last executing test programs: 3m9.617756066s ago: executing program 0 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES64=r0], 0xd4}}, 0x4001) 3m9.357114389s ago: executing program 0 (id=73): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xfd, 0x32}}}}}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x2, 0x2, 0x61, 0x4, 0x6, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 3m7.780856516s ago: executing program 0 (id=79): prlimit64(0x0, 0x5, &(0x7f0000000080)={0x101, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00"], 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="05000000010000", 0x7) r1 = socket(0x10, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000180)="ca973472804300680c71b4d49d2e5a5b5178f768742c50796d3ebc33f40aeb864ea563b349665bafe856432cbf51b9afe9ea29a3c1ea0339ef9762079d3a6d6e7ce71fbe2d25eb6cf062199376e3dece1de13c357c57766fb1b7b3739dfd2dd3400dadaccb561b0595ea390a0cee444b8d4f333adb828dbb222b8a6e556c36311bc817b44a829cd88c344ea16ea4ad804db23b69306fe69de537ded01dc89a978561a34a7309391bbd78f8741ae392256e149a9eab10d6ccdb69cbf4d70dbb88017e85ecdc01ff3914b4f81b3277081728de9e76", 0xd4, 0x20048880, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000401000/0x2000)=nil, 0x2000}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 3m6.532759259s ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x203, &(0x7f0000000240)={[{@memory_recursiveprot}]}) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) fanotify_mark(r0, 0x4, 0x1010, r0, &(0x7f0000000000)='./file0\x00') r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xc8, 0x20, {0xdc, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x8f}}, @wr_drn={0x68, 0x20, {0x7, 0x1ff}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xef, 0xffffffff, 0x1, 0x3}}, @nested_load_code={0x12e, 0x59, {0x3, "b8010000000f01c1400f082e0f01d566b830018ec8f36565650f078f493899a600000000b9800000c00f3235000800000f30410f01f80f01df420fc7ab00080000"}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x5c, 0x4, 0x519, 0x1}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x5d, 0x5, 0x100, 0x80000001}}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x1b9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3m6.517143956s ago: executing program 0 (id=83): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)}) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043e0003"], 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40008c1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x7000, 0x0, 0x77, 0x8, 0x0, 0xcb, 0x2, 0x0, 0x8, 0x6, 0x93}, {0xe000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x20, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x26000, 0x9, 0x1, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x71000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0xeeee0000, 0x0, 0x78, 0x5, 0x7, 0x2, 0x1c, 0xa3, 0xdf, 0x5}, {0xeeee8000, 0x80a0000, 0xb, 0x4, 0x0, 0x0, 0x7, 0x20, 0x0, 0x0, 0xff}, {0xffff1000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0xfc, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0xddf8ffdb, 0x0, 0x6000, 0x120, 0x1, 0xb800, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) 3m5.585479226s ago: executing program 0 (id=86): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000626d42"], 0x90) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000100)={0x4, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x200000b2, {{0xa, 0x4e21, 0x1e, @private1, 0xed2}}, 0x1, 0x6, [{{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xdef7}}, {{0xa, 0x4e20, 0x6, @private2}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x67f9}}, {{0xa, 0x4e24, 0x7, @loopback}}, {{0xa, 0x4e26, 0xff, @local, 0x6}}, {{0xa, 0x4623, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}}]}, 0x390) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001080)=""/4065, &(0x7f0000001040)=0xfe1) 3m5.298655294s ago: executing program 32 (id=86): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000000000000a004e2200000001ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000626d42"], 0x90) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000100)={0x4, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x200000b2, {{0xa, 0x4e21, 0x1e, @private1, 0xed2}}, 0x1, 0x6, [{{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xdef7}}, {{0xa, 0x4e20, 0x6, @private2}}, {{0xa, 0x4e23, 0x4, @mcast2, 0x67f9}}, {{0xa, 0x4e24, 0x7, @loopback}}, {{0xa, 0x4e26, 0xff, @local, 0x6}}, {{0xa, 0x4623, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}}]}, 0x390) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001080)=""/4065, &(0x7f0000001040)=0xfe1) 1m27.531148782s ago: executing program 4 (id=738): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x22043, 0x1e2) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) (async) fchmod(0xffffffffffffffff, 0x8) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x800000000000, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x89ef8], [0x207], [0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3d0f}, {}, {}, {}, {0xfffffc00}], '\x00', 0x1000}) 1m27.469753745s ago: executing program 4 (id=739): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x11, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="00773691", 0x7700) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb005}, 0x4) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x116) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x116) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x11) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x11) ioctl$TCSETS(r6, 0x8910, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x7000, 0x0, 0x77, 0x8, 0x0, 0xcb, 0x2, 0x0, 0x8, 0x6}, {0xe000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x47, 0xc4, 0x0, 0x1, 0x46, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000, 0xfffd}, 0x80010018, 0x0, 0x0, 0x120, 0xe, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb579}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56525009}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ecfee5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5afec1b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa664}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406a91a4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe9b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb579}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56525009}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ecfee5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5afec1b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa664}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406a91a4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40212f0000002f88a2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r9, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40212f0000002f88a2"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r8, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r8) 1m25.948622902s ago: executing program 4 (id=753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c000780060004401c020000060005400000000008000640"], 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000740)={@void, @val={0x0, 0x4, 0x4, 0x7ff, 0x6, 0xb14}, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val, {0x8100, 0x2, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0xffff9}, {0xe40, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0xfff}, {0x1}], @ipv6=@generic={0x1, 0x6, "46741e", 0x146, 0x29, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x3c, 0xc, 0x2, 0x2c, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @dev={0xfe, 0x80, '\x00', 0x38}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @hopopts={0x73, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim, @enc_lim={0x4, 0x1, 0x7d}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xb7}, @ra={0x5, 0x2, 0x3}, @pad1]}, @srh={0x4, 0x4, 0x4, 0x2, 0x2, 0x20, 0x8000, [@mcast2, @ipv4={'\x00', '\xff\xff', @remote}]}], "9c3763db2f2a2ed6ae59577ae2e1628f75533276c2b195ee948e02d78d8ff9a8b087a45c1828b20ba2fc088a6e06a279e7d2bf47cdafa2c6c6423591cc5b5a52f88495c6f425b1b4291cb503933a60c36fea254f69c759b1ad6e84d2f4336418408e2a7742b00c5f52f6b90855408dad5f39e822fd83849390058debc5b4a02178b30b9d25b74b5c082155565cc0"}}}}}}}, 0x1aa) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000800) 1m25.871038327s ago: executing program 4 (id=755): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @loopback}, {0x1, @remote}, 0x40, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'syzkaller0\x00'}) (async) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000bdc000/0x4000)=nil) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000280)={0x550, 0xa0, 0x30, 0x78, 0x2e, 0xffffffff, 0x20, 0x2, {0x72, 0x40000000, 0x1}, {0x9, 0x5, 0x1}, {0x4, 0x5}, {0x7f, 0x80000000}, 0x2, 0x10, 0x587, 0x3, 0x1, 0x5, 0x82, 0x1, 0x8, 0x4, 0x97c, 0x8, 0x10, 0x100, 0x1, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa4, 0x1, 0x8, 0x401, 0x0, 0x0, {0x8, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf2e9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.748641729s ago: executing program 4 (id=756): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8840) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x8040) (async) bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x2, {0x0, 0xf0}, 0xfe}, 0x18) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000000)={'wg1\x00'}) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100001}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) 1m24.95065591s ago: executing program 4 (id=766): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x20000000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400001) sendfile(r0, r1, 0x0, 0x101) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000180)={0x0, 0x1, 0x6, '\x00', &(0x7f0000000140)}) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000200)={0x101, 0x55, &(0x7f00000001c0)="ce5013f4f71c52adaab4018e2bd7d077f547ca44d1089d3b8f070b32af80bd4f2dd0784901dc1d5f8fc3d4570e1b2655331276832012d244da5681263ae5", {0x7fffffff, 0x3, 0x56595559, 0x4, 0x6ce, 0xffffffff, 0x0, 0x8}}) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_clone3(&(0x7f0000000a80)={0x40000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=0x0, {0x3f}, &(0x7f0000000900)=""/138, 0x8a, &(0x7f00000009c0)=""/85, &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, {r4}}, 0x58) getresgid(&(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) sendmmsg$unix(r4, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)="bef199fad45747ae53823fd28dde8c7d16f51b08bfb6cd82744e07eeae191675f4f522376ebe1351b62a6ac097ed294a0675fad57f59949d3df2f4cc32cb6fe825ed9d0a6c440f75aeb844f23b0ba7db3fd85c6091fa9898943bfa35bb", 0x5d}, {&(0x7f00000003c0)="a2bc7028a18dba13101b660402d4697139389c11de1a7050f57117610f26c1b9e4812a2886a404b3677c2660471e491a0b38cb51d4b6555963e5665ef649c1994dc5bb9e099e154844c3bc00eeadc7dd8c854827376f7c7fb4d68a197f333232ba4a4fd02000c1f33c1bcc6dc55f94b82541db", 0x73}, {&(0x7f0000000440)="04d4b574ebb1b968812fe0ce6d5aeef9bc93647b4eddc1ef9e4741a65b7e0bdc20b76d3d6d7cdc85e2c72a39f84dae2e6de6e22899c5f6aebf8783741673f496896ae7bf293dcae5c6183e59cd6df692eee2b5721eaa8e94a52f32f87eaaaaae49e046c10fa1a556886792d699d5cbed1a3f", 0x72}, {&(0x7f00000004c0)="fe1e73b0225715be58c44318d91dd1b58c7df1fe245ebeea8294fd146cdd225573b306c89b511ccc8ffe8020482c6e97a84f40a388f70eca07b754f2b39968c5ad0b1a25c824c137ebe71919ee9d0db9f34b10745122a2f512b6c1120d704406be547fe2131874f1ed58845c4dea73d2adc37c4f7225bbca58be767f2908b78a0fd31ac623470fc3bbe7da37c7310a", 0x8f}], 0x4, 0x0, 0x0, 0x20008810}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="27c3ccbba6d06a2fd61af7470da14fe3fffd97b50b048f7a74e81341f2719b589aac54c16e513b70fe7adb10707e98437de660a599c6d483f2e42cc1f68e01e0d222f11222b03640648f0e07e5ad7081c3f0d786ab6feabf69a4c02cd0229bfa2f23d06f14f01092af0cf16c5b5ca4426b0a6e15197ac7aa39628088bbe410038cca7bbd9174533b4e12d2d772972f2e95798aa9fef1e34a614cf130a68e34f8787a024ab5c1cca32ff78fc7a7e200f5fff3ebb4297f02860c4f59a6486b7ac22bb1f385d088", 0xc6}, {&(0x7f0000000740)="12976d685077d5822cee88abc2cda9722fc6749b20189a3695d3aba47237495fec8d9f44586ab4feacd7881f3120c993b9eeadbab109b2ffb724bee4270ddf17a2e6be3ea0923a74eea15940eff8a29e5299ac1d97bace17312f52005bd5b07b36dc505cbedf61b82e6579034a27a4e3024e90855b2f51acff16", 0x7a}, {&(0x7f00000007c0)="21c37daf78913d", 0x7}], 0x3, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}], 0x20, 0x40000}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c80)="7b8bf86b358c536b299d5a60741a91e748d0ac985c6f7de6fd174a731301978421bb37c89ede2ec8f34d45a19c189c149b5bc4db00f9c7", 0x37}, {&(0x7f0000000cc0)="e59776ca85fd65e25fdc61cd24b45b5ef86ddb5d1f6379da2badfd4cb6c473fdfa2a1444d68ba5c65ff2c0705e32e1ca3c33d614666374efd031114e55b7c361c7150b47b6181d7ca264a8a78de8de547662c316bc8ab2fd0e5ac99e411e3415cb48f9278a392cd6993b401225dd1d1e81b04980ae61f7295b238a0b93879c2c110323ac055b14cb531d9336284a9f5bc306501e308200177d15f0c2823ffdb018a51f9a627f034ae757c5c8185488d7bc734369", 0xb4}, {&(0x7f0000000d80)="e83bc4fdb961c189451b5eeb50828cf79ed8c60904fbc45ca48c8c6a563053f8a85c1b0730bc763c98b24a7006ca9dd8b42c093d9eda87541331c43bbd3af904aa771bd8a16bf844b0deb9f4d767aee672ce5b0a2f8e40a0ceb2d77ac12bd1ef9589ed115a469eb7a6", 0x69}, {&(0x7f0000000e00)="7f8d16f340820dadf24baaaf2726792d9b5125e54c0fca6c829b1026679ac5d0698f79fbe15821a9e6d082a54c0c8ae2b4bae6de9118c27c42", 0x39}, {&(0x7f0000000e40)="89f9e99a0d76a818514167c57d9dedf6bc34fd68c3bb4427da904b45f311dc01db02a8be29985048b568fbb6c47f8128f66d00fbc64b57f5c0e9ebd7614e5a79f25b1fdc009a665f51743cf4527bb0a576b462cdc47d65ce94cf43861774176ac84bc39406e6891bfa258031c089d12cbcfe998d2d6c07d274e32af0560ba27c5e653049034407de9bfdc6039ad9ab21907cdcae752e0414b1e1b1a4abc60caa018217adf9fa613e3aa651ab773a9df2f266eed7f2c0fea0ff0b5093", 0xbc}, {&(0x7f0000000f00)="22be4e4a9e29f8a75de801be7a65c6703c110788d4cb66d5e7a0d9de7d2bd949c1fa9b3a7bc51f72e11c14aea99b4b8f5d6b0836de6c7d2ad4bfbd581a70fcf6378be3835468b220c93e6e7990a0f73981b4f6d446b970ef8343fe3fb37c4110eaf0e749413f4f610b87cc50bba325f3a63e0ed8bd248c0c3f18e779490c7c43e2ef0b7848b2de69d397249292654a2caff0541f36998b4c646eab3edb3570b0c570beae8a58fdaa3b68d01055", 0xad}], 0x6}}], 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x140c, 0x8, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x200080c0}, 0x10) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='team0\x00'}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) write$vhost_msg_v2(r7, &(0x7f0000001400)={0x2, 0x0, {&(0x7f00000012c0)=""/170, 0xaa, &(0x7f0000001380)=""/87, 0x3, 0x2}}, 0x48) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000001480)) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000014c0)={0x8, {0x3, 0x2, 0xfffff418}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001640)=@x86={0x9, 0x8, 0x9, 0x0, 0x5, 0x80, 0xfe, 0x5, 0xfe, 0x3, 0xa0, 0x77, 0x0, 0x34, 0x4, 0x7, 0x5, 0x3, 0x3, '\x00', 0x0, 0xffffffff}) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000001680)={0x0, 0x1, 0xff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r9, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x14, 0x1, "c5ad7372ce56e02362fc6a64ea42cdaa"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), 0xffffffffffffffff) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001880), 0x98800, 0x0) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001a80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x88, r12, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x25b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2d716b8b548143e7}, 0x244590dc6c12328d) 1m24.765821592s ago: executing program 33 (id=766): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x20000000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400001) sendfile(r0, r1, 0x0, 0x101) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$VIDIOC_G_EDID(r4, 0xc0285628, &(0x7f0000000180)={0x0, 0x1, 0x6, '\x00', &(0x7f0000000140)}) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000200)={0x101, 0x55, &(0x7f00000001c0)="ce5013f4f71c52adaab4018e2bd7d077f547ca44d1089d3b8f070b32af80bd4f2dd0784901dc1d5f8fc3d4570e1b2655331276832012d244da5681263ae5", {0x7fffffff, 0x3, 0x56595559, 0x4, 0x6ce, 0xffffffff, 0x0, 0x8}}) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_clone3(&(0x7f0000000a80)={0x40000, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=0x0, {0x3f}, &(0x7f0000000900)=""/138, 0x8a, &(0x7f00000009c0)=""/85, &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x3, {r4}}, 0x58) getresgid(&(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) sendmmsg$unix(r4, &(0x7f0000001040)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)="bef199fad45747ae53823fd28dde8c7d16f51b08bfb6cd82744e07eeae191675f4f522376ebe1351b62a6ac097ed294a0675fad57f59949d3df2f4cc32cb6fe825ed9d0a6c440f75aeb844f23b0ba7db3fd85c6091fa9898943bfa35bb", 0x5d}, {&(0x7f00000003c0)="a2bc7028a18dba13101b660402d4697139389c11de1a7050f57117610f26c1b9e4812a2886a404b3677c2660471e491a0b38cb51d4b6555963e5665ef649c1994dc5bb9e099e154844c3bc00eeadc7dd8c854827376f7c7fb4d68a197f333232ba4a4fd02000c1f33c1bcc6dc55f94b82541db", 0x73}, {&(0x7f0000000440)="04d4b574ebb1b968812fe0ce6d5aeef9bc93647b4eddc1ef9e4741a65b7e0bdc20b76d3d6d7cdc85e2c72a39f84dae2e6de6e22899c5f6aebf8783741673f496896ae7bf293dcae5c6183e59cd6df692eee2b5721eaa8e94a52f32f87eaaaaae49e046c10fa1a556886792d699d5cbed1a3f", 0x72}, {&(0x7f00000004c0)="fe1e73b0225715be58c44318d91dd1b58c7df1fe245ebeea8294fd146cdd225573b306c89b511ccc8ffe8020482c6e97a84f40a388f70eca07b754f2b39968c5ad0b1a25c824c137ebe71919ee9d0db9f34b10745122a2f512b6c1120d704406be547fe2131874f1ed58845c4dea73d2adc37c4f7225bbca58be767f2908b78a0fd31ac623470fc3bbe7da37c7310a", 0x8f}], 0x4, 0x0, 0x0, 0x20008810}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="27c3ccbba6d06a2fd61af7470da14fe3fffd97b50b048f7a74e81341f2719b589aac54c16e513b70fe7adb10707e98437de660a599c6d483f2e42cc1f68e01e0d222f11222b03640648f0e07e5ad7081c3f0d786ab6feabf69a4c02cd0229bfa2f23d06f14f01092af0cf16c5b5ca4426b0a6e15197ac7aa39628088bbe410038cca7bbd9174533b4e12d2d772972f2e95798aa9fef1e34a614cf130a68e34f8787a024ab5c1cca32ff78fc7a7e200f5fff3ebb4297f02860c4f59a6486b7ac22bb1f385d088", 0xc6}, {&(0x7f0000000740)="12976d685077d5822cee88abc2cda9722fc6749b20189a3695d3aba47237495fec8d9f44586ab4feacd7881f3120c993b9eeadbab109b2ffb724bee4270ddf17a2e6be3ea0923a74eea15940eff8a29e5299ac1d97bace17312f52005bd5b07b36dc505cbedf61b82e6579034a27a4e3024e90855b2f51acff16", 0x7a}, {&(0x7f00000007c0)="21c37daf78913d", 0x7}], 0x3, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}], 0x20, 0x40000}}, {{&(0x7f0000000c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c80)="7b8bf86b358c536b299d5a60741a91e748d0ac985c6f7de6fd174a731301978421bb37c89ede2ec8f34d45a19c189c149b5bc4db00f9c7", 0x37}, {&(0x7f0000000cc0)="e59776ca85fd65e25fdc61cd24b45b5ef86ddb5d1f6379da2badfd4cb6c473fdfa2a1444d68ba5c65ff2c0705e32e1ca3c33d614666374efd031114e55b7c361c7150b47b6181d7ca264a8a78de8de547662c316bc8ab2fd0e5ac99e411e3415cb48f9278a392cd6993b401225dd1d1e81b04980ae61f7295b238a0b93879c2c110323ac055b14cb531d9336284a9f5bc306501e308200177d15f0c2823ffdb018a51f9a627f034ae757c5c8185488d7bc734369", 0xb4}, {&(0x7f0000000d80)="e83bc4fdb961c189451b5eeb50828cf79ed8c60904fbc45ca48c8c6a563053f8a85c1b0730bc763c98b24a7006ca9dd8b42c093d9eda87541331c43bbd3af904aa771bd8a16bf844b0deb9f4d767aee672ce5b0a2f8e40a0ceb2d77ac12bd1ef9589ed115a469eb7a6", 0x69}, {&(0x7f0000000e00)="7f8d16f340820dadf24baaaf2726792d9b5125e54c0fca6c829b1026679ac5d0698f79fbe15821a9e6d082a54c0c8ae2b4bae6de9118c27c42", 0x39}, {&(0x7f0000000e40)="89f9e99a0d76a818514167c57d9dedf6bc34fd68c3bb4427da904b45f311dc01db02a8be29985048b568fbb6c47f8128f66d00fbc64b57f5c0e9ebd7614e5a79f25b1fdc009a665f51743cf4527bb0a576b462cdc47d65ce94cf43861774176ac84bc39406e6891bfa258031c089d12cbcfe998d2d6c07d274e32af0560ba27c5e653049034407de9bfdc6039ad9ab21907cdcae752e0414b1e1b1a4abc60caa018217adf9fa613e3aa651ab773a9df2f266eed7f2c0fea0ff0b5093", 0xbc}, {&(0x7f0000000f00)="22be4e4a9e29f8a75de801be7a65c6703c110788d4cb66d5e7a0d9de7d2bd949c1fa9b3a7bc51f72e11c14aea99b4b8f5d6b0836de6c7d2ad4bfbd581a70fcf6378be3835468b220c93e6e7990a0f73981b4f6d446b970ef8343fe3fb37c4110eaf0e749413f4f610b87cc50bba325f3a63e0ed8bd248c0c3f18e779490c7c43e2ef0b7848b2de69d397249292654a2caff0541f36998b4c646eab3edb3570b0c570beae8a58fdaa3b68d01055", 