 2-1: config 2 interface 172 altsetting 218 has a duplicate endpoint with address 0x1, skipping [ 361.613142][ T978] usb 2-1: config 2 interface 172 altsetting 218 endpoint 0x5 has an invalid bInterval 64, changing to 7 [ 361.645605][ T978] usb 2-1: config 2 interface 172 altsetting 218 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 361.664944][ T978] usb 2-1: config 2 interface 172 altsetting 218 has a duplicate endpoint with address 0x2, skipping [ 361.676292][ T978] usb 2-1: config 2 interface 172 altsetting 218 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 361.687791][ T978] usb 2-1: config 2 interface 172 altsetting 218 has a duplicate endpoint with address 0xD, skipping [ 361.698971][ T978] usb 2-1: config 2 interface 172 altsetting 218 has a duplicate endpoint with address 0x2, skipping [ 361.710203][ T978] usb 2-1: config 2 interface 172 altsetting 218 has an invalid descriptor for endpoint zero, skipping [ 361.721972][ T978] usb 2-1: config 2 interface 172 altsetting 218 has a duplicate endpoint with address 0xA, skipping [ 361.733302][ T978] usb 2-1: config 2 interface 83 altsetting 2 endpoint 0x87 has invalid maxpacket 52828, setting to 64 [ 361.844025][ T978] usb 2-1: config 2 interface 83 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 361.858059][ T5898] usb 3-1: 0:2 : does not exist [ 361.865304][ T978] usb 2-1: config 2 interface 172 has no altsetting 0 [ 361.872525][ T978] usb 2-1: config 2 interface 83 has no altsetting 0 [ 361.884976][ T5898] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 361.893210][ T978] usb 2-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=86.53 [ 361.902636][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.911160][ T978] usb 2-1: Product: syz [ 361.915760][ T978] usb 2-1: Manufacturer: syz [ 361.920746][ T978] usb 2-1: SerialNumber: syz [ 361.958405][ T5898] usb 3-1: USB disconnect, device number 61 [ 362.031182][ T6921] udevd[6921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.181876][ T978] usb 2-1: USB disconnect, device number 85 [ 362.271955][ T9570] input: syz0 as /devices/virtual/input/input19 [ 362.356970][ T5905] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 362.539333][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.568362][ T5905] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 362.581251][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.592600][ T5905] usb 5-1: config 0 descriptor?? [ 362.624980][ T5919] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 363.183141][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 363.555365][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.577251][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.590503][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 363.600622][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 363.610766][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.640013][ T5919] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 363.649590][ T5919] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 363.658086][ T5919] usb 4-1: Manufacturer: syz [ 363.679557][ T5919] usb 4-1: config 0 descriptor?? [ 363.690696][ T5905] sony 0003:1345:3008.0014: unknown main item tag 0x0 [ 363.729696][ T5905] sony 0003:1345:3008.0014: item fetching failed at offset 4/5 [ 363.825793][ T5905] sony 0003:1345:3008.0014: parse failed [ 363.851667][ T5905] sony 0003:1345:3008.0014: probe with driver sony failed with error -22 [ 363.890444][ T5920] usb 5-1: USB disconnect, device number 83 [ 363.949542][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 363.995104][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 364.122974][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.135159][ T5919] rc_core: IR keymap rc-hauppauge not found [ 364.145400][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.163656][ T5919] Registered IR keymap rc-empty [ 364.182366][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.200889][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 364.242842][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 364.268035][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.300122][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.316271][ T5905] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 364.318899][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 364.332676][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.365255][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 364.399648][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.440882][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 364.455948][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.457553][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'. [ 364.475235][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.503255][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.510623][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 364.521624][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.532190][ T5905] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 364.542880][ T978] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 364.544231][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.553479][ T5905] usb 2-1: config 0 has no interface number 0 [ 364.560384][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.576697][ T5905] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 364.592142][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.598290][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.601508][ T5905] usb 2-1: Product: syz [ 364.616124][ T5905] usb 2-1: Manufacturer: syz [ 364.620871][ T5905] usb 2-1: