last executing test programs: 14.292500286s ago: executing program 1 (id=766): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, 0x0, 0x0, 0x48060}], 0x1, 0x200000d0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="27050200340f14000600002fb96dbcf70606000017000000", 0x18}], 0x1}, 0x9cdc2384256b08bc) 10.493023265s ago: executing program 1 (id=776): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004886}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/202, 0xca, 0x1, &(0x7f00000001c0)=""/234, 0xea}, &(0x7f00000002c0)=0x40) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$tipc(0x1e, 0x5, 0x0) 10.28181883s ago: executing program 3 (id=778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x11}}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) (async) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) (async) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}, 0x1, 0x0, 0x0, 0x24068890}, 0x0) (async) r5 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db0900001ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c58dc5efae2d04101617fe8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r5, r1}, &(0x7f00000005c0)=""/194, 0xc2, &(0x7f0000000580)={&(0x7f0000000340)={'blake2b-160\x00'}}) (async) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x90002, 0x0) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000380)="0f01bb00980000b9800000c00f3235001000000f306567660f38821b0f2247b98a0300000f322e0f01c5c7442400f60b2064c744240203000000c7442406000000000f011c24b9800000c00f3235008000000f30f20f2a9600800000c4c3f540520f50", 0x63}], 0x1, 0x30, &(0x7f0000000280)=[@flags={0x3, 0x200040}], 0x1) 9.962578802s ago: executing program 3 (id=780): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) 9.20584029s ago: executing program 1 (id=784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) 9.192254268s ago: executing program 2 (id=785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.041460347s ago: executing program 2 (id=789): r0 = socket$inet6(0xa, 0x802, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=0x1, 0x36, 0x0, 0x9, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='veth0_to_hsr\x00'}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x1000, 0x3, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x12, &(0x7f0000000a00)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2d, 0x7, 0x5, 0xec20, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, r9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x8, 0xa, 0x56b876257ddb63a1, 0x10}], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x44, 0x0, @fd=r5, 0x1, 0x0, 0x8, 0x3, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7, 0x0, [{0x21a, 0x0, 0x4}, {0x8d, 0x0, 0x9}, {0xa4e, 0x0, 0x2}, {0x993, 0x0, 0x2}, {0xa75, 0x0, 0x2}, {0xb82, 0x0, 0x7fffffff}, {0x83c, 0x0, 0x80000000}]}) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x4ea}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r12, 0x4068aea3, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x0, 0x4, 0x6a, @mcast1, @empty, 0x10, 0x0, 0x1, 0x1}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x4, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r10, r1, 0x0, 0x0, @void}, 0x10) 6.851965836s ago: executing program 3 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$netlink(0x10, 0x3, 0x9) socket$inet6(0xa, 0x3, 0x87) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x80800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32bc, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r2, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r4}, 0x80, 0x0}}, {{&(0x7f0000000100)=@can={0x1d, r4}, 0x80, 0x0}}], 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x34, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ce0ab50801222c01e03f0000000109021b00014000000109041300016172d100090502", @ANYRES16], 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ce0ab50801222c01e03f0000000109021b00014000000109041300016172d100090502", @ANYRES16], 0x0) 6.195902681s ago: executing program 1 (id=792): syz_usb_connect(0x0, 0x34, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x49, 0x8b, 0x81, 0x40, 0x93b, 0xa005, 0xd81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5c, 0x0, 0x1, 0x2f, 0x81, 0xf5, 0x0, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x3, 0x5, 0xe8, [@generic={0x7, 0x5, "9445d7c2a6"}]}}]}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x8, 0x1c8d648658c41222, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x8, 0x1ff, 0x6}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', r1, r2, 0x5, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 5.996176122s ago: executing program 3 (id=793): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.005907823s ago: executing program 4 (id=797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xab}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x1, 0x7, 0xff, 0x2, 0x68, 0x5, 0x10, 0x2, 0x0, 0x101, 0x514, 0x0, 0x9, 0x3c36, 0x3, 0x4], 0x100000, 0x210}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.549847662s ago: executing program 4 (id=798): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.336852429s ago: executing program 4 (id=799): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000b400000034000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x464101, 0x0) 4.173976882s ago: executing program 1 (id=800): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) 4.15967633s ago: executing program 4 (id=801): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x40047459, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb83a95deaeaeb38c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r6, 0xe0e, 