0xad}], 0x6}}], 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x140c, 0x8, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x200080c0}, 0x10) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='team0\x00'}) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) write$vhost_msg_v2(r7, &(0x7f0000001400)={0x2, 0x0, {&(0x7f00000012c0)=""/170, 0xaa, &(0x7f0000001380)=""/87, 0x3, 0x2}}, 0x48) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000001480)) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000014c0)={0x8, {0x3, 0x2, 0xfffff418}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001640)=@x86={0x9, 0x8, 0x9, 0x0, 0x5, 0x80, 0xfe, 0x5, 0xfe, 0x3, 0xa0, 0x77, 0x0, 0x34, 0x4, 0x7, 0x5, 0x3, 0x3, '\x00', 0x0, 0xffffffff}) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000001680)={0x0, 0x1, 0xff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x44, r9, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x14, 0x1, "c5ad7372ce56e02362fc6a64ea42cdaa"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), 0xffffffffffffffff) r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001880), 0x98800, 0x0) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001a80)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x88, r12, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x25b}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2d716b8b548143e7}, 0x244590dc6c12328d) 12.647682514s ago: executing program 3 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x60, r3, 0x1, 0x101, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @mcast2, 0xbc2}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2a) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 'veth0_macvtap\x00'}) 12.465019964s ago: executing program 3 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2271, 0x0) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000340)={'macsec0\x00', 0xffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, 0x0, 0x0) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r5, 0x40285881, &(0x7f0000000080)={r5, 0x0, 0x6, 0x0, 0x1, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x1, 0x50, &(0x7f0000000740)="60de8165", 0x4) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x2000000, 0x5e}) (async) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f0000000100)) 11.990901786s ago: executing program 3 (id=1273): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x10001}]) io_pgetevents(r2, 0x1, 0x1, &(0x7f0000000240)=[{}], 0x0, 0x0) shutdown(r1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c0004"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 11.811674045s ago: executing program 3 (id=1274): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) splice(r5, 0x0, r4, 0x0, 0xffff, 0x2) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x8, 0x8000, 0x0, 0x0}], 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) gettid() (async) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) (async) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r1, 0xaa, 0x84}, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)="d2cc40927d99f4621cfbc1762d13ce0ad0ddd8c4ffd9ae62e455aafed6d13cd989a318c5f33210964053fa12e5ebc72134101b64ae9da45a9cfae5512587f61588c931f8827278bdc84470ed6109e37501328bdd941b224166460781e81bfda814320c1386d91245f6ac01f3c922f802e5b91dcaf7b26dfa8cf4c2d9dadeeb8e8767b157f7a0bc7034d819407e7c5a74cb8831225952dd11a02a2b0116819a0fced27c789efafe9fb0bb", &(0x7f00000002c0)=""/132) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, 0x0) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4000009a, 0x0, 0x8}]}) 8.78231372s ago: executing program 3 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000fffe15000300686173683a69702c706f1bbd0040ae0c37fbe8c116af9e9c43fe72742c6e657400000000050004000000000009000200737978300000000014000780080012409effffdd08001340000000020500050714ede7d5883385b2c235396c000a0000000500010006000000"], 0x64}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x1000]}, &(0x7f00000000c0), 0x8) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x6a6, 0x0, 0x3}]}) 8.59317849s ago: executing program 3 (id=1287): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000d40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)="c2000000000008800000000088fb", 0xe}], 0x1}, 0x20004880) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = gettid() rt_sigqueueinfo(r3, 0x20, &(0x7f0000002d00)={0x32, 0xffffffff, 0x58}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80fe) read$char_usb(r4, &(0x7f00000000c0)=""/54, 0x1d) 7.468759135s ago: executing program 1 (id=1291): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200081, 0x32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_USERDATA={0x2f, 0xc, "16bd7debf8c1a3b4bed2336f9e0c043aa9c7b1d6c520dc78a5f519a3a43325521de3d60b5cddec2d8935b3"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x14}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x140, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xa9, 0x6, "f069f98c739086227d6c795f3e2dd865255fd2d07bec2dd13a1b343cd51b7e6323b1876ae86424b026df4e9b81496b5ae625ff9df9d808b2758b4dd26c810d2ec8f65db4c18d4e4c0a4745372385d14632bee9d44c05718c65d232bde75d9b966fa265a985cd200f20009c35558f42fef52d3f03c18ddaa1663ad447b97c522c8fc93ceaf72531668be5aea4180300744c6fd758bcd446f87ac381420aa85543327b014497"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x66, 0x6, "5e1fad7881c7de6bfab86613be91e63e8da93fd89a03157b838552cb3910d5899f7f1731c4948b2a91874d01816def2eb1358f536e6cf3b15e67b5466b904e597d814cd07c7123e7691b2cf75417683c230142bf4052463d3588e7bf27ce26875eee"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x82, 0x6, "49616b55132c8440ce78c9ce674093fa49a9cece9e1f7ef2e95ad470615327c5e3d1922a3ba6d6e1998e37af9f302caf3f31b7d08127443ce9cb3e5c4a638dc3c8afe7b6234d5e29c421a46e9f43644e564f3cb81b2e9e986fa825dde9d9eb1afc7ed7858b12f720c6068badc4f5339c9e1dafedab605789b47c7f8dd4b9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x374}}, 0x4048011) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000540)=0x8) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f00000005c0)={{r4}, "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"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000015c0)={0x0, 'geneve0\x00', {}, 0x6}) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r6, &(0x7f0000001ac0)={&(0x7f0000001600)=@qipcrtr, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/210, 0xd2}, {&(0x7f0000001780)=""/160, 0xa0}, {&(0x7f0000001840)=""/117, 0x75}, {&(0x7f00000018c0)=""/141, 0x8d}, {&(0x7f0000001980)=""/7, 0x7}], 0x5, &(0x7f0000001a40)=""/99, 0x63}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001b00), 0x802, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b40), 0x90000, 0x0) getdents(r3, &(0x7f0000001b80)=""/223, 0xdf) r8 = open$dir(&(0x7f0000001c80)='./file0\x00', 0x149103, 0x0) mkdirat(r8, &(0x7f0000001cc0)='./file0\x00', 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000001d00)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001d40)={0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000001dc0)={0xfffffff9, "e433561f0ec026d4f403ea07118e39e98ac1e7af9052ba2127edc797e852809a", 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001e00)={r9, 0x0, r10, 0x80}) fcntl$setlease(r7, 0x400, 0x0) symlinkat(&(0x7f0000001e40)='./file0\x00', r3, &(0x7f0000001e80)='./file0\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000001ec0)=0x488, 0x4) r11 = syz_io_uring_setup(0x3636, &(0x7f0000001f00)={0x0, 0x5d61, 0x2, 0x2, 0x311}, &(0x7f0000001f80), &(0x7f0000001fc0), &(0x7f0000002000)) r12 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close_range(r11, r12, 0x2) 7.232081779s ago: executing program 1 (id=1293): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x20200) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) syz_usb_connect$uac1(0x6, 0xdb, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x7f, 0x20, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x22}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0x6, "9b"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x5, 0x1, 0x7, 0x5, 0x80, 0x8}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0xf4, "81"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x80}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x40, 0xe, 0xd, "31d3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x5b, "e9fdb6"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x80, 0x101, 0x3, "9bfc"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0xfd, 0x8, "d3d2d3", "571aa3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x29, 0x10, 0x8, 0xd}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x80, 0x4, 0xff, 0xa}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0x5, 0x0, "91cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x4, 0x4, {0x7, 0x25, 0x1, 0x8, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x20, 0x9, 0x48, 0xff, 0x7}, 0x33, &(0x7f00000001c0)={0x5, 0xf, 0x33, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x0, 0x3ff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x3, 0x7ff}, @ssp_cap={0x20, 0x10, 0xa, 0xfc, 0x5, 0xc, 0xf00, 0x5, [0x0, 0xff0030, 0x3f3f, 0xff00cf, 0xf]}]}, 0x2, [{0x1d, &(0x7f0000000200)=@string={0x1d, 0x3, "b78d6eb68be1ee4d6d00b166fe40b90ccf5134c54addc4e29fc0b0"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42c}}]}) 4.003980208s ago: executing program 1 (id=1309): syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4ad80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x2d) fsmount(0xffffffffffffffff, 0x0, 0x1) 2.892734219s ago: executing program 5 (id=1314): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000300)={r2}) socket(0xa, 0x3, 0xff) (async) r8 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r8, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.940775849s ago: executing program 2 (id=1317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000740)={@void, @val={0x0, 0x4, 0x4, 0x7ff, 0x6, 0xb14}, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val, {0x8100, 0x2, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0xe40, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0xfff}, {0x1}], @ipv6=@generic={0x1, 0x6, "46741e", 0x11e, 0x29, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x3c, 0xc, 0x2, 0x2c, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @dev={0xfe, 0x80, '\x00', 0x38}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @srh={0x4, 0x4, 0x4, 0x2, 0x2, 0x20, 0x8000, [@mcast2, @ipv4={'\x00', '\xff\xff', @remote}]}], "9c3763db2f2a2ed6ae59577ae2e1628f75533276c2b195ee948e02d78d8ff9a8b087a45c1828b20ba2fc088a6e06a279e7d2bf47cdafa2c6c6423591cc5b5a52f88495c6f425b1b4291cb503933a60c36fea254f69c759b1ad6e84d2f4336418408e2a7742b00c5f52f6b90855408dad5f39e822fd83849390058debc5b4a02178b30b9d25b74b5c082155565cc0"}}}}}}}, 0x17e) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000800) 1.218141575s ago: executing program 5 (id=1318): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x980, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=r1]) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r1, &(0x7f00000001c0)) setfsuid(r2) setfsuid(0xee00) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x980, 0x0) (async) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=r1]) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r1, &(0x7f00000001c0)) (async) setfsuid(r2) (async) setfsuid(0xee00) (async) 1.136593748s ago: executing program 5 (id=1319): socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 996.445806ms ago: executing program 5 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x51e, 0x80000) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) ioctl$I2C_RETRIES(r1, 0x701, 0x401) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000003c40)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) 784.876721ms ago: executing program 1 (id=1321): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0xfffffffffffffd69, 0x60aa, &(0x7f0000000200)={0x77359400}) 784.483653ms ago: executing program 5 (id=1322): syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000500)={0xffffffffffffff81, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa, 0x1f6e3, 0x2bffa3}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0x8}, 0x1c) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x1, 0x40002) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000b40)={0x2, [[0x1, 0xd, 0x6, 0x6, 0x4, 0xfffffff8, 0x9, 0x8], [0x8515, 0x0, 0x80, 0xba85, 0xb, 0x952, 0x401, 0x32de], [0x81, 0x0, 0x3, 0x0, 0x7, 0xf, 0x0, 0x9]], '\x00', [{0x4, 0x5, 0x0, 0x1}, {0x9, 0x4, 0x0, 0x1, 0x0, 0x1}, {0xfffffff7, 0x40, 0x1, 0x0, 0x1}, {0x1, 0x20010001, 0x0, 0x0, 0x0, 0x1}, {0xb, 0xfffffedb}, {0x4, 0x2, 0x1, 0x1, 0x1}, {0x4, 0xff, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x8001, 0x0, 0x1}, {0x8, 0xd3, 0x0, 0x0, 0x1}, {0x7ff, 0xfffffc00, 0x1, 0x1, 0x1}, {0x633d, 0xffffffff}], '\x00', 0xffffc283}) (async) listen(r2, 0x2) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x131002, 0x0) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_debug_messages', 0x88042, 0x7f) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x10001, 0x2, 0x4, 0x40, 0x400, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast1, @private=0xa010100}}}], 0x20}, 0x0) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000280)={0xc000003, 0xf, &(0x7f0000000080)=[0x1000020, 0x400b, 0x2a17438d, 0x89a1, 0x0, 0xfffffffb, 0xa, 0x3, 0x26, 0x5, 0x6, 0x0, 0x6, 0x8811, 0x10], 0x1, 0x4000007}) (async) r9 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000180)='so_v\x13S\xfd\x8f\x90\xb3 7\xb0\xc1\x8e%_y\xe6\x1e&\xd6c\x17\xcfe#\x88\xc6\xa6k\'\x00\x00\x00\x003\xe6\x86\xc6\xfd\xe7\xb8\t\x94_\x9b\xe6\xc9\xad\xb4X\xd55y', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 726.095862ms ago: executing program 2 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x2, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) lseek(r0, 0x2, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) (async) 678.082018ms ago: executing program 1 (id=1324): socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = fanotify_init(0x1a, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r4, 0x641, 0x1028, r5, 0x0) fanotify_mark(r4, 0x1, 0x48000038, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 469.008204ms ago: executing program 5 (id=1325): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/93, 0x5d) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10) syz_usb_connect(0x6, 0x573, &(0x7f0000000680)={{0x12, 0x1, 0x1, 0x8c, 0xf9, 0xf1, 0x20, 0x867, 0x9812, 0xa22a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x561, 0x4, 0x7, 0x95, 0x70, 0x50, "", [{{0x9, 0x4, 0x17, 0x0, 0x10, 0x19, 0xb5, 0xc8, 0x1, [@hid_hid={0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xc79}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "8a184dc1b9"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0xfbff, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x12}, [@mdlm_detail={0x1f, 0x24, 0x13, 0xd5, "18f2c869e0ee39b03218e1b6b574d61511c7103872dac56e95efaa"}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x8, 0x300}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0x7, 0x3, 0x20, 0x9, 0xb, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xa0, 0xd, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x401}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0xb, 0x9, 0xb7}}, {{0x9, 0x5, 0x9, 0xcdaf017547fbba55, 0x200, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x98, 0xc, [@generic={0x5d, 0xd, "55ea74adfa12937ba716695719196d613c2977b35bcc005719306b4bb8a456f9d28275960750b648ad088996f7c38bdac3ed559f896f84ecd5e293c79d61caf64c19a70e00d2ae3562de0b8a9ee5497ce563d6ffdcd7bee8d35614"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0x5, 0x2, 0x5, [@generic={0xcd, 0xc, "d4773fb5e13dd4922eba3826a3818662f680001ffb706b93855996d94505b56f5b00edcd3abff939de765d80fdd3ad93854639416b7dbc272bd9e4bcf74741dd64d5c5a8eb8fd021df11db2f8c383c0fcfcbc52e6f7ee7ae970dc07b36b4a9db19fdc48b83399b75a0b95d2809b340ec86a1cda0ca1801ff5f3f78cbedd26280e1f9ee75b15c3de070d1637cc5516ee3b3d1fefdd41f8c1abec14c7c8739947b41795221b361c7379c86084466031969a205643139d3edbd7e08904161fbca43b25cd85897d431362783d4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}]}}, {{0x9, 0x5, 0x88, 0x2, 0x40, 0x18, 0x6, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x4}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x6, 0x75, 0x4, [@generic={0x4d, 0x9, "da722c6eb4455544930baea1bfe8977199c59a384b8c22c36edfe82e6057f189e2220c91af548e283e089ce3bfcf38ad6e8bc75a6ff2eac1550feb6ce7036da2221a24fc9f187969cba755"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x1c, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x88}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xdb, 0x76b}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x3, 0x8, 0xd, [@generic={0x14, 0x22, "7e4510b077410aa3718981c189afc2111735"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x6, 0x1, 0x0, [@generic={0x1f, 0x24, "255b30983276a8f2a6f28b4c5c8c70866492eaa6f9726aed685870cee0"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xa, 0x8, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x7f, 0x7f, 0xf4}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x7, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xad39}, @generic={0x58, 0x5, "ab00f22018e8f50492c0435a5c37a0b82041160c0a60ce72c3bd92dd0504c23adcd07672de6da6eb8b352fbe55e1015d168c5cdfc110ac2de0d9ed216244b5ab6958a5cbb87de301b7064c9ea573c0596416adee20fa"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x0, 0x3, 0x5}}]}}, {{0x9, 0x4, 0x3b, 0xf7, 0x0, 0xff, 0xff, 0xff, 0x0, [@generic={0x17, 0x23, "fbda4be5dc79fe821e85ceeae4eefddd7a142474fe"}, @hid_hid={0x9, 0x21, 0x40, 0x6, 0x1, {0x22, 0x5cb}}]}}, {{0x9, 0x4, 0xe2, 0x1, 0x1, 0x39, 0x96, 0xdc, 0x7, [@generic={0xd3, 0xb, "755ba7ab9d9012c44cfea6e3841c15f05a0b5e0742f673924efd9f8f73182a9b615355772855c539833c2d34dba9455b4705defd5a2fa05078ca2cad71e933d1528cae0d406321713e799f0a7e0d85c7b43ce0a9d93247c4e2d3cc476fb0078a09060ec54d62068cc05339a3e88c4fb0d9670c0a69c8302eb78bbd830040ec2c34ad50ebac267fbff49f8a8d95059b5195f3fed17151b30c7aa3b72a9a45c4ba0cea679a20a058eb9b12874f46f2cfef4b8cf6db81f17990cc6afaf3bc00b2b185cbc3194e6d60ebab7e4e821767b70468"}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0xfb, 0xe, 0x5}}]}}, {{0x9, 0x4, 0xdb, 0x22, 0x2, 0xe, 0x59, 0x92, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xe9, 0xfff, 0x5}, [@obex={0x5, 0x24, 0x15, 0x2}]}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x3, 0x1, 0x8, '_ v6'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x8, "c0b4838ba9c2ed0d"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfe, 0x1, 0x2, 0x0, "94bd", '\'r'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x6, 0x4, 0x3, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x96, 0x81, "acd688"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x2, 0x74, 0x9}]}], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0x10, 0x4, 0x2, [@generic={0x8f, 0x6, "58f0a6722dee0c60948ccd106ef219c9dfd7f439d0a2204ee70eca74b98c168f16d5b0bc4ad266133a7930abdeb6b73ceaa7292958cc7d04d868677f565032fc3214b05cb7fc1d4f4253a65fd698404e2d60283542853bb0fb6a8153aafc384a01e2a8ec1bd473932e20e5ad24384dc830de45d1987b04ce4b155142c9a45f51183f63edb1398babc756349f2b"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x1, 0x5e, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x66, 0xd}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x310, 0x9, 0x3, 0x7, 0x8, 0x6}, 0xf2, &(0x7f0000000c40)={0x5, 0xf, 0xf2, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4c, "7a5b7c949903dc64988e499c0ca83799"}, @generic={0xaf, 0x10, 0x4, "89ffbf84c3d293f5eb8228ec12015d37d5a43795dd98ed18744f3a7d94d9b4ca8ada75350b9f9ea41e2cff9d1989dbb56fb3b08e0af75e282f4fdb78c46657640fa7d3ec42c377ccd28ad2ddcd01a2f4c83f38c214e2b37dd011891ed9f5109e87e70fd17d5a6b091546c0893d67239a9d4a96d3b0fd901ae20301cd3b69e7dd9012cd994e9aa51e76e0791e8777ab5c56e2a2736d1795a623080509b3186c4babdb3a20fc6ee0e0e18f6908"}, @ssp_cap={0x10, 0x10, 0xa, 0x8b, 0x1, 0x0, 0x1e00f, 0x0, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x8, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x1, 0xf00, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x9}]}, 0x6, [{0xa7, &(0x7f0000000d40)=@string={0xa7, 