SerialNumber: syz [ 364.637180][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.641339][ T5905] usb 2-1: config 0 descriptor?? [ 364.657815][ T5905] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 364.715494][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 364.735138][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.742235][ T978] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.763601][ T978] usb 3-1: config 179 has no interface number 0 [ 364.770655][ T978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 364.788129][ T978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 364.802936][ T978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 364.823830][ T978] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 364.842287][ T978] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 364.845058][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.871739][ T978] usb 3-1: config 179 interface 65 has no altsetting 0 [ 364.883002][ T5905] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 364.896826][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 364.909965][ T978] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 364.929903][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.940057][ T5919] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 364.959605][ T5919] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 364.968319][ T5905] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 364.992124][ T5919] usb 4-1: USB disconnect, device number 92 [ 365.310465][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 365.326111][ T5905] usb 2-1: USB disconnect, device number 86 [ 365.369571][ T978] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 365.394468][ T5905] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 365.456378][ T5905] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 365.476622][ T5185] input input21: unable to receive magic message: -110 [ 365.513865][ T5905] quatech2 2-1:0.51: device disconnected [ 365.536996][ T5185] input input21: unable to receive magic message: -32 [ 365.586598][ T5185] input input21: unable to receive magic message: -32 [ 365.638913][ T9626] xt_hashlimit: size too large, truncated to 1048576 [ 365.731592][ T5185] input input21: unable to receive magic message: -32 [ 365.768786][ T5185] input input21: unable to receive magic message: -32 [ 365.779374][ T5920] usb 3-1: USB disconnect, device number 62 [ 365.780103][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 365.794277][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 365.830567][ T5920] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 366.135002][ T978] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 366.297476][ T978] usb 4-1: config index 0 descriptor too short (expected 45550, got 72) [ 366.321264][ T978] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 366.340794][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.371018][ T978] usb 4-1: Product: syz [ 366.375607][ T978] usb 4-1: Manufacturer: syz [ 366.380264][ T978] usb 4-1: SerialNumber: syz [ 366.406508][ T978] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 366.511384][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 366.545562][ T5920] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 366.685173][ T5920] usb 3-1: device descriptor read/64, error -71 [ 366.749064][ T5919] usb 4-1: USB disconnect, device number 93 [ 366.925196][ T5920] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 367.069011][ T5920] usb 3-1: device descriptor read/64, error -71 [ 367.225485][ T5920] usb usb3-port1: attempt power cycle [ 367.422090][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 367.455317][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 367.544961][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 367.552251][ T10] ath9k_htc: Failed to initialize the device [ 367.562099][ T5919] usb 4-1: ath9k_htc: USB layer deinitialized [ 367.584371][ T5920] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 367.595166][ T24] usb 2-1: device descriptor read/64, error -71 [ 367.624675][ T5920] usb 3-1: device descriptor read/8, error -71 [ 367.637574][ T9674] netlink: 'syz.0.931': attribute type 12 has an invalid length. [ 367.820137][ T9677] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 367.865354][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 367.884940][ T5919] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 367.915143][ T5920] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 367.958312][ T5920] usb 3-1: device descriptor read/8, error -71 [ 368.005312][ T24] usb 2-1: device descriptor read/64, error -71 [ 368.036880][ T5919] usb 4-1: config index 0 descriptor too short (expected 45550, got 72) [ 368.045555][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.059114][ T5919] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 368.074273][ T5920] usb usb3-port1: unable to enumerate USB device [ 368.089137][ T5919] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 368.103992][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.112992][ T5919] usb 4-1: Product: syz [ 368.123070][ T5919] usb 4-1: Manufacturer: syz [ 368.133022][ T5919] usb 4-1: SerialNumber: syz [ 368.138413][ T24] usb usb2-port1: attempt power cycle [ 368.231171][ T5919] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 368.503720][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 368.545668][ T24] usb 2-1: device descriptor read/8, error -71 [ 368.815000][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 368.849215][ T24] usb 2-1: device descriptor read/8, error -71 [ 368.975690][ T24] usb usb2-port1: unable to enumerate USB device [ 369.060074][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.073491][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.141336][ T9626] : renamed from bridge_slave_0 (while UP) [ 369.644964][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 369.833779][ T10] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 369.849530][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 369.859869][ T10] usb 3-1: config 8 has no interface number 0 [ 369.871209][ T10] usb 3-1: config 8 interface 80 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 370.039863][ T10] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.072742][ T10] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 370.151745][ T10] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 370.183165][ T10] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 370.205048][ T5898] usb 4-1: USB disconnect, device number 94 [ 370.233302][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.301266][ T9693] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 370.378778][ T10] usb 3-1: NFC: intf ffff888057c74000 id ffffffff8eb52480 [ 370.659829][ T5919] usb 3-1: USB disconnect, device number 67 [ 370.736722][ T9709] program syz.3.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.304513][ T9717] netlink: 'syz.3.940': attribute type 4 has an invalid length. [ 371.335850][ T9717] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.940'. [ 371.569950][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 371.674996][ T5920] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 371.831824][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 371.846346][ T5920] usb 4-1: device descriptor read/64, error -71 [ 372.115023][ T5920] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 372.137049][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 372.161498][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 372.175314][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 372.257779][ T5920] usb 4-1: device descriptor read/64, error -71 [ 372.365420][ T5920] usb usb4-port1: attempt power cycle [ 372.375704][ T5898] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 372.505162][ T5898] usb 2-1: device descriptor read/64, error -71 [ 372.665260][ T5905] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 372.750807][ T5898] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 372.885128][ T5898] usb 2-1: device descriptor read/64, error -71 [ 372.985223][ T5905] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 372.995884][ T5898] usb usb2-port1: attempt power cycle [ 373.054956][ T5920] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 373.105691][ T5920] usb 4-1: device descriptor read/8, error -71 [ 373.435092][ T5920] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 373.544715][ T5898] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 373.576524][ T5920] usb 4-1: device descriptor read/8, error -71 [ 373.586115][ T5898] usb 2-1: device descriptor read/8, error -71 [ 373.696195][ T5920] usb usb4-port1: unable to enumerate USB device [ 373.824965][ T5898] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 373.845670][ T5898] usb 2-1: device descriptor read/8, error -71 [ 373.965559][ T5898] usb usb2-port1: unable to enumerate USB device [ 374.825247][ T5919] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 374.888799][ T5898] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 374.977227][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.987590][ T5919] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 374.996773][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.015171][ T5919] usb 4-1: config 0 descriptor?? [ 375.045258][ T5898] usb 5-1: device descriptor read/64, error -71 [ 375.295234][ T5898] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 375.425028][ T5898] usb 5-1: device descriptor read/64, error -71 [ 375.427476][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 375.455301][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 375.481136][ T5919] usb 4-1: USB disconnect, device number 99 [ 375.557825][ T5898] usb usb5-port1: attempt power cycle [ 375.904968][ T5898] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 375.926212][ T5898] usb 5-1: device descriptor read/8, error -71 [ 376.165202][ T5898] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 376.185695][ T5898] usb 5-1: device descriptor read/8, error -71 [ 376.296292][ T5898] usb usb5-port1: unable to enumerate USB device [ 376.435183][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.674544][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.681130][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.705204][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 401.713040][ T5200] udevd[5200]: worker [5841] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 404.265422][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 440.109503][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.116099][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.025062][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 472.948977][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 472.949000][ T30] audit: type=1326 audit(1751453129.504:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9777 comm="syz.1.956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f691498e929 code=0x0 [ 472.953915][ T9779] netlink: 'syz.1.956': attribute type 3 has an invalid length. [ 474.447982][ T9825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.969'. [ 474.527200][ T30] audit: type=1326 audit(1751453131.084:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640058e929 