0x6ce2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x24000000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="080000000000000002004e20ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2300"/1040], 0x410) 4.100347949s ago: executing program 0 (id=802): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.597955648s ago: executing program 2 (id=803): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) sendmsg$kcm(r0, 0x0, 0x9cdc2384256b08bc) 3.529807476s ago: executing program 4 (id=804): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x2, 0xbc4, [0x200000000100, 0x0, 0x0, 0x200000000a66, 0x200000000a96], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000110000000800000060076d6163766c616e31000000000000000070696d367265673100000000000000006873723000000000000000000000000062617461647630000000000000000000a06fe064a4edff00ffffffffaaaaaaaaaa27ff00ff00feff8e080000fe08000036090000636c75737465720000000000000000000000000000000000000000000000000010000000000000000d0000000200000000010000000000007533320000000000000000000000000000000000000000000000000000000000c007000000000000000000000000080001000000000000000500000002000000ff03000002000000c503883a02000000650800000200000001000000020000000900000000000000030000000300000002000000010000004800000001000000180900000a00000000ffffff080000000100000006000000de000000018000000100000004000000dd0f0000ffffff7f030000008900000008000000000001000100000004000000050000000000000001000000080000000309000010000000000000003afb0000030000000f00000002000000010000000000000009000000000000006100000002000000580e00000100000004000000000000000700000003000000b21e000001000000040000000300000074030000bf0000001802000010000000010400000000000086ffffff07000000e7000000001000000700000004000000001000000700000009000000ff7f00000900000002000000060000000c000000ff07000001000000060400000600000001000000090000000100000009000000030000000180000002000000030000000300000005000000030000000004000001000000f8ffffff000000000400000003000000050000000000000007000000010000000900000000000006ffff00000000000001000000010000000100000081ae00000a0000000104000004000000000000000500000009000000090000005661000007000000060000000d000000de00000078b90000ba73000000c000000700000003000000090000000100000000020000e20000007f000000b60000000900000003000000ffffffff000000008100000003000000800000000000000009000000020000000500000001000000d6000000000000000300000007000000faffffff0000000001000000470a00000500000001000000ff0f00000800000000000000720b0000060000000500000080000000008000000500000006000000010400000100000006000000010000000a05000008000000010000000900000000000000060000000100000010000000010000000f000000020000000100000002000000010000000200000004"]}, 0x47f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x80}}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x13) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.79204138s ago: executing program 3 (id=805): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(0xffffffffffffffff, 0x8) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000004d040000000000002d000000000000005504030001ed0a0025000000170000001c0080ff000000007b0a00fe000000006e04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379d00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a607c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a59234ed56bc83987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d06c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292cfbe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d700ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec52d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d105800f000000000000ef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f6845b6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd51015dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d0800bf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3aee1ff8c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9000080ac970cc4fd0847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000000000000000000000000000be9ab5e329e962d96a283b6182c1cf6c8e350a7784ca39ecb9178f4118559f1eccb0b738a255146ebbc4357c16f94cd4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.476134012s ago: executing program 0 (id=806): r0 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.244166286s ago: executing program 1 (id=807): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sync() (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0) (async, rerun: 32) syz_open_dev$midi(0x0, 0x500, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000002000000050000000700000000000000", @ANYRES32, @ANYBLOB="000000000000f600000000000000000000000000eee9fd98e91a2a86e163de1b68fadc7c04947320e7f98615897dc389e21fd7d0de1d0b0f8f252d7f75586856a7b5534f81a0698e497b2e4ecdae088f399b074da85ebf46830a33f349fd92b54096358113e92a5a02fd93515ef9b95a8fe8e567198e52d0cc3d18b9cdf9024857d2d237ef4920d36455747774079190b08e432cb2c407a35eb4b7ef636effd251071fc55fc7a939ff9b4edb8198c94e253eb2cb0985312b8cb58c1f2ba1e491225fcb0c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000180)={0x10}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r8, 0x0, 0x0) 1.125116735s ago: executing program 2 (id=808): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0xffffffffffffffff, 0x1) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x40) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) syz_usb_connect(0x0, 0x263, &(0x7f0000000480)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x263, &(0x7f0000000480)=ANY=[], 0x0) 1.082418113s ago: executing program 0 (id=809): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000004f00000054000000000000009500000000000600ef0285b73eae795b05ad261777db75186baf0b2792ad03f20472662181fe046096c5df696334e2d836395560230500ef286f21c974d520c247fd200851f90b2dd5e5f6b23909a23ee27007dae2a0fdf92809a931196df3be84781f7ecafaf33acf7e01a23999fdfb4b490f6cfe5edf2740576acb262e0de2b8e288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2058455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc80f7d53ae51691362ba21394bd614ec41f636ec0e299e370f5631acfab5a6519a36f963679457241bc21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55149f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f43789f5208fd84f2b34f7853d9c52848dd17c5796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f766c3cb8cd6a4a446936895dc5b44d224a0b3c2ca8087486aead1d034d98832ad677b28b10ed58f8de2d5ae49ba35be16888ea8da9bf33f91a6c5056af135b53e191b0dee15f0d8ab12abc04eedfeb65355400900000000000000b4717107bf564a2350564f5ef2bb8e9274d5d40af19b0afe0c774b562378fc3dbf8be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742b00802b498fef8490b52ad11085ce4a028c7af46774b391e2124fcd93ff05ff1ad0da384ff0801734c58aad0eba11e3e817c3b651bb99090189ee00012f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc496037c1de1b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31b397229ae3fb66ffe0e9913d32301c844e58f000096f5766dc1ca5e8cfee332a288090000008000000000cb88186bcd36a2ecce33a3048f6f97e14dac56e84aba0bdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a826d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b000135d28f977ab43670412afe8361b60bf37058fdf9cdf22d8da0f2d1cc813cad61011e3060badbe396b3fb928c0500000000000000770e11c5043535696289b227c6b313e2852c52f9975cd124771bef02f431afe50e0000df13ec1a2ba3e4bc7285bae2b98955a30dcc99ae25a56898b95424c20dfe77c34000000073830d7deb2aea80972cf5a7ba0347a4a7b9ff7c1d17ce2dec87fe9922aa04cf47002515c36ac646da6783135f5de53354ea5e160d0703b3d6412e5f3ce9c4a43b9bc19edea4bf8f4f3f33b80242aaabec9a82841aaf132876d366a145ec4161e7c45c397a1aa7a1126f6bc9f55b33a00c542083c22308b7eb04e4c969084c65a15cdfdfc54b1bd9825922c55a2c08a7380b7540e5e2a584f3bc6c5497cae5d43da03cccf136a825e8bc9416c1e38f321970ecca2b481c919c87c2261b896f739ea9d4c4b86947b6ccb0b02c7000bb6572089490df75b1a2ee38c2777a6a4e1e9778a141021f07bdcb3d5e5aee5139daf619ae84a79fcf6b55ff211a58af84ffa9fb8511b3fe7413132cc1750000000000000000000000000000000000000000000000000000000000000000000000001ce5e69e6d5ca2ab36012fd18f46de6c2bf0aa041a54026a2d3ad82bf89b402bd6f50d9779b4279d8301b626a1a2451f6e1f3672e1524e79bf7948f9b4a7c16ad30642aadb84fd7b3805dd38f32e74ff4a55554fa8f522dc7ba39d2034ab057f8e0b6b9d680cf775014ae2c8603b36d14d557b9c40869d6b7d8b46943458fe0dacefb875b80b5ee2411f285bb532749aa0503c6e3021012e1b9e4daee9368c2b9f0c6b4cddced6e665a71830f582f6cc2b25818082e37b364b1b1113ef8fdd1461a2afd8c752aa116cf7d9934be7118a2fb89b16e5900eb82dcf4cf300000000a4cd111a898d0000000000000000000000000000009c82049f390cb8b5003c089357aae80aeaa209de7a94e8ddcd36580673c74fd78154e314a522bb2dd191ce0000000000000000000000000000000000000000000000458d3a1aae1b853474527c26f2ae88b9bc50a078e7e4ed4901da8c75e7131286a7c3edec17b33000954d89621f463836ca8b83e937155ae7fa35b77bd3b44afdba4fba6c20c3bfe518c1de4c5f414cb99f0a18d643214b0824b41f034f3a7bdcd413e519c2b2bd7bffe11c2a625feae36b1f37cccdc8f19a4fb67620002298dc582825d867df5e5ef6e69978f63ea07e4fa6f3d4fd603dfff1d6dd366ca484cfcfdf4daebaab16cd068be95828a5f68373d24502d8801186188fddbf22939ea9562c499fa8f899d60dbab3da91f692570cd98d9367fa13926b0fd57399014bdb6e79626cfc0ff5dac7e7e202dc1b0b3faff2749db54ad9690f7a41aed7aa4dfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 713.738046ms ago: executing program 0 (id=810): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000a000000080026000816"], 0x40}}, 0x200040b4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x62ff, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x5830, 0x0, 0x41, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x40000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf7, 0x0, 0x0, 0x3, 0x4}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x21, 0x16, 0x0, {0x5, 0x6, 0x38414262, 0x0, 0x3ff, 0x8, 0xc, 0x5}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast1, 0x11}, 0x1c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 713.236298ms ago: executing program 2 (id=811): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xe2f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x2, 0x8, 0xa, 0x8000, 0x6}, {0x9, 0x2, 0x4, 0x9, 0x8}, 0x2a, 0x6, 0x1680}}]}}]}, 0x60}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000f98b"]) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000080)=0x8000, 0x4) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) write$binfmt_script(r10, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r9, 0x0) r12 = socket$rxrpc(0x21, 0x2, 0xa) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r15, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r12], 0x4}}, 0x0) sendfile(r14, r13, 0x0, 0x100000002) 646.674442ms ago: executing program 3 (id=812): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x0, 0x0, 0xb4c, 0xc, 0x6, 0x0, 0x8}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300", 0x7, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) unshare(0x3a000100) fsmount(r3, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0xeffffffe) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 166.383089ms ago: executing program 2 (id=813): r0 = socket$inet6(0xa, 0x802, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=0x1, 0x36, 0x0, 0x9, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='veth0_to_hsr\x00'}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x1000, 0x3, 0x28b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x12, &(0x7f0000000a00)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x2d, 0x7, 0x5, 0xec20, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, r9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x8, 0xa, 0x56b876257ddb63a1, 