0x3, "7a6f89f0b1ee327371b94e43ff6634b91c63ab812e8887ec746996d942c28f2521596d830c9dc470553f14c85e6859ddc97f62fa38097fb0698b173baf6f049176c6572970b3c336fc486ff3d9baec97765b81dfce4f98c59efe4f3625c39709a1ef553e23f978a784c3d5934a99f2a5e679eacf46c9e76159481700524421e2c8bd75d060fbf976d0e7a4b291758908cb56588e2ca4551603b17b969c332999c69184f9a4"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x43f}}, {0x9b, &(0x7f0000000ec0)=@string={0x9b, 0x3, "812542f5801ce9e27e0103b3cb1ab2a4d23cdecb4244581db5ce21d8c5d79b3373bf2be4da9999177778f2b956186bfdd8bd2ab2e25b50675b8c25a0e1f6c417921914c2d1fc1acf6cab53a371ffc65f3c66b3ff0be220a1e163fd0bdc48cd902887b72914cd42670f00ec37aa31331c13071d0a8b20f5f0ed1bd09a915cf86b3641610dac9745b1b64aaba851d406e0115000c617ad348657"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x42a}}]}) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 379.530896ms ago: executing program 2 (id=1326): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000180), 0x800, 0x80140) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0xfffffffff0000000}) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000480)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 268.529192ms ago: executing program 1 (id=1327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xff7ffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f202"], 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x3ffc}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x43f2, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x15b, 0x81, 0xfffffff7}, &(0x7f0000000380)=0x14) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0x15b, 0x81, 0xfffffff7}, &(0x7f0000000380)=0x14) setuid(0xee01) (async) setuid(0xee01) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x84, 0x1, "89"}, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x4c501) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f00000003c0)={0x3}) (async) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f00000003c0)={0x3}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r2, 0x0, r2) (async) r5 = fcntl$dupfd(r2, 0x0, r2) r6 = getpid() bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, 0x2, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x820) fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x1, r6}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 83.119039ms ago: executing program 2 (id=1328): socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 40.539258ms ago: executing program 2 (id=1329): socket(0x1e, 0x4, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 0s ago: executing program 2 (id=1330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, 0x0, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000740)={@void, @val={0x0, 0x4, 0x4, 0x7ff, 0x6, 0xb14}, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val, {0x8100, 0x2, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0xe40, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0xfff}, {0x1}], @ipv6=@generic={0x1, 0x6, "46741e", 0x126, 0x29, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0x3c, 0xc, 0x2, 0x2c, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @dev={0xfe, 0x80, '\x00', 0x38}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @hopopts={0x73}, @srh={0x4, 0x4, 0x4, 0x2, 0x2, 0x20, 0x8000, [@mcast2, @ipv4={'\x00', '\xff\xff', @remote}]}], "9c3763db2f2a2ed6ae59577ae2e1628f75533276c2b195ee948e02d78d8ff9a8b087a45c1828b20ba2fc088a6e06a279e7d2bf47cdafa2c6c6423591cc5b5a52f88495c6f425b1b4291cb503933a60c36fea254f69c759b1ad6e84d2f4336418408e2a7742b00c5f52f6b90855408dad5f39e822fd83849390058debc5b4a02178b30b9d25b74b5c082155565cc0"}}}}}}}, 0x186) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000800) kernel console output (not intermixed with test programs): o-configure device. [ 199.486809][ T5711] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22 [ 199.514003][ T5711] usb 5-1: USB disconnect, device number 41 [ 199.528252][ T5772] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.528763][ T5772] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 199.549515][ T5772] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.550001][ T5772] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 199.581956][ T5772] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.607597][ T5593] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 199.628106][ T5593] usb 2-1: device descriptor read/8, error -71 [ 199.679680][ T5772] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 199.691778][ T5772] usb 4-1: USB disconnect, device number 40 [ 199.723977][ T6638] udevd[6638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.839718][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.841051][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.849675][ T7997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.853140][ T7997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.880385][ T5593] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 199.898073][ T5593] usb 2-1: device descriptor read/8, error -71 [ 200.007853][ T5593] usb usb2-port1: unable to enumerate USB device [ 200.586074][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586074][ T8021] Use struct sctp_assoc_value instead [ 200.586139][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586139][ T8021] Use struct sctp_assoc_value instead [ 200.586187][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586187][ T8021] Use struct sctp_assoc_value instead [ 200.586233][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586233][ T8021] Use struct sctp_assoc_value instead [ 200.586280][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586280][ T8021] Use struct sctp_assoc_value instead [ 200.586327][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586327][ T8021] Use struct sctp_assoc_value instead [ 200.586374][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586374][ T8021] Use struct sctp_assoc_value instead [ 200.586420][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586420][ T8021] Use struct sctp_assoc_value instead [ 200.586467][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586467][ T8021] Use struct sctp_assoc_value instead [ 200.586520][ T8021] sctp: [Deprecated]: syz.2.662 (pid 8021) Use of int in max_burst socket option deprecated. [ 200.586520][ T8021] Use struct sctp_assoc_value instead [ 200.857503][ T5772] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 200.947532][ T5711] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 201.007481][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 201.009260][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 201.009291][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 201.009318][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 201.009339][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 201.009354][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 201.011536][ T5772] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 201.011564][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.011585][ T5772] usb 4-1: Product: syz [ 201.011596][ T5772] usb 4-1: Manufacturer: syz [ 201.011605][ T5772] usb 4-1: SerialNumber: syz [ 201.014630][ T5772] usb 4-1: config 0 descriptor?? [ 201.097553][ T5711] usb 5-1: device descriptor read/64, error -71 [ 201.347775][ T5711] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 201.387909][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 201.429770][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.429833][ T5772] input input19: Device does not respond to id packet M [ 201.431714][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.431762][ T5772] input input19: Device does not respond to id packet P [ 201.435309][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.435356][ T5772] input input19: Device does not respond to id packet B [ 201.435956][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.435997][ T5772] input input19: Device does not respond to id packet N [ 201.437549][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.439362][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.439782][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.440193][ T5772] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 201.499347][ T5772] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 201.507701][ T5711] usb 5-1: device descriptor read/64, error -71 [ 201.530291][ T5772] usb 4-1: USB disconnect, device number 41 [ 201.624234][ T5711] usb usb5-port1: attempt power cycle [ 201.928873][ T5762] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 201.967540][ T5711] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 201.988116][ T5711] usb 5-1: device descriptor read/8, error -71 [ 202.080332][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 202.082210][ T5762] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 202.082235][ T5762] usb 2-1: config 0 has no interface number 0 [ 202.082280][ T5762] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 202.082310][ T5762] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 202.082339][ T5762] usb 2-1: config 0 interface 246 has no altsetting 0 [ 202.084819][ T5762] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 202.084849][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.084870][ T5762] usb 2-1: Product: syz [ 202.084885][ T5762] usb 2-1: Manufacturer: syz [ 202.084901][ T5762] usb 2-1: SerialNumber: syz [ 202.171611][ T5762] usb 2-1: config 0 descriptor?? [ 202.227585][ T5711] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 202.248410][ T5711] usb 5-1: device descriptor read/8, error -71 [ 202.358892][ T5711] usb usb5-port1: unable to enumerate USB device [ 202.413920][ T5762] usb 2-1: USB disconnect, device number 53 [ 203.086753][ T8067] netlink: 'syz.1.676': attribute type 16 has an invalid length. [ 203.086769][ T8067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.676'. [ 203.867600][ T5612] Bluetooth: hci4: command 0x1003 tx timeout [ 203.879865][ T4920] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 204.372364][ T8128] program syz.2.697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.367597][ T5762] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 205.506587][ T8168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.507227][ T8168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.525200][ T5762] usb 4-1: Using ep0 maxpacket: 8 [ 205.533894][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short [ 205.534952][ T5762] usb 4-1: config 4 has an invalid interface number: 170 but max is 1 [ 205.534967][ T5762] usb 4-1: config 4 has an invalid interface number: 90 but max is 1 [ 205.534979][ T5762] usb 4-1: config 4 has no interface number 0 [ 205.534988][ T5762] usb 4-1: config 4 has no interface number 1 [ 205.535013][ T5762] usb 4-1: config 4 interface 170 has no altsetting 0 [ 205.535024][ T5762] usb 4-1: config 4 interface 90 has no altsetting 0 [ 205.537246][ T5762] usb 4-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice=1f.35 [ 205.537263][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.537275][ T5762] usb 4-1: Product: syz [ 205.537283][ T5762] usb 4-1: Manufacturer: syz [ 205.537292][ T5762] usb 4-1: SerialNumber: syz [ 205.679740][ T37] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 205.799084][ T5762] hub 4-1:4.170: Invalid hub with more than one config or interface [ 205.802362][ T5762] hub 4-1:4.170: probe with driver hub failed with error -22 [ 205.803514][ T5762] io_ti 4-1:4.170: required endpoints missing [ 205.820928][ T5762] hub 4-1:4.90: Invalid hub with more than one config or interface [ 205.820962][ T5762] hub 4-1:4.90: probe with driver hub failed with error -22 [ 205.822120][ T5762] io_ti 4-1:4.90: required endpoints missing [ 205.833257][ T5762] usb 4-1: USB disconnect, device number 42 [ 205.837517][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 205.861941][ T37] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 205.861970][ T37] usb 5-1: config 0 has no interface number 0 [ 205.862014][ T37] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 205.862038][ T37] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.866643][ T37] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 205.866671][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.866692][ T37] usb 5-1: Product: syz [ 205.866714][ T37] usb 5-1: Manufacturer: syz [ 205.866729][ T37] usb 5-1: SerialNumber: syz [ 205.965461][ T37] usb 5-1: config 0 descriptor?? [ 205.966271][ T8166] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 205.966376][ T8166] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 206.168175][ T8166] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 206.168365][ T8166] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 206.371780][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.373582][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.377171][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.400145][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.413193][ T37] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 206.413211][ T37] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 206.413395][ T37] asix 5-1:0.251: probe with driver asix failed with error -5 [ 206.717536][ T9] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 206.967253][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.969472][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.995587][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.999805][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 206.999865][ T9] usb 4-1: too many configurations: 99, using maximum allowed: 8 [ 207.010944][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.010968][ T9] usb 4-1: config 1 has no interface number 0 [ 207.011009][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.011032][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.011060][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.011085][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.011112][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.011139][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.049894][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.049920][ T9] usb 4-1: config 1 has no interface number 0 [ 207.049962][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.049985][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.050012][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.050037][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.050064][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.050091][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.051557][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.051581][ T9] usb 4-1: config 1 has no interface number 0 [ 207.051628][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.051651][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.051677][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.051702][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.051729][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.051757][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.052980][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.053003][ T9] usb 4-1: config 1 has no interface number 0 [ 207.053134][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.053157][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.053183][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.053209][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.053236][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.053262][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.054646][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.054669][ T9] usb 4-1: config 1 has no interface number 0 [ 207.054722][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.054745][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.054772][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.054796][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.054823][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.054849][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.056055][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.056078][ T9] usb 4-1: config 1 has no interface number 0 [ 207.056118][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.056141][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.056167][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.056192][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.056219][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.056246][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.057691][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.057715][ T9] usb 4-1: config 1 has no interface number 0 [ 207.058247][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.058275][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.058301][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.058326][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.058357][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.058382][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.061495][ T9] usb 4-1: config 1 has an invalid interface number: 116 but max is 0 [ 207.061518][ T9] usb 4-1: config 1 has no interface number 0 [ 207.061558][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 207.061595][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 207.061628][ T9] usb 4-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 207.061653][ T9] usb 4-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 207.061680][ T9] usb 4-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.061707][ T9] usb 4-1: config 1 interface 116 has no altsetting 0 [ 207.066246][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 207.066274][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=18 [ 207.066294][ T9] usb 4-1: Product: syz [ 207.066308][ T9] usb 4-1: Manufacturer: syz [ 207.066323][ T9] usb 4-1: SerialNumber: syz [ 207.087131][ T8176] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 207.087622][ T8176] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 207.302220][ T9] ums-usbat 4-1:1.116: USB Mass Storage device detected [ 207.667084][ T5762] usb 5-1: USB disconnect, device number 46 [ 207.780034][ T9] ums-usbat 4-1:1.116: probe with driver ums-usbat failed with error -5 [ 207.832139][ T9] usb 4-1: USB disconnect, device number 43 [ 207.945506][ T8194] sctp: [Deprecated]: syz.1.719 (pid 8194) Use of int in max_burst socket option. [ 207.945506][ T8194] Use struct sctp_assoc_value instead [ 208.289259][ T5762] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 208.455081][ T5762] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.455655][ T5762] usb 5-1: not running at top speed; connect to a high speed hub [ 208.457233][ T5762] usb 5-1: config 1 has an invalid interface number: 28 but max is 0 [ 208.457258][ T5762] usb 5-1: config 1 has no interface number 0 [ 208.457290][ T5762] usb 5-1: config 1 interface 28 has no altsetting 0 [ 208.494498][ T5762] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=88.53 [ 208.494526][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.494547][ T5762] usb 5-1: Product: syz [ 208.494561][ T5762] usb 5-1: Manufacturer: syz [ 208.494576][ T5762] usb 5-1: SerialNumber: syz [ 208.734103][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.736096][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.746083][ T5762] upd78f0730 5-1:1.28: upd78f0730 converter detected [ 208.784625][ T5762] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 208.953655][ T38] audit: type=1326 audit(1778802149.625:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.731" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f213f59ce59 code=0x0 [ 208.976545][ T5762] usb 5-1: USB disconnect, device number 47 [ 209.013739][ T5762] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 209.016822][ T5762] upd78f0730 5-1:1.28: device disconnected [ 209.084901][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.085451][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.297539][ T5711] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 209.318739][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 209.467552][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 209.469853][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.470943][ T9] usb 2-1: config 7 has an invalid interface number: 97 but max is 0 [ 209.470969][ T9] usb 2-1: config 7 has an invalid interface number: 39 but max is 0 [ 209.470990][ T9] usb 2-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 209.471011][ T9] usb 2-1: config 7 has no interface number 0 [ 209.471028][ T9] usb 2-1: config 7 has no interface number 1 [ 209.471062][ T9] usb 2-1: config 7 interface 97 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 209.471077][ T9] usb 2-1: too many endpoints for config 7 interface 39 altsetting 125: 146, using maximum allowed: 30 [ 209.471098][ T9] usb 2-1: config 7 interface 39 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 209.471119][ T9] usb 2-1: config 7 interface 97 has no altsetting 0 [ 209.471130][ T9] usb 2-1: config 7 interface 39 has no altsetting 0 [ 209.505270][ T9] usb 2-1: New USB device found, idVendor=187f, idProduct=0800, bcdDevice=31.0c [ 209.505299][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.505320][ T9] usb 2-1: Product: syz [ 209.505334][ T9] usb 2-1: Manufacturer: syz [ 209.505349][ T9] usb 2-1: SerialNumber: syz [ 209.535947][ T5711] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.535969][ T5711] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 209.535985][ T5711] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 209.536023][ T5711] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.536048][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.700767][ T5711] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.838646][ T9] smsusb:smsusb_probe: board id=19, interface number 97 [ 209.852534][ T9] smsusb:smsusb_probe: board id=19, interface number 39 [ 209.862956][ T9] usb 2-1: USB disconnect, device number 54 [ 210.049893][ T38] audit: type=1326 audit(1778802150.725:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.3.731" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f213f59ce59 code=0x0 [ 210.069602][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.076138][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.332489][ T5711] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 210.368802][ T5711] usb 4-1: USB disconnect, device number 44 [ 210.613281][ T8252] can0: slcan on ptm1. [ 211.036684][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.138688][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.495799][ T8252] can0 (unregistered): slcan off ptm1. [ 212.102591][ T8315] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 212.102615][ T8315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.754'. [ 212.102734][ T8315] team0: entered promiscuous mode [ 212.102750][ T8315] team_slave_0: entered promiscuous mode [ 212.102979][ T8315] team_slave_1: entered promiscuous mode [ 212.122498][ T8315] team0: entered allmulticast mode [ 212.122519][ T8315] team_slave_0: entered allmulticast mode [ 212.122543][ T8315] team_slave_1: entered allmulticast mode [ 212.123504][ T8315] bridge0: port 3(team0) entered blocking state [ 212.123865][ T8315] bridge0: port 3(team0) entered disabled state [ 212.138599][ T8315] bridge0: port 3(team0) entered blocking state [ 212.191812][ T8315] bridge0: port 3(team0) entered forwarding state [ 212.563797][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.564391][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.711088][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.719171][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.164969][ T161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.236837][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.268945][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.271272][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.325720][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.332949][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.525671][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.526286][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.688147][ T8375] comedi comedi4: commands at RT priority not supported in this driver [ 213.841154][ T161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.971701][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 214.097529][ T9] usb 4-1: device descriptor read/64, error -71 [ 214.142041][ T8385] gfs2: error -5 reading superblock [ 214.171965][ T8384] netlink: 'syz.2.775': attribute type 16 has an invalid length. [ 214.171986][ T8384] netlink: 152 bytes leftover after parsing attributes in process `syz.2.775'. [ 214.219837][ T161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.344576][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 214.397517][ T5711] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 214.487544][ T9] usb 4-1: device descriptor read/64, error -71 [ 214.499692][ T161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.535197][ T8359] lo speed is unknown, defaulting to 1000 [ 214.551119][ T5711] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 253, using maximum allowed: 30 [ 214.551167][ T5711] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 214.551195][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 214.551228][ T5711] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 214.551253][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.601260][ T9] usb usb4-port1: attempt power cycle [ 214.636309][ T5711] usb 2-1: config 0 descriptor?? [ 215.067841][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 215.090123][ T9] usb 4-1: device descriptor read/8, error -71 [ 215.175871][ T5711] usbhid 2-1:0.0: can't add hid device: -71 [ 215.176049][ T5711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.194740][ T5711] usb 2-1: USB disconnect, device number 55 [ 215.339623][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 215.364813][ T9] usb 4-1: device descriptor read/8, error -71 [ 215.467905][ T9] usb usb4-port1: unable to enumerate USB device [ 215.469053][ T4920] Bluetooth: hci3: command tx timeout [ 215.518158][ T161] bridge_slave_1: left allmulticast mode [ 215.518181][ T161] bridge_slave_1: left promiscuous mode [ 215.518352][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.578383][ T161] bridge_slave_0: left allmulticast mode [ 215.578408][ T161] bridge_slave_0: left promiscuous mode [ 215.578603][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.807709][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 215.906378][ T8404] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 215.906406][ T8404] CIFS mount error: No usable UNC path provided in device string! [ 215.906406][ T8404] [ 215.927479][ T8404] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.997270][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.998261][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.388010][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.448358][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.489477][ T161] bond0 (unregistering): Released all slaves [ 217.017912][ T5711] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 217.087542][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 217.172923][ T5711] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 217.172956][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.172968][ T5711] usb 2-1: Product: syz [ 217.172976][ T5711] usb 2-1: Manufacturer: syz [ 217.172985][ T5711] usb 2-1: SerialNumber: syz [ 217.177166][ T5711] usb 2-1: config 0 descriptor?? [ 217.215496][ T8359] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.215798][ T8359] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.216092][ T8359] bridge_slave_0: entered allmulticast mode [ 217.232758][ T8359] bridge_slave_0: entered promiscuous mode [ 217.249266][ T8359] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.249499][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.249660][ T8359] bridge_slave_1: entered allmulticast mode [ 217.266173][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 217.271917][ T8359] bridge_slave_1: entered promiscuous mode [ 217.281137][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 217.281163][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.319459][ T9] usb 4-1: config 0 descriptor?? [ 217.339609][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 217.550498][ T5612] Bluetooth: hci3: command tx timeout [ 217.555841][ T4920] Bluetooth: hci4: urb ffff888022ae7d00 submission failed (2) [ 217.605901][ T9] usb 4-1: Detected FT232B [ 217.619896][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.677548][ T5711] usb 2-1: USB disconnect, device number 56 [ 217.703489][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.561352][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 218.574700][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 218.594331][ T9] usb 4-1: USB disconnect, device number 49 [ 218.655861][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 218.656581][ T9] ftdi_sio 4-1:0.0: device disconnected [ 218.659928][ T5266] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.696674][ T8359] team0: Port device team_slave_0 added [ 218.734417][ T8359] team0: Port device team_slave_1 added [ 218.897523][ T161] hsr_slave_0: left promiscuous mode [ 218.937540][ T161] hsr_slave_1: left promiscuous mode [ 218.946471][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.946491][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.979817][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.979835][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.062806][ T161] veth1_macvtap: left promiscuous mode [ 219.062907][ T161] veth0_macvtap: left promiscuous mode [ 219.063216][ T161] veth1_vlan: left promiscuous mode [ 219.063395][ T161] veth0_vlan: left promiscuous mode [ 219.111358][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.115613][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.144282][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.144610][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.517932][ T38] audit: type=1326 audit(1778802160.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.1.789" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f734d4bce59 code=0x0 [ 219.575631][ T8453] ufs: You didn't specify the type of your ufs filesystem [ 219.575631][ T8453] [ 219.575631][ T8453] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 219.575631][ T8453] [ 219.575631][ T8453] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 219.631399][ T4920] Bluetooth: hci3: command tx timeout [ 219.991834][ T4920] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 220.643412][ T161] team0 (unregistering): Port device team_slave_1 removed [ 220.777986][ T161] team0 (unregistering): Port device team_slave_0 removed [ 220.807822][ T5711] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 220.997472][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 221.000506][ T5711] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 221.000530][ T5711] usb 2-1: config 0 has no interface number 0 [ 221.000572][ T5711] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 221.000595][ T5711] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 221.054583][ T5711] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 221.054614][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.054635][ T5711] usb 2-1: Product: syz [ 221.054650][ T5711] usb 2-1: Manufacturer: syz [ 221.054666][ T5711] usb 2-1: SerialNumber: syz [ 221.064427][ T5711] usb 2-1: config 0 descriptor?? [ 221.074499][ T8479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.074687][ T8479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.239475][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.239493][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.239518][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.280251][ T5772] lo speed is unknown, defaulting to 1000 [ 221.301323][ T5772] syz2: Port: 1 Link DOWN [ 221.316156][ T8479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.316811][ T8479] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.383629][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.383643][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.383664][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.708554][ T4920] Bluetooth: hci3: command tx timeout [ 221.759436][ T4197] smbdirect: ib_dev[syz2] removed [ 221.960923][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.963031][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.056972][ T8359] hsr_slave_0: entered promiscuous mode [ 222.098381][ T8359] hsr_slave_1: entered promiscuous mode [ 222.128234][ T8359] debugfs: 'hsr0' already exists in 'hsr' [ 222.128261][ T8359] Cannot create hsr debugfs directory [ 222.607509][ T5593] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 222.750323][ T8523] sg_write: data in/out 229343/32 bytes for SCSI command 0x0-- guessing data in; [ 222.750323][ T8523] program syz.2.816 not setting count and/or reply_len properly [ 222.755755][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.806090][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.821387][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.822238][ T5593] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 222.822266][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.822286][ T5593] usb 4-1: Product: syz [ 222.822302][ T5593] usb 4-1: Manufacturer: syz [ 222.822316][ T5593] usb 4-1: SerialNumber: syz [ 222.882811][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.894931][ T5593] usb 4-1: config 0 descriptor?? [ 222.911261][ T5593] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 223.201570][ T8479] netlink: 9 bytes leftover after parsing attributes in process `syz.1.800'. [ 223.238954][ T5711] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 223.239226][ T5711] asix 2-1:0.34: probe with driver asix failed with error -71 [ 223.291431][ T5711] usb 2-1: USB disconnect, device number 57 [ 223.622837][ T5266] 8021q: adding VLAN 0 to HW filter on device eth6 [ 224.334524][ T5593] gspca_sunplus: reg_w_riv err -71 [ 224.334626][ T5593] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 224.341412][ T5593] usb 4-1: USB disconnect, device number 50 [ 224.475801][ T8359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.526679][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.537166][ T8359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.669359][ T8565] netlink: 140 bytes leftover after parsing attributes in process `syz.1.822'. [ 224.680397][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.770162][ T5266] 8021q: adding VLAN 0 to HW filter on device eth7 [ 224.772934][ T8359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.866306][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.903642][ T8359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.998356][ T8359] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.235628][ T5711] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 225.380733][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.380778][ T5711] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 225.380825][ T5711] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 225.382312][ T5711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.382340][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.382361][ T5711] usb 4-1: SerialNumber: syz [ 225.431092][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.562485][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.670627][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.670735][ T5799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.677207][ T5772] usb 4-1: USB disconnect, device number 51 [ 225.916380][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.917102][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.158817][ T8600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.651939][ T5266] 8021q: adding VLAN 0 to HW filter on device eth8 [ 227.259509][ T8634] program syz.3.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.570165][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.570856][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.752407][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.543307][ T8679] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.730750][ T8359] veth0_vlan: entered promiscuous mode [ 228.785466][ T8359] veth1_vlan: entered promiscuous mode [ 228.852582][ T8689] netlink: 'syz.1.848': attribute type 46 has an invalid length. [ 228.867310][ T8689] netlink: 'syz.1.848': attribute type 21 has an invalid length. [ 228.885189][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.896093][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.933617][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.934170][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.075740][ T8359] veth0_macvtap: entered promiscuous mode [ 229.105994][ T8359] veth1_macvtap: entered promiscuous mode [ 229.281787][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.282317][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.298074][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.304519][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.333103][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.360898][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.361922][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.425540][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.575981][ T4197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.576032][ T4197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.576067][ T4197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.576101][ T4197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.774245][ T5593] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 230.943071][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.943091][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.967333][ T5593] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 230.967383][ T5593] usb 2-1: config 0 has no interface number 0 [ 230.967427][ T5593] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 230.967453][ T5593] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 230.987147][ T5593] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 230.987176][ T5593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.987196][ T5593] usb 2-1: Product: syz [ 230.987210][ T5593] usb 2-1: Manufacturer: syz [ 230.987225][ T5593] usb 2-1: SerialNumber: syz [ 231.155271][ T5593] usb 2-1: config 0 descriptor?? [ 231.173207][ T8734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.173336][ T8734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.288048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.288068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.409206][ T8734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.424681][ T8734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 231.630026][ T5593] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 231.630079][ T5593] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 232.044439][ T5593] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 232.053882][ T5593] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 232.075512][ T5593] usb 2-1: USB disconnect, device number 58 [ 233.347258][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.362787][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.747579][ T5772] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 233.909702][ T5772] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 233.909733][ T5772] usb 2-1: config 0 has no interface number 0 [ 233.909779][ T5772] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 233.909804][ T5772] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.912813][ T5772] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 233.912850][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.912873][ T5772] usb 2-1: Product: syz [ 233.912889][ T5772] usb 2-1: Manufacturer: syz [ 233.912904][ T5772] usb 2-1: SerialNumber: syz [ 233.989363][ T5772] usb 2-1: config 0 descriptor?? [ 233.990351][ T8768] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 233.995765][ T5772] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 234.021200][ T5772] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 234.023873][ T5772] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 234.037522][ T5690] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 234.214790][ T5690] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.214823][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.214843][ T5690] usb 6-1: Product: syz [ 234.214859][ T5690] usb 6-1: Manufacturer: syz [ 234.214874][ T5690] usb 6-1: SerialNumber: syz [ 234.313403][ T5690] usb 6-1: config 0 descriptor?? [ 234.408699][ T5711] usb 2-1: USB disconnect, device number 59 [ 234.471234][ T5711] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 234.473112][ T5711] cyberjack 2-1:0.69: device disconnected [ 234.532651][ T5690] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 234.899283][ T8814] No memory to map [ 235.306354][ T5690] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 235.342465][ T5690] usb 6-1: USB disconnect, device number 2 [ 236.597067][ T8843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.599226][ T8843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.610261][ T5711] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 236.759083][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.759139][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.759161][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 236.759179][ T5711] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 236.761215][ T5711] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.761240][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.761252][ T5711] usb 6-1: Product: syz [ 236.761261][ T5711] usb 6-1: Manufacturer: syz [ 236.761317][ T5711] usb 6-1: SerialNumber: syz [ 236.764793][ T5711] usb 6-1: config 0 descriptor?? [ 236.770290][ T5711] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 236.783263][ T5711] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 236.792136][ T5711] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 236.919235][ T5718] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 236.971795][ T5762] usb 6-1: USB disconnect, device number 3 [ 236.985086][ T5762] garmin_gps 6-1:0.0: device disconnected [ 237.069084][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 237.076915][ T5718] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.076943][ T5718] usb 4-1: config 0 has no interface number 0 [ 237.100923][ T5718] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 237.100942][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.100954][ T5718] usb 4-1: Product: syz [ 237.100975][ T5718] usb 4-1: Manufacturer: syz [ 237.100984][ T5718] usb 4-1: SerialNumber: syz [ 237.104448][ T5718] usb 4-1: config 0 descriptor?? [ 237.110730][ T5718] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 237.110754][ T5718] usb 4-1: selecting invalid altsetting 1 [ 237.110770][ T5718] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 237.123794][ T5718] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.124201][ T5718] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 237.124249][ T5718] usb 4-1: media controller created [ 237.141808][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.312247][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.314368][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.316762][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.317256][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.440790][ T8859] binder: 8858:8859 unknown command 0 [ 237.440812][ T8859] binder: 8858:8859 ioctl c0306201 2000000001c0 returned -22 [ 237.441095][ T8859] binder: 8858:8859 ioctl 541b 200000000080 returned -22 [ 237.443836][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 237.535217][ T8861] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 237.535244][ T8861] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 237.537802][ T5718] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 237.743111][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.900'. [ 237.902934][ T5718] usb 4-1: USB disconnect, device number 52 [ 237.917487][ T5690] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 237.970601][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.971204][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.076414][ T5690] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 238.076457][ T5690] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 238.076480][ T5690] usb 2-1: Product: syz [ 238.076495][ T5690] usb 2-1: Manufacturer: syz [ 238.076510][ T5690] usb 2-1: SerialNumber: syz [ 238.097898][ T5690] usb 2-1: config 0 descriptor?? [ 238.493280][ T5690] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 238.653632][ T8892] netlink: 204 bytes leftover after parsing attributes in process `syz.2.906'. [ 238.693673][ T5690] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 238.693702][ T5690] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 238.719546][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.721696][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.007208][ T8903] qnx4: no qnx4 filesystem (no root dir). [ 239.040405][ T5690] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 239.052337][ T5690] usb 2-1: USB disconnect, device number 60 [ 239.139227][ T5762] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 239.312013][ T5762] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.312051][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.312078][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 239.313845][ T5762] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 239.313874][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=3 [ 239.313896][ T5762] usb 4-1: Product: syz [ 239.313911][ T5762] usb 4-1: SerialNumber: syz [ 239.385770][ T5762] usb 4-1: config 0 descriptor?? [ 239.386627][ T8902] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 239.576176][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.584043][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.605635][ T5762] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 239.712636][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 239.807818][ T5718] usb 4-1: USB disconnect, device number 53 [ 239.807909][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 239.931253][ T8932] trusted_key: encrypted_key: insufficient parameters specified [ 240.085055][ T8938] netlink: 52 bytes leftover after parsing attributes in process `syz.1.914'. [ 240.315532][ T8951] Bluetooth: MGMT ver 1.23 [ 241.210948][ T8989] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.926'. [ 241.237234][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.237970][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.239806][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.240361][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.399048][ T8995] netlink: 'syz.2.926': attribute type 1 has an invalid length. [ 241.409789][ T5762] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 241.588989][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 241.589035][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.589078][ T5762] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 241.589102][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.640280][ T5762] usb 2-1: config 0 descriptor?? [ 241.641242][ T8985] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.792842][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.928'. [ 241.828285][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.928'. [ 241.869567][ T5762] usbhid 2-1:0.0: can't add hid device: -71 [ 241.869687][ T5762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.893219][ T5762] usb 2-1: USB disconnect, device number 61 [ 242.412281][ T9030] netlink: 165 bytes leftover after parsing attributes in process `syz.2.935'. [ 243.406699][ T9071] netlink: 'syz.3.944': attribute type 3 has an invalid length. [ 243.428325][ T9072] netlink: 'syz.3.944': attribute type 3 has an invalid length. [ 243.647886][ T5690] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.797672][ T5690] usb 6-1: Using ep0 maxpacket: 32 [ 243.801684][ T5690] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 243.810533][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.810556][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.845134][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.845159][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.855735][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.855758][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.866346][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.873225][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.873870][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.873893][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.877515][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.877539][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.890516][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.890539][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.902234][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.902258][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.904389][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.904411][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.912529][ T5690] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 243.912556][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=51 [ 243.912584][ T5690] usb 6-1: Product: syz [ 243.912599][ T5690] usb 6-1: Manufacturer: syz [ 243.912613][ T5690] usb 6-1: SerialNumber: syz [ 244.067567][ T5772] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 244.144370][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.144999][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.167575][ T5690] usb 6-1: USB disconnect, device number 4 [ 244.217500][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 244.219158][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.219183][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.219196][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.219220][ T5772] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.219233][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.224856][ T5772] usb 2-1: config 0 descriptor?? [ 244.367492][ T5593] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 244.520042][ T5593] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.520614][ T5593] usb 4-1: not running at top speed; connect to a high speed hub [ 244.521746][ T5593] usb 4-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 244.521772][ T5593] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 244.521791][ T5593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.521811][ T5593] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 244.524283][ T5593] usb 4-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 0.40 [ 244.524315][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.524335][ T5593] usb 4-1: Product: syz [ 244.524351][ T5593] usb 4-1: Manufacturer: syz [ 244.524366][ T5593] usb 4-1: SerialNumber: syz [ 244.611929][ T5593] usb 4-1: config 0 descriptor?? [ 244.643348][ T5772] microsoft 0003:045E:07DA.0010: item fetching failed at offset 30/34 [ 244.644106][ T5772] microsoft 0003:045E:07DA.0010: parse failed [ 244.644209][ T5772] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 244.846150][ T5772] usb 2-1: USB disconnect, device number 62 [ 244.926509][ T5593] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 244.999757][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.016309][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.027424][ T5593] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 245.029935][ T5593] usb 4-1: USB disconnect, device number 54 [ 245.039049][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 245.189617][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 245.189651][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.189678][ T5718] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 245.189692][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.193015][ T5718] usb 6-1: config 0 descriptor?? [ 246.141075][ T5718] hid_parser_main: 15 callbacks suppressed [ 246.141092][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141112][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141129][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141146][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141163][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141180][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141197][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141214][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141231][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.141247][ T5718] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 246.164414][ T5718] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 246.341960][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.344963][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.211896][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.227795][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.440063][ T9129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.460553][ T9129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.434443][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.447318][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.475771][ T9146] tmpfs: Bad value for 'nr_inodes' [ 249.119408][ T5711] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 249.310117][ T5711] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.310152][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.310228][ T5711] usb 4-1: Product: syz [ 249.310244][ T5711] usb 4-1: Manufacturer: syz [ 249.310260][ T5711] usb 4-1: SerialNumber: syz [ 249.395898][ T5711] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 249.642540][ T5711] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 249.903100][ T5711] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 249.903133][ T5711] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 249.903203][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 249.903238][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.903251][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 249.903266][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 249.903291][ T5711] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 249.903304][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.985810][ T5711] usb 2-1: config 0 descriptor?? [ 250.003307][ T9165] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 250.306629][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.327615][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.511981][ T5711] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 250.595153][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.606930][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.620505][ T9173] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 250.662475][ T5711] usb 2-1: USB disconnect, device number 63 [ 250.760197][ T5711] usblp0: removed [ 251.159517][ T5690] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 251.242353][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.256506][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.311239][ T5718] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 251.311297][ T5718] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 251.488520][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.489089][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.555653][ T5593] usb 4-1: USB disconnect, device number 55 [ 251.597293][ T5690] usb 4-1: ath9k_htc: Unable to allocate URBs [ 251.606832][ T5593] usb 4-1: ath9k_htc: USB layer deinitialized [ 251.610924][ T5718] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -110 [ 252.035703][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.036511][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.017609][ T5690] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 253.179494][ T5690] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.179515][ T5690] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 253.179527][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.179557][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 253.179573][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 253.181161][ T5690] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.181186][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.181198][ T5690] usb 2-1: Product: syz [ 253.181207][ T5690] usb 2-1: Manufacturer: syz [ 253.252654][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.992'. [ 253.253108][ T5690] cdc_wdm 2-1:1.0: skipping garbage [ 253.253125][ T5690] cdc_wdm 2-1:1.0: skipping garbage [ 253.278544][ T9219] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 253.278564][ T9219] PKCS7: Only support pkcs7_signedData type [ 253.390960][ T5772] usb 6-1: USB disconnect, device number 5 [ 253.406339][ T5690] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 253.406370][ T5690] cdc_wdm 2-1:1.0: Unknown control protocol [ 253.507526][ T5690] usb 2-1: USB disconnect, device number 64 [ 254.117616][ T5593] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 254.267912][ T5593] usb 6-1: Using ep0 maxpacket: 16 [ 254.272333][ T5593] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 254.272363][ T5593] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 254.272385][ T5593] usb 6-1: config 0 has no interface number 0 [ 254.272431][ T5593] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 254.272458][ T5593] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 254.276570][ T5593] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 254.276601][ T5593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.276622][ T5593] usb 6-1: Product: syz [ 254.276638][ T5593] usb 6-1: Manufacturer: syz [ 254.276653][ T5593] usb 6-1: SerialNumber: syz [ 254.368672][ T5762] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 254.415328][ T5593] usb 6-1: config 0 descriptor?? [ 254.417987][ T9231] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 254.418217][ T9231] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 254.537493][ T5762] usb 2-1: Using ep0 maxpacket: 32 [ 254.540455][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.540545][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.540570][ T5762] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 254.540584][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.594342][ T5762] usb 2-1: config 0 descriptor?? [ 254.656765][ T9231] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 254.656868][ T9231] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 255.029035][ T5762] zydacron 0003:13EC:0006.0012: collection stack underflow [ 255.030067][ T5762] zydacron 0003:13EC:0006.0012: item 0 1 0 12 parsing failed [ 255.034006][ T5762] zydacron 0003:13EC:0006.0012: parse failed [ 255.034507][ T5762] zydacron 0003:13EC:0006.0012: probe with driver zydacron failed with error -22 [ 255.215314][ T5762] usb 2-1: USB disconnect, device number 65 [ 255.344284][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.356911][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.377976][ T5772] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 255.380138][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.391515][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.531911][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 255.554242][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.554278][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.554301][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.554343][ T5772] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.554367][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.611607][ T5772] usb 4-1: config 0 descriptor?? [ 255.630890][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630972][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.855747][ T5772] hid_parser_main: 222 callbacks suppressed [ 255.855776][ T5772] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 255.956653][ T5772] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input21 [ 256.411246][ T5593] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 256.411279][ T5593] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 