code=0x7ffc0000 [ 474.582877][ T30] audit: type=1326 audit(1751453131.084:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f640058e929 code=0x7ffc0000 [ 474.738323][ T30] audit: type=1326 audit(1751453131.084:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640058e929 code=0x7ffc0000 [ 474.771040][ T30] audit: type=1326 audit(1751453131.084:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f640058e929 code=0x7ffc0000 [ 474.793387][ T30] audit: type=1326 audit(1751453131.084:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640058e929 code=0x7ffc0000 [ 474.816811][ T30] audit: type=1326 audit(1751453131.084:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9824 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640058e929 code=0x7ffc0000 [ 474.839832][ T30] audit: type=1326 audit(1751453131.314:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.2.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeebf8e929 code=0x7fc00000 [ 475.435067][ T24] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 475.468068][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 475.601786][ T24] usb 4-1: config 0 has no interfaces? [ 475.696043][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 475.874844][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.882925][ T24] usb 4-1: Product: syz [ 475.915937][ T24] usb 4-1: Manufacturer: syz [ 475.935746][ T24] usb 4-1: SerialNumber: syz [ 475.965432][ T24] usb 4-1: config 0 descriptor?? [ 476.197929][ T9853] program syz.3.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.214487][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.224825][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.295374][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 476.318516][ T9865] trusted_key: syz.1.980 sent an empty control message without MSG_MORE. [ 476.357626][ T9867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.358076][ T9867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.474997][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 476.507552][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 476.519638][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.554934][ T24] usb 3-1: Product: syz [ 476.575166][ T24] usb 3-1: Manufacturer: syz [ 476.598542][ T24] usb 3-1: SerialNumber: syz [ 476.615623][ T24] usb 3-1: config 0 descriptor?? [ 476.626784][ T24] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 476.785411][ T5919] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 476.944911][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 476.953524][ T5919] usb 2-1: config 162 has an invalid interface number: 97 but max is 0 [ 476.962441][ T5919] usb 2-1: config 162 has no interface number 0 [ 476.971549][ T5919] usb 2-1: config 162 interface 97 has no altsetting 0 [ 476.987256][ T5919] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 477.008395][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.024358][ T5919] usb 2-1: Product: syz [ 477.066332][ T5919] usb 2-1: Manufacturer: syz [ 477.078900][ T5919] usb 2-1: SerialNumber: syz [ 477.090492][ T24] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 477.105587][ T24] usb 3-1: USB disconnect, device number 68 [ 477.346595][ T5919] metro_usb 2-1:162.97: Metrologic USB to Serial converter detected [ 477.380670][ T5919] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 477.524948][ T5919] usb 2-1: USB disconnect, device number 95 [ 477.643240][ T5919] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 477.712304][ T5919] metro_usb 2-1:162.97: device disconnected [ 477.835159][ T9876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.898609][ T9876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.375184][ T24] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 478.558247][ T24] usb 3-1: config 0 has no interfaces? [ 478.572103][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.581764][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.590574][ T24] usb 3-1: Product: syz [ 478.595321][ T24] usb 3-1: Manufacturer: syz [ 478.599949][ T24] usb 3-1: SerialNumber: syz [ 478.638012][ T24] usb 3-1: config 0 descriptor?? [ 478.796040][ T5898] usb 4-1: USB disconnect, device number 100 [ 479.037407][ T9880] program syz.2.984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.056336][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.066837][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.182406][ T9897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.990'. [ 479.274894][ T5905] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 479.484954][ T5898] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 480.625026][ T5898] usb 4-1: device descriptor read/64, error -71 [ 480.875721][ T5898] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 481.028041][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 481.048861][ T5898] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 481.059048][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.092395][ T5898] usb 4-1: config 0 descriptor?? [ 481.116071][ T5898] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 481.315601][ T5898] usb 4-1: Detected FT232B [ 481.354659][ T24] usb 3-1: USB disconnect, device number 69 [ 481.384949][ T5898] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 481.463332][ T5898] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 481.624676][ T978] usb 4-1: USB disconnect, device number 102 [ 481.671996][ T6123] udevd[6123]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 481.686734][ T978] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 481.747595][ T978] ftdi_sio 