0x10}], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x44, 0x0, @fd=r5, 0x1, 0x0, 0x8, 0x3, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x7, 0x0, [{0x21a, 0x0, 0x4}, {0x8d, 0x0, 0x9}, {0xa4e, 0x0, 0x2}, {0x993, 0x0, 0x2}, {0xa75, 0x0, 0x2}, {0xb82, 0x0, 0x7fffffff}, {0x83c, 0x0, 0x80000000}]}) r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x4ea}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r12, 0x4068aea3, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x0, 0x4, 0x6a, @mcast1, @empty, 0x10, 0x0, 0x1, 0x1}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x4, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000009c0)={r10, r1, 0x0, 0x0, @void}, 0x10) 93.902407ms ago: executing program 0 (id=814): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) 31.770398ms ago: executing program 0 (id=815): syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x7, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4000}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @multicast1]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x20, 0x4, 0x43, @empty, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xf8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x57, 0x37, 0x24, 0x8, 0xf11, 0x1000, 0x40f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xd0, 0x8d, 0xa5}}]}}]}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 0s ago: executing program 4 (id=816): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x140, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x280, 0x20a, 0x278, 0x280, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x15}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@remote, [0xffffffff, 0xff000000, 0x0, 0xffffff00], 0x4e20, 0x2, 0x2, 0x4e23, 0x20, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffe}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000462281, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xb}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 216.353148][ T5885] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 216.363814][ T7349] input: syz0 as /devices/virtual/input/input12 [ 216.392821][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 216.407780][ T5885] usb 4-1: device descriptor read/8, error -71 [ 216.409291][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.409318][ T24] usb 2-1: config 0 has no interfaces? [ 216.411967][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 216.411996][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.412017][ T24] usb 2-1: Product: syz [ 216.412032][ T24] usb 2-1: Manufacturer: syz [ 216.412048][ T24] usb 2-1: SerialNumber: syz [ 216.424369][ T24] usb 2-1: config 0 descriptor?? [ 216.532832][ T5885] usb usb4-port1: unable to enumerate USB device [ 216.648821][ T9] usb 2-1: USB disconnect, device number 24 [ 216.895967][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 216.896008][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 216.902057][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 216.909198][ T5141] Bluetooth: hci1: command 0x0406 tx timeout [ 217.375029][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 217.726395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805815e400: rx timeout, send abort [ 217.736276][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805815e400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 218.472842][ T5885] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 218.607286][ T5885] usb 5-1: device descriptor read/64, error -71 [ 218.752853][ T5883] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 218.799980][ T7389] netlink: 'syz.0.399': attribute type 75 has an invalid length. [ 218.882851][ T5885] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 219.053021][ T5885] usb 5-1: device descriptor read/64, error -71 [ 219.069531][ T5883] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 219.083905][ T5883] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.148360][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.163415][ T5885] usb usb5-port1: attempt power cycle [ 219.167604][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.178129][ T5883] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.289229][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.447795][ T5883] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.563337][ T5883] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 219.579828][ T5885] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 219.615196][ T5885] usb 5-1: device descriptor read/8, error -71 [ 219.716633][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.727242][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.912897][ T5885] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 219.943349][ T5885] usb 5-1: device descriptor read/8, error -71 [ 220.054246][ T5885] usb usb5-port1: unable to enumerate USB device [ 220.160342][ T7398] loop6: detected capacity change from 0 to 7 [ 220.303493][ T7398] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 220.309201][ T7398] loop6: partition table partially beyond EOD, truncated [ 220.324146][ T7398] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 220.682882][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 220.842825][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 220.850139][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.863088][ T24] usb 3-1: config 0 has no interfaces? [ 220.870797][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 220.887240][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.905607][ T24] usb 3-1: Product: syz [ 220.916912][ T24] usb 3-1: Manufacturer: syz [ 220.949124][ T24] usb 3-1: SerialNumber: syz [ 220.979546][ T24] usb 3-1: config 0 descriptor?? [ 221.209472][ T5885] usb 3-1: USB disconnect, device number 32 [ 221.624145][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 221.825142][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 221.882440][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 221.923126][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 2425, setting to 64 [ 221.947577][ T5882] usb 2-1: USB disconnect, device number 25 [ 221.984368][ T7404] fuse: Bad value for 'fd' [ 221.995824][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 222.012020][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.046365][ T9] usb 5-1: Product: syz [ 222.050594][ T9] usb 5-1: Manufacturer: syz [ 222.107422][ T9] usb 5-1: SerialNumber: syz [ 222.131037][ T9] usb 5-1: config 0 descriptor?? [ 222.157250][ T7402] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.168071][ T7402] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.219188][ T9] usb 5-1: ucan: probing device on interface #0 [ 222.296220][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.325868][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.376595][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.438886][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.460560][ T5882] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 222.468431][ T9] usb 5-1: ucan: could not read protocol version, ret=-71 [ 222.483651][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 222.522449][ T9] usb 5-1: USB disconnect, device number 35 [ 222.531689][ T7416] syz.2.410 uses obsolete (PF_INET,SOCK_PACKET) [ 222.628836][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 222.628854][ T30] audit: type=1326 audit(1748148531.986:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.3.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc37918e969 code=0x0 [ 222.675594][ T5882] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.687062][ T5882] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.701037][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.711836][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.734374][ T5882] hub 2-1:4.0: USB hub found [ 222.968085][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.983040][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.992084][ T5882] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 223.008757][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.020696][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.056108][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.066824][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.076678][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.091524][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.101335][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.115784][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.232954][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 223.441706][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 223.484000][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.522534][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.557905][ T7433] netlink: 'syz.4.413': attribute type 20 has an invalid length. [ 223.581446][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 223.621096][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.633466][ T24] usb 3-1: config 0 descriptor?? [ 223.717784][ T7438] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 223.883270][ T5885] usb 2-1: USB disconnect, device number 26 [ 224.078043][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 224.094369][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 224.133407][ T24] usb 3-1: USB disconnect, device number 33 [ 224.294454][ T5882] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 224.442899][ T5882] usb 4-1: device descriptor read/64, error -71 [ 224.462866][ T5885] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 224.612873][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 224.620104][ T5885] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 224.628879][ T5885] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.675739][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.702782][ T5885] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.712759][ T5882] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 224.724716][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.747026][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.754947][ T5885] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.779667][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.794204][ T5885] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.804678][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.817831][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.843859][ T7449] IPVS: set_ctl: invalid protocol: 43 172.20.20.23:20004 [ 224.852936][ T5882] usb 4-1: device descriptor read/64, error -71 [ 224.903263][ T7453] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20000 [ 224.966696][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.983356][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.991710][ T5882] usb usb4-port1: attempt power cycle [ 225.043088][ T5885] usb 2-1: GET_CAPABILITIES returned 0 [ 225.079195][ T5885] usbtmc 2-1:16.0: can't read capabilities [ 225.084302][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.100177][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.261332][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.273184][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.353105][ T5885] usb 2-1: USB disconnect, device number 27 [ 225.364151][ T5882] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 225.394170][ T5882] usb 