256.411531][ T5593] asix 6-1:0.251: probe with driver asix failed with error -71 [ 256.494582][ T5593] usb 6-1: USB disconnect, device number 6 [ 257.182890][ T5772] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 257.218411][ T5772] usb 4-1: USB disconnect, device number 57 [ 257.227959][ T9271] netlink: 'syz.5.1010': attribute type 1 has an invalid length. [ 257.386193][ T9274] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.1010'. [ 257.899336][ T5611] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 258.056497][ T5611] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 258.056531][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 258.056550][ T5611] usb 2-1: Product: syz [ 258.056565][ T5611] usb 2-1: SerialNumber: syz [ 258.093374][ T5611] usb 2-1: config 0 descriptor?? [ 258.110287][ T5772] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 258.265410][ T5772] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 258.265446][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.265467][ T5772] usb 4-1: Product: syz [ 258.265483][ T5772] usb 4-1: Manufacturer: syz [ 258.265498][ T5772] usb 4-1: SerialNumber: syz [ 258.347911][ T5772] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 258.365996][ T5718] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.581544][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.600525][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.690306][ T5772] usb 2-1: USB disconnect, device number 66 [ 259.265929][ T5593] usb 4-1: USB disconnect, device number 58 [ 259.419386][ T9317] misc userio: Invalid payload size [ 259.541076][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.541724][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.852984][ T9334] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1031'. [ 259.867615][ T5718] usb 4-1: Service connection timeout for: 256 [ 259.867639][ T5718] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 259.879323][ T5718] ath9k_htc: Failed to initialize the device [ 259.880607][ T5593] usb 4-1: ath9k_htc: USB layer deinitialized [ 259.958474][ T5711] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 260.115835][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 260.124651][ T5711] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7 [ 260.126862][ T5711] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 260.126890][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.126911][ T5711] usb 2-1: Product: syz [ 260.126923][ T5711] usb 2-1: Manufacturer: syz [ 260.126931][ T5711] usb 2-1: SerialNumber: syz [ 260.228994][ T5593] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 260.294135][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.306040][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.316602][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.321520][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.376441][ T5711] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 260.376535][ T5711] gspca_stv06xx: st6422 sensor detected [ 260.427796][ T5593] usb 4-1: Using ep0 maxpacket: 32 [ 260.431748][ T5593] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 260.431775][ T5593] usb 4-1: config 0 has no interface number 0 [ 260.431867][ T5593] usb 4-1: config 0 interface 184 has no altsetting 0 [ 260.505898][ T5593] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 260.505928][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.505947][ T5593] usb 4-1: Product: syz [ 260.505961][ T5593] usb 4-1: Manufacturer: syz [ 260.505976][ T5593] usb 4-1: SerialNumber: syz [ 260.551527][ T5593] usb 4-1: config 0 descriptor?? [ 260.616483][ T9352] netlink: 'syz.2.1035': attribute type 2 has an invalid length. [ 260.616505][ T9352] netlink: 'syz.2.1035': attribute type 3 has an invalid length. [ 260.633860][ T5711] STV06xx 2-1:1.0: probe with driver STV06xx failed with error -71 [ 260.655323][ T5711] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 260.688959][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1036'. [ 260.691450][ T5711] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 260.746823][ T9359] netlink: 'syz.1.1036': attribute type 6 has an invalid length. [ 260.766819][ T5593] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 260.767228][ T5593] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 260.801898][ T5593] usb 4-1: USB disconnect, device number 59 [ 260.831207][ T5711] usb 2-1: USB disconnect, device number 67 [ 261.234916][ T161] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.437664][ T5711] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 261.619886][ T5711] usb 6-1: config 2 has an invalid interface number: 39 but max is 0 [ 261.619915][ T5711] usb 6-1: config 2 has no interface number 0 [ 261.619955][ T5711] usb 6-1: config 2 interface 39 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 261.619981][ T5711] usb 6-1: config 2 interface 39 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 261.620005][ T5711] usb 6-1: config 2 interface 39 has no altsetting 0 [ 261.650541][ T5711] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=e4.9a [ 261.650574][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.650594][ T5711] usb 6-1: Product: syz [ 261.650609][ T5711] usb 6-1: Manufacturer: syz [ 261.650624][ T5711] usb 6-1: SerialNumber: syz [ 261.707570][ T5762] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 261.742087][ T9375] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.742374][ T9375] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 261.893254][ T5762] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 261.893291][ T5762] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 261.893316][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 261.893343][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 261.896319][ T5762] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 261.896348][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.896369][ T5762] usb 2-1: Product: syz [ 261.896383][ T5762] usb 2-1: Manufacturer: syz [ 261.896397][ T5762] usb 2-1: SerialNumber: syz [ 261.905294][ T5762] usb 2-1: config 0 descriptor?? [ 261.936098][ T9384] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 261.952717][ T5762] usb 2-1: ucan: probing device on interface #0 [ 261.952744][ T5762] usb 2-1: ucan: invalid endpoint configuration [ 261.952760][ T5762] usb 2-1: ucan: probe failed; try to update the device firmware [ 262.013319][ T5711] kvaser_usb 6-1:2.39: error -ENODEV: Cannot get usb endpoint(s) [ 262.039999][ T5711] usb 6-1: USB disconnect, device number 7 [ 262.145372][ T5762] usb 2-1: USB disconnect, device number 68 [ 262.488785][ T9420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.489380][ T9420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.017509][ T5762] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 263.053772][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.054324][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.137488][ T5718] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 263.181381][ T5762] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 263.181415][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.181434][ T5762] usb 4-1: Product: syz [ 263.181445][ T5762] usb 4-1: Manufacturer: syz [ 263.181453][ T5762] usb 4-1: SerialNumber: syz [ 263.184572][ T5762] usb 4-1: config 0 descriptor?? [ 263.191488][ T5762] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 060 [ 263.311637][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.313202][ T5718] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 263.338346][ T5718] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 263.338379][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.338400][ T5718] usb 2-1: Product: syz [ 263.338414][ T5718] usb 2-1: Manufacturer: syz [ 263.338428][ T5718] usb 2-1: SerialNumber: syz [ 263.625942][ T5718] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 263.664284][ T5718] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 263.664313][ T5718] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 263.664348][ T5718] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 263.664463][ T5718] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 263.664483][ T5718] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 263.664501][ T5718] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 263.740553][ T5718] usb 2-1: failed to enable PITCH for EP 0x82 [ 263.762270][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.826770][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.929172][ T5718] usb 2-1: USB disconnect, device number 69 [ 263.935207][ T5762] i2c i2c-2: failure reading functionality [ 264.071915][ T5762] i2c i2c-2: connected i2c-tiny-usb device [ 264.090373][ T5762] usb 4-1: USB disconnect, device number 60 [ 264.127850][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.151399][ T5593] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 264.163205][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.312743][ T5593] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.312771][ T5593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.312783][ T5593] usb 6-1: Product: syz [ 264.312792][ T5593] usb 6-1: Manufacturer: syz [ 264.312800][ T5593] usb 6-1: SerialNumber: syz [ 264.355813][ T5593] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 264.426941][ T5611] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.657496][ T5718] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 264.810503][ T5718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.810535][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.814968][ T5718] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 264.814997][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.815016][ T5718] usb 2-1: Product: syz [ 264.815030][ T5718] usb 2-1: Manufacturer: syz [ 264.815045][ T5718] usb 2-1: SerialNumber: syz [ 264.967536][ T5711] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 265.062852][ T38] audit: type=1326 audit(1778802205.735:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.1.1072" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f734d4bce59 code=0x0 [ 265.115665][ T38] audit: type=1326 audit(1778802205.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.1.1072" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f734d4bce59 code=0x0 [ 265.118054][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 265.147936][ T5711] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 265.150933][ T5711] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 265.150963][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.151036][ T5711] usb 4-1: Product: syz [ 265.151050][ T5711] usb 4-1: Manufacturer: syz [ 265.151065][ T5711] usb 4-1: SerialNumber: syz [ 265.199853][ T9475] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 265.203960][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.205496][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.223929][ T38] audit: type=1326 audit(1778802205.895:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.1.1072" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f734d4bce59 code=0x0 [ 265.421154][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.424974][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.437407][ T5711] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.437476][ T5711] usb 4-1: MIDIStreaming interface descriptor not found [ 265.440842][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.470443][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.478696][ T5611] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 265.493111][ T5611] ath9k_htc: Failed to initialize the device [ 265.545440][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.552008][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.684777][ T5611] usb 6-1: ath9k_htc: USB layer deinitialized [ 265.860731][ T5711] usb 4-1: USB disconnect, device number 61 [ 265.988242][ T5593] usb 6-1: USB disconnect, device number 8 [ 266.631464][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.632030][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.821923][ T9507] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1087'. [ 267.147778][ T5611] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 267.298033][ T5611] usb 6-1: Using ep0 maxpacket: 8 [ 267.302385][ T5611] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 267.306111][ T5611] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 267.306153][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.306175][ T5611] usb 6-1: Product: syz [ 267.306190][ T5611] usb 6-1: Manufacturer: syz [ 267.306206][ T5611] usb 6-1: SerialNumber: syz [ 267.366339][ T9523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.375437][ T9523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.390994][ T5611] usb 6-1: config 0 descriptor?? [ 267.412402][ T5611] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 267.412465][ T5611] usb 6-1: setting power ON [ 267.414273][ T5611] dvb-usb: bulk message failed: -22 (2/0) [ 267.443022][ T5611] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 267.443896][ T5611] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 267.443950][ T5611] usb 6-1: media controller created [ 267.483412][ T5611] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.562696][ T5718] usb 2-1: 0:1 : does not exist [ 267.562791][ T5718] usb 2-1: unit 6 not found! [ 267.562808][ T5718] usb 2-1: unit 2 not found! [ 267.603590][ T5611] usb 6-1: selecting invalid altsetting 6 [ 267.603616][ T5611] usb 6-1: digital interface selection failed (-22) [ 267.603641][ T5611] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 267.604904][ T5611] usb 6-1: setting power OFF [ 267.605146][ T5611] dvb-usb: bulk message failed: -22 (2/0) [ 267.605165][ T5611] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 267.605178][ T5611] (NULL device *): no alternate interface [ 267.749833][ T5611] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 267.772402][ T5611] usb 6-1: USB disconnect, device number 9 [ 267.872890][ T5718] usb 2-1: USB disconnect, device number 70 [ 267.974971][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.975580][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.128095][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.128687][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.501367][ T9589] tmpfs: Unknown parameter 'func' [ 269.700008][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.700698][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.783352][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1117'. [ 269.940020][ T5611] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 269.940171][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 269.968525][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.969806][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.078061][ T9] usb 6-1: device descriptor read/64, error -71 [ 270.097460][ T5611] usb 2-1: Using ep0 maxpacket: 8 [ 270.100867][ T5611] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.100901][ T5611] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.100928][ T5611] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.100953][ T5611] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.100995][ T5611] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.101019][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.327500][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 270.443414][ T5611] usb 2-1: usb_control_msg returned -71 [ 270.443461][ T5611] usbtmc 2-1:16.0: can't read capabilities [ 270.468340][ T9] usb 6-1: device descriptor read/64, error -71 [ 270.478242][ T5611] usb 2-1: USB disconnect, device number 71 [ 270.548643][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.549415][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.554758][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.585656][ T9] usb usb6-port1: attempt power cycle [ 270.586559][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.937491][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 270.963751][ T9] usb 6-1: device descriptor read/8, error -71 [ 271.009882][ T5718] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 271.131061][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 271.167851][ T5718] usb 4-1: Using ep0 maxpacket: 8 [ 271.182256][ T5718] usb 4-1: config index 0 descriptor too short (expected 26, got 18) [ 271.199813][ T5718] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 271.199850][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.199870][ T5718] usb 4-1: Product: syz [ 271.199900][ T5718] usb 4-1: Manufacturer: syz [ 271.199918][ T5718] usb 4-1: SerialNumber: syz [ 271.232277][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 271.233167][ T5718] usb 4-1: config 0 descriptor?? [ 271.245132][ T5718] gspca_main: sq930x-2.14.0 probing 2770:930c [ 271.278992][ T9] usb 6-1: device descriptor read/8, error -71 [ 271.398484][ T9] usb usb6-port1: unable to enumerate USB device [ 271.500454][ T5718] gspca_sq930x: ucbus_write failed -71 [ 271.717490][ T5718] gspca_sq930x: Sensor ov9630 not yet treated [ 271.717590][ T5718] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 271.743525][ T5718] usb 4-1: USB disconnect, device number 62 [ 272.155284][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 272.260839][ T9681] 9p: Bad value for 'rfdno' [ 272.282030][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 272.417621][ T5718] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 272.477029][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.485938][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.511084][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.511930][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.513476][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'. [ 272.569465][ T5718] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 272.569485][ T5718] usb 2-1: config 0 has no interface number 0 [ 272.569511][ T5718] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 272.569527][ T5718] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 272.571880][ T5718] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.571899][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.571910][ T5718] usb 2-1: Product: syz [ 272.571919][ T5718] usb 2-1: Manufacturer: syz [ 272.571927][ T5718] usb 2-1: SerialNumber: syz [ 272.586695][ T5718] usb 2-1: config 0 descriptor?? [ 272.588124][ T9675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.588529][ T9675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.677569][ T5611] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 272.791341][ T9675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.793177][ T9675] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 272.839614][ T5611] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 272.839673][ T5611] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 272.839698][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.911321][ T5611] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 273.098077][ T5718] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 273.098113][ T5718] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.503771][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.504730][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.540426][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.541020][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.632832][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.642432][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.752583][ T5718] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 273.790623][ T5718] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 273.801471][ T5718] usb 2-1: USB disconnect, device number 72 [ 274.156767][ T5611] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 274.156793][ T5611] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 274.175418][ T5611] usb 4-1: USB disconnect, device number 63 [ 274.807543][ T5718] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 274.957896][ T5611] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 274.959144][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 