4-1:0.0: device disconnected [ 481.753436][ T6123] udevd[6123]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 481.905023][ T5898] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 481.934861][ T5905] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 482.374855][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 482.385379][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 482.431896][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 482.452161][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 482.479625][ T5905] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.492068][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.541861][ T5905] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.554848][ T5898] usb 3-1: Product: syz [ 482.559380][ T5898] usb 3-1: Manufacturer: syz [ 482.572086][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 482.580009][ T5898] usb 3-1: SerialNumber: syz [ 482.769650][ T5905] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 482.779770][ T5898] usb 3-1: config 0 descriptor?? [ 482.785566][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.818921][ T5905] usb 5-1: config 0 descriptor?? [ 482.865939][ T978] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 483.010459][ T5945] usb 3-1: USB disconnect, device number 70 [ 483.036905][ T978] usb 4-1: config 0 has an invalid interface number: 206 but max is 1 [ 483.075017][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.131939][ T978] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 483.165826][ T5905] macally 0003:060B:0001.0015: collection stack underflow [ 483.179626][ T5905] macally 0003:060B:0001.0015: item 0 1 0 12 parsing failed [ 483.187828][ T978] usb 4-1: config 0 has no interface number 0 [ 483.215016][ T978] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 483.227840][ T5905] macally 0003:060B:0001.0015: probe with driver macally failed with error -22 [ 483.236935][ T978] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 483.253224][ T978] usb 4-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 30768, setting to 64 [ 483.266764][ T5905] usb 5-1: USB disconnect, device number 89 [ 483.280016][ T978] usb 4-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 483.310280][ T978] usb 4-1: config 0 interface 206 has no altsetting 0 [ 483.329352][ T978] usb 4-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 483.356250][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.381424][ T978] usb 4-1: Product: syz [ 483.400882][ T978] usb 4-1: Manufacturer: syz [ 483.438184][ T978] usb 4-1: SerialNumber: syz [ 483.477910][ T978] usb 4-1: config 0 descriptor?? [ 483.491307][ T9940] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 483.544697][ T9947] netlink: 3852 bytes leftover after parsing attributes in process `syz.1.1001'. [ 483.731024][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.740982][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.758368][ T978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 483.810703][ T978] usb 4-1: USB disconnect, device number 103 [ 483.935423][ T5919] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 484.075065][ T5919] usb 3-1: device descriptor read/64, error -71 [ 484.585637][ T5919] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 484.666495][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.692228][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.715088][ T5919] usb 3-1: device descriptor read/64, error -71 [ 484.817773][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.841653][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.855368][ T5919] usb usb3-port1: attempt power cycle [ 485.274960][ T5919] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 485.305967][ T5919] usb 3-1: device descriptor read/8, error -71 [ 485.545060][ T5919] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 485.595711][ T5919] usb 3-1: device descriptor read/8, error -71 [ 485.657630][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 485.710159][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 485.748279][ T9977] veth0_to_bond: entered allmulticast mode [ 485.985502][ T5919] usb usb3-port1: unable to enumerate USB device [ 486.556091][ T5919] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 486.741623][ T5919] usb 2-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config [ 486.754847][ T5919] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.791580][ T5919] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 486.804854][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.822140][ T5919] usb 2-1: Product: syz [ 486.850504][ T5919] usb 2-1: Manufacturer: syz [ 486.862433][ T5919] usb 2-1: SerialNumber: syz [ 486.873445][ T5919] usb 2-1: config 0 descriptor?? [ 487.238571][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.278219][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.366860][ T978] usb 2-1: USB disconnect, device number 96 [ 488.565081][ T978] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 488.777123][ T978] usb 5-1: config 0 has no interfaces? [ 488.794602][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 488.805091][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.813097][ T978] usb 5-1: Product: syz [ 488.879238][ T978] usb 5-1: Manufacturer: syz [ 488.883904][ T978] usb 5-1: SerialNumber: syz [ 488.915745][ T978] usb 5-1: config 0 descriptor?? [ 489.012429][T10014] netlink: 'syz.1.1020': attribute type 5 has an invalid length. [ 489.225454][ T978] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 489.358654][T10010] program syz.4.