4-1: device descriptor read/8, error -71 [ 225.652963][ T5882] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 225.693646][ T5882] usb 4-1: device descriptor read/8, error -71 [ 225.819916][ T5882] usb usb4-port1: unable to enumerate USB device [ 227.003028][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 227.182990][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 227.190391][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 227.201261][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.214061][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.224335][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 227.233952][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.245955][ T10] usb 3-1: config 0 descriptor?? [ 227.249092][ T7480] bridge_slave_1 (unregistering): left allmulticast mode [ 227.262868][ T7480] bridge_slave_1 (unregistering): left promiscuous mode [ 227.273417][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.363911][ T5885] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 227.533102][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 227.541256][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.549924][ T5885] usb 4-1: config 0 has no interface number 0 [ 227.708561][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 227.729486][ T5885] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 227.758363][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.767604][ T5885] usb 4-1: Product: syz [ 227.774183][ T5885] usb 4-1: Manufacturer: syz [ 227.790213][ T5885] usb 4-1: SerialNumber: syz [ 227.847437][ T5885] usb 4-1: config 0 descriptor?? [ 227.892986][ T7486] netlink: 'syz.1.427': attribute type 20 has an invalid length. [ 227.906936][ T10] ft260 0003:0403:6030.0006: failed to retrieve chip version [ 227.916888][ T10] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 227.936701][ T10] usb 3-1: USB disconnect, device number 34 [ 228.066977][ T5885] usb 4-1: selecting invalid altsetting 1 [ 228.073766][ T5885] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 228.084398][ T5885] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 228.092404][ T5885] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 228.113659][ T5885] usb 4-1: USB disconnect, device number 44 [ 228.696236][ T7494] syzkaller1: entered promiscuous mode [ 228.720403][ T7494] syzkaller1: entered allmulticast mode [ 228.783526][ T7506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.802657][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.827745][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.845072][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.868337][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.963107][ T5882] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 229.122247][ T7517] fuse: Invalid uid '00000000000000000004' [ 229.126930][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.140262][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.152874][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.166346][ T5882] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 229.175639][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.205106][ T5882] usb 5-1: config 0 descriptor?? [ 229.253313][ T10] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 229.352888][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 229.406944][ T10] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 229.416878][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 229.453542][ T10] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 229.462973][ T5919] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 229.470764][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.482573][ T10] usb 4-1: Product: syz [ 229.490116][ T10] usb 4-1: Manufacturer: syz [ 229.495436][ T10] usb 4-1: SerialNumber: syz [ 229.503918][ T10] usb 4-1: config 0 descriptor?? [ 229.516171][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 229.522214][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 229.531652][ T9] usb 3-1: config 0 has no interfaces? [ 229.548824][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 229.572119][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 229.587864][ T10] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 229.601280][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.616096][ T9] usb 3-1: Product: syz [ 229.628970][ T5882] dragonrise 0003:0079:0011.0007: unknown main item tag 0x1 [ 229.644685][ T10] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 229.654860][ T9] usb 3-1: Manufacturer: syz [ 229.659505][ T9] usb 3-1: SerialNumber: syz [ 229.665421][ T5882] dragonrise 0003:0079:0011.0007: reserved main item tag 0xe [ 229.678418][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.697374][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 229.722301][ T5882] dragonrise 0003:0079:0011.0007: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0 [ 229.738088][ T9] usb 3-1: config 0 descriptor?? [ 229.746531][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.762786][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.799218][ T5919] usb 2-1: config 0 descriptor?? [ 229.843544][ T5887] usb 4-1: USB disconnect, device number 45 [ 229.864347][ T5919] usb 5-1: USB disconnect, device number 36 [ 231.241338][ T30] audit: type=1400 audit(1748148540.596:122): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7561 comm="syz.3.451" [ 231.323033][ T5884] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 231.474787][ T5884] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 231.486354][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.497441][ T5884] usb 5-1: config 0 descriptor?? [ 231.514537][ T5884] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 232.154589][ T5887] usb 2-1: USB disconnect, device number 28 [ 232.330958][ T5882] usb 3-1: USB disconnect, device number 35 [ 232.905692][ T5882] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 233.053076][ T5882] usb 3-1: device descriptor read/64, error -71 [ 233.292833][ T5882] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 233.432848][ T5882] usb 3-1: device descriptor read/64, error -71 [ 233.562673][ T5882] usb usb3-port1: attempt power cycle [ 233.570086][ T5884] gp8psk: usb in 128 operation failed. [ 233.584880][ T5884] gp8psk: usb in 137 operation failed. [ 233.591449][ T5884] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 233.614376][ T5884] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 233.912856][ T5882] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 233.933974][ T5882] usb 3-1: device descriptor read/8, error -71 [ 233.961492][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 234.076161][ T5919] usb 5-1: USB disconnect, device number 37 [ 234.176673][ T5882] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 234.209748][ T5882] usb 3-1: device descriptor read/8, error -71 [ 234.345515][ T5882] usb usb3-port1: unable to enumerate USB device [ 234.653113][ T5882] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 234.842963][ T5882] usb 5-1: device descriptor read/64, error -71 [ 235.722925][ T5882] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 235.993047][ T5882] usb 5-1: device descriptor read/64, error -71 [ 236.275000][ T5882] usb usb5-port1: attempt power cycle [ 236.652938][ T5882] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 236.703499][ T5882] usb 5-1: device descriptor read/8, error -71 [ 237.053090][ T5882] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 237.079437][ T5882] usb 5-1: device descriptor read/8, error -71 [ 237.258012][ T5882] usb usb5-port1: unable to enumerate USB device [ 237.956381][ T7635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.034105][ T7635] ptrace attach of "./syz-executor exec"[5847] was attempted by ""[7635] [ 238.682842][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.753452][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.775795][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.784811][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.232826][ T5887] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 239.432469][ T5887] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 239.503421][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.551643][ T5887] usb 3-1: config 0 descriptor?? [ 239.764651][ T5887] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 240.012261][ T7662] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 240.528490][ T7673] xt_TCPMSS: Only works on TCP SYN packets [ 241.859330][ T5887] gp8psk: usb in 128 operation failed. [ 241.873136][ T5887] gp8psk: usb in 137 operation failed. [ 241.899368][ T5887] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 242.002845][ T5887] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 242.029786][ T5887] usb 3-1: USB disconnect, device number 40 [ 242.212882][ T5882] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 242.258811][ T7696] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 242.393200][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 242.456970][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.478544][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.503984][ T5882] usb 4-1: Product: syz [ 242.521200][ T5882] usb 4-1: Manufacturer: syz [ 242.531987][ T5882] usb 4-1: SerialNumber: syz [ 242.559281][ T5882] usb 4-1: config 0 descriptor?? [ 242.677182][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.684871][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.733095][ T5887] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 242.788348][ T5882] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.013535][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 243.049109][ T5887] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.084548][ T5887] usb 2-1: config 1 interface 0 has no altsetting 0 [ 243.120299][ T5887] usb 2-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.40 [ 243.138531][ T7696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.151148][ T5919] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 243.158942][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.174595][ T5887] usb 2-1: Product: syz [ 243.180202][ T5887] usb 2-1: Manufacturer: syz [ 243.184999][ T5887] usb 2-1: SerialNumber: syz [ 243.199755][ T7688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.210608][ T7696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.225567][ T7688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.258118][ T7696] hsr0: left promiscuous mode [ 243.322857][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 243.334471][ T5919] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 243.351205][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.383027][ T5919] usb 3-1: Product: syz [ 243.396150][ T5919] usb 3-1: Manufacturer: syz [ 243.411901][ T5919] usb 3-1: SerialNumber: syz [ 243.427653][ T7696] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.439990][ T7696] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.451023][ T7696] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.453666][ T5919] usb 3-1: config 0 descriptor?? [ 243.465771][ T7696] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.529069][ T5919] gspca_main: sq905-2.14.0 probing 2770:9120 [ 243.542641][ T5887] usbhid 2-1:1.0: can't add hid device: -71 [ 243.548948][ T5887] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 