274.982565][ T5718] usb 2-1: config 8 has an invalid interface number: 26 but max is 0 [ 274.982601][ T5718] usb 2-1: config 8 has no interface number 0 [ 274.982641][ T5718] usb 2-1: config 8 interface 26 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 274.982658][ T5718] usb 2-1: config 8 interface 26 altsetting 7 endpoint 0x3 has invalid maxpacket 29673, setting to 64 [ 274.982673][ T5718] usb 2-1: config 8 interface 26 altsetting 7 endpoint 0x1 has invalid maxpacket 32338, setting to 64 [ 274.982688][ T5718] usb 2-1: config 8 interface 26 has no altsetting 0 [ 274.986374][ T5718] usb 2-1: New USB device found, idVendor=0421, idProduct=04f0, bcdDevice=15.e3 [ 274.986404][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.986425][ T5718] usb 2-1: Product: syz [ 274.986438][ T5718] usb 2-1: Manufacturer: syz [ 274.986447][ T5718] usb 2-1: SerialNumber: syz [ 275.102395][ T9733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.106614][ T9733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.126725][ T5611] usb 6-1: Using ep0 maxpacket: 8 [ 275.135844][ T5611] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.148692][ T5611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.148757][ T5611] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 275.148786][ T5611] usb 6-1: config 1 interface 0 has no altsetting 1 [ 275.179409][ T5611] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 275.179440][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.179461][ T5611] usb 6-1: Product: syz [ 275.179476][ T5611] usb 6-1: Manufacturer: syz [ 275.179492][ T5611] usb 6-1: SerialNumber: syz [ 275.261477][ T5718] rndis_host 2-1:8.26: invalid descriptor buffer length [ 275.261500][ T5718] rndis_host 2-1:8.26: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 275.267537][ T5718] cdc_acm 2-1:8.26: invalid descriptor buffer length [ 275.286892][ T5718] usb 2-1: USB disconnect, device number 73 [ 275.408020][ T5611] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 275.408113][ T5611] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 275.438140][ T5611] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 275.438217][ T5611] cdc_ncm 6-1:1.1: bind() failure [ 275.441028][ T5611] usbtest 6-1:1.1: couldn't get endpoints, -22 [ 275.441093][ T5611] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 275.475746][ T5611] usb 6-1: USB disconnect, device number 14 [ 275.757573][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 275.844525][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 275.927573][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 275.930336][ T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.930370][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.930391][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 275.930405][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.977900][ T9] usb 4-1: config 0 descriptor?? [ 276.305498][ T9765] tipc: Can't bind to reserved service type 0 [ 276.456046][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 276.456165][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 276.475216][ T9] usb 4-1: USB disconnect, device number 64 [ 276.528343][ T5718] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 276.681209][ T5718] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.681233][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.681246][ T5718] usb 2-1: Product: syz [ 276.681254][ T5718] usb 2-1: Manufacturer: syz [ 276.681262][ T5718] usb 2-1: SerialNumber: syz [ 276.707667][ T5718] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 276.743759][ T5772] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.828417][ T5593] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 276.960552][ T5593] usb 6-1: device descriptor read/64, error -71 [ 276.964184][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.964719][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.209877][ T5593] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 277.337518][ T5593] usb 6-1: device descriptor read/64, error -71 [ 277.339728][ T9783] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1179'. [ 277.370899][ T38] audit: type=1800 audit(1778802218.025:10): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1180" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 277.453381][ T5593] usb usb6-port1: attempt power cycle [ 277.587511][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 277.654095][ T9788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.654654][ T9788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.747507][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 277.749838][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.749891][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.749919][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 277.751382][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.751409][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 277.751431][ T9] usb 4-1: Manufacturer: syz [ 277.755855][ T9] usb 4-1: config 0 descriptor?? [ 277.797545][ T5593] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 277.833985][ T5593] usb 6-1: device descriptor read/8, error -71 [ 278.067481][ T5593] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 278.088131][ T5593] usb 6-1: device descriptor read/8, error -71 [ 278.209024][ T5593] usb usb6-port1: unable to enumerate USB device [ 278.427732][ T5772] usb 2-1: Service connection timeout for: 256 [ 278.427759][ T5772] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 278.457145][ T5772] ath9k_htc: Failed to initialize the device [ 278.495973][ T5772] usb 2-1: ath9k_htc: USB layer deinitialized [ 278.638325][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.638859][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.706715][ T5772] usb 4-1: USB disconnect, device number 65 [ 278.739668][ T9] usb 2-1: USB disconnect, device number 74 [ 279.693692][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.704229][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.752344][ T9834] kthread_run failed with err -4 [ 280.043209][ T9853] netlink: 'syz.2.1202': attribute type 5 has an invalid length. [ 280.398195][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 280.425007][ T9868] : renamed from virt_wifi0 [ 280.558645][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 280.560423][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 280.560449][ T9] usb 2-1: config 0 has no interface number 0 [ 280.560496][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 280.563277][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 280.563304][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.563326][ T9] usb 2-1: Product: syz [ 280.563341][ T9] usb 2-1: Manufacturer: syz [ 280.563356][ T9] usb 2-1: SerialNumber: syz [ 280.632700][ T9] usb 2-1: config 0 descriptor?? [ 280.795852][ T9879] netlink: 'syz.5.1215': attribute type 19 has an invalid length. [ 280.795875][ T9879] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1215'. [ 281.213511][ T9897] block nbd3: not configured, cannot reconfigure [ 281.479698][ T5593] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 281.644401][ T5593] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.645052][ T5593] usb 4-1: not running at top speed; connect to a high speed hub [ 281.647041][ T5593] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.647066][ T5593] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.686825][ T5593] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 281.686859][ T5593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.686940][ T5593] usb 4-1: Product: syz [ 281.686956][ T5593] usb 4-1: Manufacturer: syz [ 281.686971][ T5593] usb 4-1: SerialNumber: syz [ 281.794344][ T5593] usb 4-1: 0:1 : does not exist [ 281.797009][ T5593] usb 4-1: unit 3 not found! [ 281.797029][ T5593] usb 4-1: unit 13 not found! [ 281.953285][ T5593] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 281.953356][ T5593] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 282.293232][ T9921] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 282.293259][ T9921] netdevsim netdevsim5: Falling back to sysfs fallback for:  [ 282.512115][ T9] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 282.512173][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 282.512190][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 282.512273][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 282.616253][ T9] usb 2-1: USB disconnect, device number 75 [ 282.659822][ T5593] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 282.684770][ T5593] usb 4-1: USB disconnect, device number 66 [ 283.016519][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.017134][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.377561][ T5690] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 283.528266][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 283.536064][ T5690] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 283.536093][ T5690] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.536114][ T5690] usb 2-1: config 0 has no interface number 0 [ 283.577580][ T5690] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 283.577613][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.577633][ T5690] usb 2-1: Product: syz [ 283.577648][ T5690] usb 2-1: Manufacturer: syz [ 283.577663][ T5690] usb 2-1: SerialNumber: syz [ 283.583531][ T5690] usb 2-1: config 0 descriptor?? [ 283.806867][ T5690] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 283.806970][ T5690] uvcvideo 2-1:0.31: No valid video chain found. [ 283.829795][ T5690] usb 2-1: USB disconnect, device number 76 [ 284.174820][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 284.197578][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 284.328243][ T9] usb 6-1: device descriptor read/64, error -71 [ 284.418902][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.424270][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.471850][T10013] bond0: entered promiscuous mode [ 284.578316][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 284.707607][ T9] usb 6-1: device descriptor read/64, error -71 [ 284.823711][ T9] usb usb6-port1: attempt power cycle [ 285.189995][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 285.208184][ T9] usb 6-1: device descriptor read/8, error -71 [ 285.457628][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 285.480120][ T9] usb 6-1: device descriptor read/8, error -71 [ 285.557828][ T5593] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 285.591066][ T9] usb usb6-port1: unable to enumerate USB device [ 285.740898][ T5593] usb 2-1: Using ep0 maxpacket: 32 [ 285.745922][ T5593] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 285.745952][ T5593] usb 2-1: config 0 has no interface number 0 [ 285.769847][ T5593] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 285.769881][ T5593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.769903][ T5593] usb 2-1: Product: syz [ 285.769919][ T5593] usb 2-1: Manufacturer: syz [ 285.769935][ T5593] usb 2-1: SerialNumber: syz [ 285.775172][ T5593] usb 2-1: config 0 descriptor?? [ 285.824291][ T5593] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 286.104068][ T5593] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 286.177624][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 286.263535][ T5593] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 286.307594][ T9] usb 4-1: device descriptor read/64, error -71 [ 286.471408][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 286.472866][ T5690] usb 2-1: USB disconnect, device number 77 [ 286.548121][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 286.565817][ T5690] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 286.606274][ T5690] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 286.619612][ T5690] quatech2 2-1:0.51: device disconnected [ 286.678467][ T9] usb 4-1: device descriptor read/64, error -71 [ 286.684240][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.684919][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.686582][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.715521][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.734440][T10094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.735288][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.755855][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.773966][T10094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.789869][ T9] usb usb4-port1: attempt power cycle [ 287.187481][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 287.216250][ T9] usb 4-1: device descriptor read/8, error -71 [ 287.347504][ T5611] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 287.447515][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 287.468587][ T9] usb 4-1: device descriptor read/8, error -71 [ 287.497733][ T5762] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 287.500362][ T5611] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.500413][ T5611] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 287.500494][ T5611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 287.500521][ T5611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.516009][ T5611] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 287.516041][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 287.516114][ T5611] usb 6-1: Product: syz [ 287.516130][ T5611] usb 6-1: Manufacturer: syz [ 287.516144][ T5611] usb 6-1: SerialNumber: syz [ 287.530373][ T5611] usb 6-1: config 0 descriptor?? [ 287.580425][ T9] usb usb4-port1: unable to enumerate USB device [ 287.680566][ T5611] rc_core: IR keymap rc-imon-rsc not found [ 287.680588][ T5611] Registered IR keymap rc-empty [ 287.683959][ T5611] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 287.703610][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.703660][ T5762] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.703683][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.705112][ T5611] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 287.729176][ T5762] usb 2-1: config 0 descriptor?? [ 287.747642][ T5611] imon_raw 6-1:0.0: probe with driver imon_raw failed with error -90 [ 287.940467][ T5762] usbhid 2-1:0.0: can't add hid device: -71 [ 287.940585][ T5762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 288.012529][ T5762] usb 2-1: USB disconnect, device number 78 [ 288.021462][ T5611] usb 6-1: USB disconnect, device number 23 [ 288.449845][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.450904][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.569143][ T5762] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 288.739599][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.739652][ T5762] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 288.739678][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.744756][ T5762] usb 2-1: config 0 descriptor?? [ 289.530539][ T5762] usbhid 2-1:0.0: can't add hid device: -71 [ 289.549222][ T5762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 289.594448][ T5762] usb 2-1: USB disconnect, device number 79 [ 289.845206][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.861048][ T5690] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 289.885478][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.890090][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.915107][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.916104][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.061029][ T5690] usb 6-1: Using ep0 maxpacket: 32 [ 290.072981][ T5690] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 290.073014][ T5690] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 290.073035][ T5690] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 290.075690][ T5690] usb 6-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice= 0.40 [ 290.075718][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.075737][ T5690] usb 6-1: Product: syz [ 290.075750][ T5690] usb 6-1: Manufacturer: syz [ 290.075765][ T5690] usb 6-1: SerialNumber: syz [ 290.443368][ T5690] gspca_main: STV06xx-2.14.0 probing 046d:08f5 [ 290.443471][ T5690] gspca_stv06xx: st6422 sensor detected [ 290.698975][ T5690] STV06xx 6-1:1.0: probe with driver STV06xx failed with error -71 [ 290.699868][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.830366][ T5762] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 290.843258][ T5690] usb 6-1: USB disconnect, device number 24 [ 290.970538][ T5762] usb 2-1: device descriptor read/64, error -71 [ 291.237796][ T5762] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 291.310965][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.380249][ T5762] usb 2-1: device descriptor read/64, error -71 [ 291.491956][ T5762] usb usb2-port1: attempt power cycle [ 291.722653][T10185] netlink: 'syz.5.1298': attribute type 4 has an invalid length. [ 291.837506][ T5762] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 291.858201][ T5762] usb 2-1: device descriptor read/8, error -71 [ 292.060903][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.108303][ T5762] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 292.130169][ T5762] usb 2-1: device descriptor read/8, error -71 [ 292.191650][ T5612] Bluetooth: hci4: command tx timeout [ 292.242098][ T5762] usb usb2-port1: unable to enumerate USB device [ 292.421476][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1301'. [ 292.614392][T10196] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.614413][T10196] overlayfs: failed to set xattr on upper [ 292.614418][T10196] overlayfs: ...falling back to redirect_dir=nofollow. [ 292.614423][T10196] overlayfs: ...falling back to index=off. [ 292.614427][T10196] overlayfs: ...falling back to uuid=null. [ 292.680134][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.712209][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'. [ 292.712235][T10201] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1301'. [ 292.712259][T10201] veth1_to_bridge: entered allmulticast mode [ 292.712756][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1301'. [ 292.712775][T10201] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1301'. [ 292.922181][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.925681][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.945972][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.946575][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.953585][T10210] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1305'. [ 293.103647][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.511151][T10214] FAULT_INJECTION: forcing a failure. [ 293.511151][T10214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.511179][T10214] CPU: 1 UID: 0 PID: 10214 Comm: syz.2.1307 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.511195][T10214] Tainted: [L]=SOFTLOCKUP [ 293.511200][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.511221][T10214] Call Trace: [ 293.511226][T10214] [ 293.511232][T10214] dump_stack_lvl+0xe8/0x150 [ 293.511250][T10214] should_fail_ex+0x46b/0x600 [ 293.511268][T10214] _copy_from_user+0x2d/0xb0 [ 293.511288][T10214] __sys_bind+0x1cc/0x410 [ 293.511304][T10214] ? __pfx___sys_bind+0x10/0x10 [ 293.511324][T10214] ? __pfx_ksys_write+0x10/0x10 [ 293.511343][T10214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.511355][T10214] __x64_sys_bind+0x7a/0x90 [ 293.511369][T10214] do_syscall_64+0x15f/0xf80 [ 293.511381][T10214] ? trace_irq_disable+0x3b/0x140 [ 293.511397][T10214] ? clear_bhb_loop+0x40/0x90 [ 293.511411][T10214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.511423][T10214] RIP: 0033:0x7fb61c49ce59 [ 293.511435][T10214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.511452][T10214] RSP: 002b:00007fb61a6f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 293.511465][T10214] RAX: ffffffffffffffda RBX: 00007fb61c715fa0 RCX: 00007fb61c49ce59 [ 293.511474][T10214] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000005 [ 293.511482][T10214] RBP: 00007fb61a6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.511489][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.511496][T10214] R13: 00007fb61c716038 R14: 00007fb61c715fa0 R15: 00007fff92e5fe58 [ 