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.415847][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 489.419854][ T978] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.419888][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.419910][ T978] usb 4-1: Product: syz [ 489.419926][ T978] usb 4-1: Manufacturer: syz [ 489.419942][ T978] usb 4-1: SerialNumber: syz [ 489.427829][ T978] usb 4-1: config 0 descriptor?? [ 489.463574][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.464585][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.638819][ T978] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 490.206231][T10038] tipc: Started in network mode [ 490.212078][T10038] tipc: Node identity 1e9efb398031, cluster identity 4711 [ 490.220638][T10038] tipc: Enabled bearer , priority 0 [ 490.326326][T10038] syzkaller0: MTU too low for tipc bearer [ 490.332632][T10038] tipc: Disabling bearer [ 490.414937][ T5920] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 490.585005][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 490.688574][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 490.701019][ T5920] usb 2-1: no configurations [ 490.711891][ T5920] usb 2-1: can't read configurations, error -22 [ 491.321895][ T978] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 491.343502][ T978] usb 4-1: USB disconnect, device number 104 [ 491.405284][T10047] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 491.414634][T10047] netlink: 'syz.0.1030': attribute type 29 has an invalid length. [ 491.435972][T10047] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1030'. [ 492.175872][T10056] ±ÿ: renamed from team_slave_1 [ 492.224860][ T5920] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 492.415457][ T2151] usb 5-1: USB disconnect, device number 90 [ 492.424967][ T5920] usb 2-1: device descriptor read/64, error -71 [ 492.704884][ T5920] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 492.865004][ T5920] usb 2-1: device descriptor read/64, error -71 [ 492.995174][ T978] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 492.995322][ T5920] usb usb2-port1: attempt power cycle [ 493.079402][ T5905] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 493.170007][ T978] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 493.186028][ T978] usb 4-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 493.194183][ T978] usb 4-1: Product: syz [ 493.199145][ T978] usb 4-1: Manufacturer: syz [ 493.203867][ T978] usb 4-1: SerialNumber: syz [ 493.235392][ T978] usb 4-1: config 0 descriptor?? [ 493.246778][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 493.257181][ T978] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 493.264424][T10078] openvswitch: netlink: Multiple metadata blocks provided [ 493.268535][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 493.291170][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.299688][ T5905] usb 5-1: Product: syz [ 493.303957][ T5905] usb 5-1: Manufacturer: syz [ 493.309571][ T5905] usb 5-1: SerialNumber: syz [ 493.320246][ T5905] usb 5-1: config 0 descriptor?? [ 493.404956][ T5920] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 493.434388][T10084] tipc: Can't bind to reserved service type 0 [ 493.449535][ T5920] usb 2-1: device descriptor read/8, error -71 [ 493.467385][T10083] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 493.471147][T10070] netlink: 372 bytes leftover after parsing attributes in process `syz.3.1037'. [ 493.474029][T10083] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.481831][T10083] vhci_hcd vhci_hcd.0: Device attached [ 493.496811][ T2151] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 493.533543][ T5905] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 493.551600][T10086] vhci_hcd: connection closed [ 493.551964][ T13] vhci_hcd: stop threads [ 493.561347][ T13] vhci_hcd: release socket [ 493.566300][ T13] vhci_hcd: disconnect device [ 493.655633][ T2151] usb 3-1: too many configurations: 253, using maximum allowed: 8 [ 493.664641][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.681459][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.700046][ T5920] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 493.709150][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.720120][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.734114][ T5920] usb 2-1: device descriptor read/8, error -71 [ 493.741139][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.751778][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.767697][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.778095][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.799493][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.811055][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.829542][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.840248][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.853903][ T5920] usb usb2-port1: unable to enumerate USB device [ 493.862265][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.873054][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.887494][ T2151] usb 3-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 493.898112][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 493.914172][ T2151] usb 3-1: string descriptor 0 read error: -71 [ 493.925538][ T2151] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.947021][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.969374][ T2151] usb 3-1: can't set config #1, error -71 [ 493.984548][ T2151] usb 3-1: USB disconnect, device number 75 [ 493.997825][ T978] gspca_sunplus: reg_r err -71 [ 494.002751][ T978] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 494.032606][ T978] usb 4-1: USB disconnect, device number 105 [ 494.092941][T10091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.102231][T10091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.118581][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1043'. [ 494.177273][ T5905] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 494.189737][ T5905] usb 5-1: USB disconnect, device number 91 [ 494.505937][ T31] INFO: task kworker/1:4:5833 blocked for more than 143 seconds. [ 494.513770][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 494.522492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.552329][ T31] task:kworker/1:4 state:D stack:21288 pid:5833 tgid:5833 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 494.588734][ T31] Workqueue: usb_hub_wq hub_event [ 494.608047][ T31] Call Trace: [ 494.611415][ T31] [ 494.614436][ T31] __schedule+0x16f5/0x4d00 [ 494.639882][ T31] ? schedule+0x165/0x360 [ 494.644318][ T31] ? __pfx___schedule+0x10/0x10 [ 494.654858][ T31] ? schedule+0x91/0x360 [ 494.659207][ T31] schedule+0x165/0x360 [ 494.663411][ T31] schedule_timeout+0x9a/0x270 [ 494.677546][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 494.683519][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.690798][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.697841][ T31] ? wait_for_completion+0x267/0x5d0 [ 494.703212][ T31] wait_for_completion+0x2bf/0x5d0 [ 494.708915][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 494.714630][ T31] i2c_del_adapter+0x581/0x6e0 [ 494.720504][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.733677][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 494.739327][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 494.744354][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 494.749472][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 494.754848][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 494.760615][ T31] usb_probe_interface+0x641/0xbc0 [ 494.765883][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 494.771638][ T31] really_probe+0x26a/0x9a0 [ 494.777037][ T31] __driver_probe_device+0x18c/0x2f0 [ 494.782385][ T31] driver_probe_device+0x4f/0x430 [ 494.787581][ T31] __device_attach_driver+0x2ce/0x530 [ 494.793017][ T31] bus_for_each_drv+0x251/0x2e0 [ 494.798020][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 494.804055][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 494.812040][ T31] __device_attach+0x2b8/0x400 [ 494.817128][ T31] ? __pfx___device_attach+0x10/0x10 [ 494.822546][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 494.828148][ T31] bus_probe_device+0x185/0x260 [ 494.833113][ T31] device_add+0x7b6/0xb50 [ 494.837724][ T31] usb_set_configuration+0x1a87/0x20e0 [ 494.843265][ T31] usb_generic_driver_probe+0x8d/0x150 [ 494.848822][ T31] usb_probe_device+0x1c1/0x390 [ 494.853711][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 494.859158][ T31] really_probe+0x26a/0x9a0 [ 494.863709][ T31] __driver_probe_device+0x18c/0x2f0 [ 494.869088][ T31] driver_probe_device+0x4f/0x430 [ 494.875004][ T31] __device_attach_driver+0x2ce/0x530 [ 494.880461][ T31] bus_for_each_drv+0x251/0x2e0 [ 494.885472][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 494.891417][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 494.897017][ T31] __device_attach+0x2b8/0x400 [ 494.901841][ T31] ? __pfx___device_attach+0x10/0x10 [ 494.911393][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 494.917861][ T31] bus_probe_device+0x185/0x260 [ 494.922889][ T31] device_add+0x7b6/0xb50 [ 494.927441][ T31] usb_new_device+0xa39/0x16c0 [ 494.932372][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 494.937665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.942906][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.948219][ T31] hub_event+0x2941/0x4a00 [ 494.952756][ T31] ? __pfx_hub_event+0x10/0x10 [ 494.957638][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.963412][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.969082][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.974891][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 494.981325][ T31] process_scheduled_works+0xade/0x17b0 [ 494.987412][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.993469][ T31] worker_thread+0x8a0/0xda0 [ 494.998329][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.004732][ T31] ? __kthread_parkme+0x7b/0x200 [ 495.009793][ T31] kthread+0x70e/0x8a0 [ 495.013909][ T31] ? __pfx_worker_thread+0x10/0x10 [ 495.019120][ T31] ? __pfx_kthread+0x10/0x10 [ 495.023752][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.030166][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.035527][ T31] ? __pfx_kthread+0x10/0x10 [ 495.040164][ T31] ret_from_fork+0x3fc/0x770 [ 495.044850][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.050024][ T31] ? __switch_to_asm+0x39/0x70 [ 495.054888][ T31] ? __switch_to_asm+0x33/0x70 [ 495.059690][ T31] ? __pfx_kthread+0x10/0x10 [ 495.064324][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.069490][ T31] [ 495.072608][ T31] [ 495.072608][ T31] Showing all locks held in the system: [ 495.081467][ T31] 1 lock held by khungtaskd/31: [ 495.086679][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 495.097867][ T31] 2 locks held by getty/5593: [ 495.102590][ T31] #0: ffff888030d3b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.112799][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 495.123035][ T31] 5 locks held by kworker/1:4/5833: [ 495.128336][ T31] #0: ffff8880222be548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.140150][ T31] #1: ffffc9000402fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.152151][ T31] #2: ffff888028423198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 495.161142][ T31] #3: ffff888063aae198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 495.170704][ T31] #4: ffff888063aab160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 495.180265][ T31] 4 locks held by udevd/5841: [ 495.185966][ T31] #0: ffff888078ddd1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 495.195079][ T31] #1: ffff88805b9dcc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 495.204738][ T31] #2: ffff88806e109f08 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 495.214474][ T31] #3: ffff888063aae198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 495.223976][ T31] [ 495.235058][ T31] ============================================= [ 495.235058][ T31] [ 495.243682][ T31] NMI backtrace for cpu 1 [ 495.243704][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 495.243721][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.243730][ T31] Call Trace: [ 495.243736][ T31] [ 495.243743][ T31] dump_stack_lvl+0x189/0x250 [ 495.243769][ T31] ? __wake_up_klogd+0xd9/0x110 [ 495.243788][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.243810][ T31] ? __pfx__printk+0x10/0x10 [ 495.243835][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 495.243855][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 495.243870][ T31] ? _printk+0xcf/0x120 [ 495.243889][ T31] ? __pfx__printk+0x10/0x10 [ 495.243905][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 495.243927][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 495.243946][ T31] watchdog+0xfee/0x1030 [ 495.243968][ T31] ? watchdog+0x1de/0x1030 [ 495.244003][ T31] kthread+0x70e/0x8a0 [ 495.244029][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.244055][ T31] ? __pfx_kthread+0x10/0x10 [ 495.244078][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.244099][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.244118][ T31] ? __pfx_kthread+0x10/0x10 [ 495.244135][ T31] ret_from_fork+0x3fc/0x770 [ 495.244158][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.244183][ T31] ? __switch_to_asm+0x39/0x70 [ 495.244197][ T31] ? __switch_to_asm+0x33/0x70 [ 495.244210][ T31] ? __pfx_kthread+0x10/0x10 [ 495.244227][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.244253][ T31] [ 495.244259][ T31] Sending NMI from CPU 1 to CPUs 0: [ 495.404447][ C0] NMI backtrace for cpu 0 [ 495.404465][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 495.404485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.404510][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 495.404541][ C0] Code: 03 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 35 21 00 f3 0f 1e fa fb f4 d8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 495.404556][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 495.404572][ C0] RAX: a77f4ccfd739c600 RBX: ffffffff81974d88 RCX: a77f4ccfd739c600 [ 495.404585][ C0] RDX: 0000000000000001 RSI: ffffffff8d982066 RDI: ffffffff8be28cc0 [ 495.404597][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 495.404609][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa104f0 [ 495.404622][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 495.404633][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 495.404648][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.404659][ C0] CR2: 00007f9791d80ab8 CR3: 0000000075c74000 CR4: 00000000003526f0 [ 495.404675][ C0] Call Trace: [ 495.404683][ C0] [ 495.404689][ C0] default_idle+0x13/0x20 [ 495.404705][ C0] default_idle_call+0x74/0xb0 [ 495.404723][ C0] do_idle+0x1e8/0x510 [ 495.404746][ C0] ? __pfx_do_idle+0x10/0x10 [ 495.404770][ C0] cpu_startup_entry+0x44/0x60 [ 495.404787][ C0] rest_init+0x2de/0x300 [ 495.404805][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 495.404829][ C0] start_kernel+0x47d/0x500 [ 495.404849][ C0] x86_64_start_reservations+0x24/0x30 [ 495.404870][ C0] x86_64_start_kernel+0x143/0x1c0 [ 495.404891][ C0] common_startup_64+0x13e/0x147 [ 495.404918][ C0] [ 495.405535][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 495.405555][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 495.405583][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.405599][ T31] Call Trace: [ 495.405609][ T31] [ 495.405620][ T31] dump_stack_lvl+0x99/0x250 [ 495.405659][ T31] ? __asan_memcpy+0x40/0x70 [ 495.405692][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.405728][ T31] ? __pfx__printk+0x10/0x10 [ 495.405768][ T31] panic+0x2db/0x790 [ 495.405809][ T31] ? __pfx_panic+0x10/0x10 [ 495.405841][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 495.405867][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 495.405908][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 495.405940][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 495.405977][ T31] watchdog+0x102d/0x1030 [ 495.406012][ T31] ? watchdog+0x1de/0x1030 [ 495.406061][ T31] kthread+0x70e/0x8a0 [ 495.406094][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.406124][ T31] ? __pfx_kthread+0x10/0x10 [ 495.406152][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.406181][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.406212][ T31] ? __pfx_kthread+0x10/0x10 [ 495.406240][ T31] ret_from_fork+0x3fc/0x770 [ 495.406273][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.406312][ T31] ? __switch_to_asm+0x39/0x70 [ 495.406335][ T31] ? __switch_to_asm+0x33/0x70 [ 495.406357][ T31] ? __pfx_kthread+0x10/0x10 [ 495.406384][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.406425][ T31] [ 495.741125][ T31] Kernel Offset: disabled [ 495.745496][ T31] Rebooting in 86400 seconds..