293.511513][T10214] [ 293.762196][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.762770][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.769125][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.769666][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.002096][ T5772] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 294.178916][ T5772] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 294.178944][ T5772] usb 2-1: config 8 has no interface number 0 [ 294.178980][ T5772] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 294.179003][ T5772] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 294.179023][ T5772] usb 2-1: config 8 interface 177 has no altsetting 0 [ 294.179050][ T5772] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 294.179068][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.187078][T10219] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 294.187197][T10219] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 294.270714][ T5612] Bluetooth: hci4: command tx timeout [ 294.303409][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 294.685537][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.692878][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.799317][ T13] bridge0: port 3(team0) entered disabled state [ 294.817471][ T5772] ir_toy 2-1:8.177: could not write reset command: -110 [ 294.817766][ T5772] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 294.864993][T10252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.865599][T10252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.899032][ T13] bridge_slave_1: left allmulticast mode [ 294.899067][ T13] bridge_slave_1: left promiscuous mode [ 294.899349][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.978901][ T13] bridge_slave_0: left allmulticast mode [ 294.978925][ T13] bridge_slave_0: left promiscuous mode [ 294.979086][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.077515][ T5762] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 295.705352][T10261] FAULT_INJECTION: forcing a failure. [ 295.705352][T10261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.705389][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.2.1316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.705417][T10261] Tainted: [L]=SOFTLOCKUP [ 295.705424][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.705435][T10261] Call Trace: [ 295.705443][T10261] [ 295.705451][T10261] dump_stack_lvl+0xe8/0x150 [ 295.705470][T10261] should_fail_ex+0x46b/0x600 [ 295.705489][T10261] _copy_to_user+0x31/0xb0 [ 295.705517][T10261] simple_read_from_buffer+0xe1/0x170 [ 295.705547][T10261] proc_fail_nth_read+0x1be/0x230 [ 295.705576][T10261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.705604][T10261] ? rw_verify_area+0x2ac/0x4e0 [ 295.705625][T10261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.705640][T10261] vfs_read+0x212/0xa80 [ 295.705659][T10261] ? __pfx_vfs_read+0x10/0x10 [ 295.705682][T10261] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 295.705714][T10261] ? lockdep_hardirqs_on+0x7a/0x110 [ 295.705744][T10261] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.705774][T10261] ? mutex_lock_nested+0x152/0x1d0 [ 295.705791][T10261] ? fdget_pos+0x252/0x320 [ 295.705809][T10261] ksys_read+0x156/0x270 [ 295.705826][T10261] ? __pfx_ksys_read+0x10/0x10 [ 295.705858][T10261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.705881][T10261] do_syscall_64+0x15f/0xf80 [ 295.705899][T10261] ? trace_irq_disable+0x3b/0x140 [ 295.705928][T10261] ? clear_bhb_loop+0x40/0x90 [ 295.705950][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.705963][T10261] RIP: 0033:0x7fb61c45d68e [ 295.705975][T10261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.705985][T10261] RSP: 002b:00007fb61a6f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.705998][T10261] RAX: ffffffffffffffda RBX: 00007fb61a6f66c0 RCX: 00007fb61c45d68e [ 295.706013][T10261] RDX: 000000000000000f RSI: 00007fb61a6f60a0 RDI: 0000000000000006 [ 295.706026][T10261] RBP: 00007fb61a6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.706038][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.706051][T10261] R13: 00007fb61c716038 R14: 00007fb61c715fa0 R15: 00007fff92e5fe58 [ 295.706083][T10261] [ 296.088076][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.168624][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.192407][ T13] bond0 (unregistering): Released all slaves [ 296.347658][ T4920] Bluetooth: hci4: command tx timeout [ 296.349106][ T5266] 8021q: adding VLAN 0 to HW filter on device eth9 [ 296.689434][ T4920] Bluetooth: hci2: command 0x1003 tx timeout [ 296.689644][ T5612] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 296.743086][ T5611] usb 2-1: USB disconnect, device number 84 [ 296.898613][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.898943][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.899245][T10142] bridge_slave_0: entered allmulticast mode [ 296.902658][T10142] bridge_slave_0: entered promiscuous mode [ 297.070797][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 297.070821][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 297.160409][T10286] overlay: filesystem on ./file0 not supported as upperdir [ 297.501748][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.502068][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.502363][T10142] bridge_slave_1: entered allmulticast mode [ 297.507130][T10142] bridge_slave_1: entered promiscuous mode [ 297.757291][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.817754][ T5593] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 297.867742][ T39] INFO: task kworker/0:2:822 blocked for more than 143 seconds. [ 297.867770][ T39] Tainted: G L syzkaller #0 [ 297.867782][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.867791][ T39] task:kworker/0:2 stat[ 297.867791][ T39] task:kworker/0:2 state:D stack:21384 pid:822 tgid:822 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 297.867844][ T39] Workqueue: usb_hub_wq hub_event [ 297.867872][ T39] Call Trace: [ 297.867879][ T39] [ 297.867893][ T39] __schedule+0x16f9/0x5500 [ 297.867934][ T39] ? arch_stack_walk+0x11b/0x150 [ 297.867993][ T39] ? __pfx___schedule+0x10/0x10 [ 297.868032][ T39] ? schedule+0x90/0x360 [ 297.868063][ T39] schedule+0x164/0x360 [ 297.868092][ T39] schedule_timeout+0xc3/0x2c0 [ 297.868123][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 297.868152][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.868189][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.868219][ T39] ? wait_for_completion+0x274/0x5e0 [ 297.868250][ T39] wait_for_completion+0x2cc/0x5e0 [ 297.868291][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 297.868334][ T39] i2c_del_adapter+0x5c0/0x790 [ 297.868363][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.868400][ T39] ? dvb_usbv2_exit+0x4b8/0xb80 [ 297.868424][ T39] ? __pfx_i2c_del_adapter+0x10/0x10 [ 297.868457][ T39] ? dvb_usbv2_exit+0x94c/0xb80 [ 297.868484][ T39] dvb_usbv2_probe+0x4c0/0x3c20 [ 297.868556][ T39] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 297.868578][ T39] ? __pm_runtime_set_status+0x99c/0xc70 [ 297.868616][ T39] usb_probe_interface+0x659/0xc70 [ 297.868654][ T39] ? __pfx_usb_probe_interface+0x10/0x10 [ 297.868680][ T39] really_probe+0x267/0xaf0 [ 297.868718][ T39] __driver_probe_device+0x1e2/0x350 [ 297.868751][ T39] driver_probe_device+0x4f/0x240 [ 297.868784][ T39] __device_attach_driver+0x270/0x410 [ 297.868817][ T39] bus_for_each_drv+0x25b/0x2f0 [ 297.868842][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 297.868873][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 297.868897][ T39] ? rt_spin_unlock+0x160/0x200 [ 297.868935][ T39] __device_attach+0x2c8/0x450 [ 297.868967][ T39] ? __pfx___device_attach+0x10/0x10 [ 297.868995][ T39] ? rt_spin_unlock+0x160/0x200 [ 297.869027][ T39] device_initial_probe+0xa1/0xd0 [ 297.869057][ T39] bus_probe_device+0x12d/0x220 [ 297.869099][ T39] device_add+0x7ec/0xb90 [ 297.875888][ T39] usb_set_configuration+0x1a87/0x2110 [ 297.875958][ T39] usb_generic_driver_probe+0x8d/0x150 [ 297.875987][ T39] usb_probe_device+0x1c4/0x3b0 [ 297.876015][ T39] ? __pfx_usb_probe_device+0x10/0x10 [ 297.876040][ T39] really_probe+0x267/0xaf0 [ 297.876076][ T39] __driver_probe_device+0x1e2/0x350 [ 297.876106][ T39] driver_probe_device+0x4f/0x240 [ 297.876138][ T39] __device_attach_driver+0x270/0x410 [ 297.876170][ T39] bus_for_each_drv+0x25b/0x2f0 [ 297.876196][ T39] ? __pfx___device_attach_driver+0x10/0x10 [ 297.876227][ T39] ? __pfx_bus_for_each_drv+0x10/0x10 [ 297.876251][ T39] ? rt_spin_unlock+0x160/0x200 [ 297.876284][ T39] __device_attach+0x2c8/0x450 [ 297.876313][ T39] ? __pfx___device_attach+0x10/0x10 [ 297.876355][ T39] ? rt_spin_unlock+0x160/0x200 [ 297.876386][ T39] device_initial_probe+0xa1/0xd0 [ 297.876416][ T39] bus_probe_device+0x12d/0x220 [ 297.876441][ T39] device_add+0x7ec/0xb90 [ 297.876474][ T39] usb_new_device+0x9f8/0x16e0 [ 297.876506][ T39] ? __pfx_usb_new_device+0x10/0x10 [ 297.876531][ T39] hub_event+0x2a49/0x4f60 [ 297.876597][ T39] ? __pfx_hub_event+0x10/0x10 [ 297.876622][ T39] ? process_one_work+0x8be/0x1630 [ 297.876660][ T39] ? process_one_work+0x8be/0x1630 [ 297.876682][ T39] process_one_work+0x98b/0x1630 [ 297.876724][ T39] ? __pfx_process_one_work+0x10/0x10 [ 297.876750][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.876801][ T39] worker_thread+0xb49/0x1140 [ 297.876837][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.876882][ T39] kthread+0x388/0x470 [ 297.876904][ T39] ? __pfx_worker_thread+0x10/0x10 [ 297.876936][ T39] ? __pfx_kthread+0x10/0x10 [ 297.876959][ T39] ret_from_fork+0x514/0xb70 [ 297.876986][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 297.877010][ T39] ? __switch_to+0xc79/0x1410 [ 297.877043][ T39] ? __pfx_kthread+0x10/0x10 [ 297.877065][ T39] ret_from_fork_asm+0x1a/0x30 [ 297.877108][ T39] [ 297.885178][ T39] [ 297.885178][ T39] Showing all locks held in the system: [ 297.885193][ T39] 3 locks held by kworker/u8:0/12: [ 297.885205][ T39] #0: ffff88813fe4a938 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.885266][ T39] #1: ffffc90000117c40 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.885318][ T39] #2: ffffffff8e1c8360 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6d/0x1b0 [ 297.885380][ T39] 5 locks held by kworker/u8:1/13: [ 297.885391][ T39] #0: ffff88801b6d6138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.885440][ T39] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.885489][ T39] #2: ffffffff8f583300 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 297.885539][ T39] #3: ffffffff8f5927b8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 297.885587][ T39] #4: ffff88805f3108d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_leave+0x182/0x230 [ 297.885633][ T39] 4 locks held by pr/legacy/17: [ 297.885645][ T39] #0: ffffffff8e1ba4e0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 297.885698][ T39] #1: ffffffff8e0a1dd8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 297.885763][ T39] #2: ffffffff99dc6bf8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 297.885828][ T39] #3: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 297.885878][ T39] 1 lock held by khungtaskd/39: [ 297.885889][ T39] #0: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 297.885948][ T39] 5 locks held by kworker/0:2/822: [ 297.885960][ T39] #0: ffff88801ab62138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.886009][ T39] #1: ffffc90005707c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.886059][ T39] #2: ffff88802a22e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 297.886106][ T39] #3: ffff88805fe74210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 297.886157][ T39] #4: ffff88803b47b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 297.886236][ T39] 1 lock held by syslogd/4953: [ 297.886248][ T39] #0: ffff88803367f398 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 297.886300][ T39] 3 locks held by klogd/4960: [ 297.886312][ T39] #0: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 297.886356][ T39] #1: ffff88803367f398 (&si->socket.wq.wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1e0 [ 297.886407][ T39] #2: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 297.886457][ T39] 2 locks held by getty/5359: [ 297.886467][ T39] #0: ffff888036a400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.886518][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 297.886566][ T39] 6 locks held by kworker/0:4/5593: [ 297.886576][ T39] #0: ffff88801ab62138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.892952][ T39] #1: ffffc90004297c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.893006][ T39] #2: ffff88802a476210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 297.893053][ T39] #3: ffff888024ce8658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 297.893100][ T39] #4: ffff888026916f58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 297.893147][ T39] #5: ffffffff8ee3b020 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 297.893197][ T39] 1 lock held by syz-executor/5605: [ 297.893208][ T39] #0: ffffffff8de0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 297.893262][ T39] 6 locks held by kworker/0:6/5762: [ 297.893287][ T39] #0: ffff88801ab62138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.893337][ T39] #1: ffffc90005c77c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.893386][ T39] #2: ffff88802a486210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 297.893433][ T39] #3: ffff88802a48b658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 297.893481][ T39] #4: ffff88802a4cf158 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 297.893528][ T39] #5: ffffffff8ee3b020 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 297.893577][ T39] 4 locks held by udevd/5768: [ 297.893588][ T39] #0: ffff888042152608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 297.893641][ T39] #1: ffff88804efb7078 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 297.893687][ T39] #2: ffff888026d27f08 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 297.893734][ T39] #3: ffff88805fe74210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 297.893782][ T39] 4 locks held by kworker/u8:11/5799: [ 297.893794][ T39] #0: ffff88801fed6138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.893843][ T39] #1: ffffc90005ba7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.893894][ T39] #2: ffff888035faa0d0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 297.893954][ T39] #3: ffff888036b48cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 297.894009][ T39] 1 lock held by syz-executor/10142: [ 297.894020][ T39] #0: ffffffff8f5927b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 297.894071][ T39] 1 lock held by syz.2.1330/10301: [ 297.894083][ T39] #0: ffffffff8f5927b8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bf/0x1e30 [ 297.894132][ T39] 5 locks held by dhcpcd-run-hook/10307: [ 297.894143][ T39] #0: ffff8880379e58d0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xba/0x1510 [ 297.894193][ T39] #1: ffff8880379e5958 (&sig->exec_update_lock){++++}-{4:4}, at: exec_mmap+0x8e/0x440 [ 297.894242][ T39] #2: ffff8880381edeb0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 297.894293][ T39] #3: ffff888038447468 (&anon_vma->rwsem){++++}-{4:4}, at: unlink_anon_vmas+0x11b/0x730 [ 297.894343][ T39] #4: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 297.898527][ T39] [ 297.898533][ T39] ============================================= [ 297.898533][ T39] [ 297.898554][ T39] NMI backtrace for cpu 0 [ 297.898572][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.898598][ T39] Tainted: [L]=SOFTLOCKUP [ 297.898605][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.898616][ T39] Call Trace: [ 297.898624][ T39] [ 297.898632][ T39] dump_stack_lvl+0xe8/0x150 [ 297.898659][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 297.898685][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.898710][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 297.898736][ T39] sys_info+0x135/0x170 [ 297.898758][ T39] watchdog+0xfd3/0x1030 [ 297.898791][ T39] ? watchdog+0x1c9/0x1030 [ 297.898822][ T39] kthread+0x388/0x470 [ 297.898841][ T39] ? __pfx_watchdog+0x10/0x10 [ 297.898865][ T39] ? __pfx_kthread+0x10/0x10 [ 297.898885][ T39] ret_from_fork+0x514/0xb70 [ 297.898910][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 297.898938][ T39] ? __switch_to+0xc79/0x1410 [ 297.898969][ T39] ? __pfx_kthread+0x10/0x10 [ 297.898989][ T39] ret_from_fork_asm+0x1a/0x30 [ 297.899028][ T39] [ 297.899035][ T39] Sending NMI from CPU 0 to CPUs 1: [ 297.899064][ C1] NMI backtrace for cpu 1 [ 297.899079][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.899101][ C1] Tainted: [L]=SOFTLOCKUP [ 297.899107][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.899117][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 297.899136][ C1] Code: e8 3e fb 7c fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f 95 e6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 4c ef 05 cc 44 89 f9 80 e1 07 [ 297.899150][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 297.899170][ C1] RAX: 1ffffffff33b8d00 RBX: 00000000000003fd RCX: 0000000000000000 [ 297.899182][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 297.899192][ C1] RBP: ffffffff99dc6eb0 R08: 0000000000000000 R09: 0000000000000000 [ 297.899202][ C1] R10: dffffc0000000000 R11: ffffffff85482090 R12: dffffc0000000000 [ 297.899214][ C1] R13: 0000000000000000 R14: ffffffff99dc6c20 R15: 0000000000000000 [ 297.899225][ C1] FS: 0000000000000000(0000) GS:ffff888125dc7000(0000) knlGS:0000000000000000 [ 297.899240][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.899251][ C1] CR2: 00005556e8ce0950 CR3: 000000002df4e000 CR4: 00000000003526f0 [ 297.899266][ C1] Call Trace: [ 297.899273][ C1] [ 297.899280][ C1] wait_for_lsr+0x1aa/0x2f0 [ 297.899306][ C1] serial8250_console_write+0x120d/0x1b90 [ 297.899337][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 297.899361][ C1] ? console_flush_one_record+0xfa/0xb90 [ 297.899386][ C1] ? console_flush_one_record+0x48f/0xb90 [ 297.899411][ C1] console_flush_one_record+0x68b/0xb90 [ 297.899437][ C1] ? console_flush_one_record+0xfa/0xb90 [ 297.899461][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 297.899485][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.899511][ C1] legacy_kthread_func+0x1b6/0x250 [ 297.899534][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 297.899556][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 297.899580][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 297.899606][ C1] kthread+0x388/0x470 [ 297.899622][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 297.899643][ C1] ? __pfx_kthread+0x10/0x10 [ 297.899659][ C1] ret_from_fork+0x514/0xb70 [ 297.899678][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 297.899695][ C1] ? __switch_to+0xc79/0x1410 [ 297.899718][ C1] ? __pfx_kthread+0x10/0x10 [ 297.899734][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.899760][ C1] [ 297.904505][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 297.904525][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.904551][ T39] Tainted: [L]=SOFTLOCKUP [ 297.904558][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.904569][ T39] Call Trace: [ 297.904576][ T39] [ 297.904584][ T39] vpanic+0x56c/0xa60 [ 297.904615][ T39] ? __pfx___schedule+0x10/0x10 [ 297.904643][ T39] ? __pfx_vpanic+0x10/0x10 [ 297.904677][ T39] panic+0xc5/0xd0 [ 297.904702][ T39] ? __pfx_panic+0x10/0x10 [ 297.904729][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 297.904762][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 297.904809][ T39] watchdog+0x102c/0x1030 [ 297.904842][ T39] ? watchdog+0x1c9/0x1030 [ 297.904873][ T39] kthread+0x388/0x470 [ 297.904893][ T39] ? __pfx_watchdog+0x10/0x10 [ 297.904959][ T39] ? __pfx_kthread+0x10/0x10 [ 297.904980][ T39] ret_from_fork+0x514/0xb70 [ 297.905005][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 297.905027][ T39] ? __switch_to+0xc79/0x1410 [ 297.905057][ T39] ? __pfx_kthread+0x10/0x10 [ 297.905081][ T39] ret_from_fork_asm+0x1a/0x30 [ 297.905119][ T39] [ 297.905482][ T39] Kernel Offset: disabled