243.589349][ T5887] usb 2-1: USB disconnect, device number 29 [ 243.701214][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.713902][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.740317][ T5919] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 243.763579][ T5919] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 243.780461][ T5919] usb 3-1: USB disconnect, device number 41 [ 243.947405][ T5882] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 243.971042][ T5882] usb 4-1: USB disconnect, device number 46 [ 244.463042][ T5919] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 244.764404][ T5919] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 244.780435][ T7726] vlan2: entered allmulticast mode [ 244.787578][ T5919] usb 5-1: config 8 has an invalid descriptor of length 235, skipping remainder of the config [ 244.806897][ T5919] usb 5-1: config 8 has no interface number 0 [ 244.831830][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.831878][ T5919] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.860599][ T5919] usb 5-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 244.880748][ T7726] bond0: entered allmulticast mode [ 244.886247][ T7726] bond_slave_0: entered allmulticast mode [ 244.892045][ T7726] bond_slave_1: entered allmulticast mode [ 244.899199][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.919090][ T5919] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 245.007504][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.053549][ T5919] usb 5-1: NFC: intf ffff888020a9e000 id ffffffff8e941d80 [ 245.087310][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.098486][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.111967][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.132842][ T9] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 245.158431][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.229640][ T7736] atomic_op ffff88807f913198 conn xmit_atomic 0000000000000000 [ 245.560628][ T5886] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 245.594592][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 245.634553][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.697373][ T7716] netlink: 'syz.4.485': attribute type 13 has an invalid length. [ 245.784262][ T5886] usb 3-1: config 0 has no interfaces? [ 245.795125][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 245.804590][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.813343][ T5886] usb 3-1: Product: syz [ 245.817779][ T5886] usb 3-1: Manufacturer: syz [ 245.822481][ T5886] usb 3-1: SerialNumber: syz [ 245.869595][ T5886] usb 3-1: config 0 descriptor?? [ 245.908623][ T9] usb 4-1: config 0 descriptor?? [ 245.938869][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 246.103850][ T7734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.490'. [ 246.266550][ T7716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.101009][ T5884] usb 5-1: USB disconnect, device number 42 [ 247.938805][ T5882] usb 3-1: USB disconnect, device number 42 [ 248.173274][ T9] gp8psk: usb in 128 operation failed. [ 248.179440][ T9] gp8psk: usb in 137 operation failed. [ 248.193997][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 248.881335][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 249.018067][ T9] usb 4-1: USB disconnect, device number 47 [ 249.621709][ T7775] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 249.628298][ T7775] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.653690][ T7775] vhci_hcd vhci_hcd.0: Device attached [ 249.673572][ T7775] vhci_hcd vhci_hcd.0: port 0 already used [ 249.705376][ T9] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 249.915697][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.989190][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.009490][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 250.023079][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.083010][ T9] usb 3-1: config 0 descriptor?? [ 250.099170][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 250.122650][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 250.151537][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.169424][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.173386][ T5882] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 250.345878][ T5882] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 250.354547][ T5882] usb 4-1: config 0 has no interface number 0 [ 250.360705][ T5882] usb 4-1: config 0 interface 128 has no altsetting 0 [ 250.373011][ T5884] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 250.379216][ T5882] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 250.391824][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.438791][ T5882] usb 4-1: Product: syz [ 250.443157][ T5882] usb 4-1: Manufacturer: syz [ 250.448838][ T5882] usb 4-1: SerialNumber: syz [ 250.489579][ T5882] usb 4-1: config 0 descriptor?? [ 250.504057][ T5882] radio-si470x 4-1:0.128: could not find interrupt in endpoint [ 250.526850][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.538518][ T5882] radio-si470x 4-1:0.128: probe with driver radio-si470x failed with error -5 [ 250.586947][ T5884] usb 2-1: config index 0 descriptor too short (expected 2084, got 36) [ 250.595694][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.608733][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.617472][ T5882] usbhid 4-1:0.128: couldn't find an input interrupt endpoint [ 250.625146][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.710695][ T5884] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 250.738805][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.822215][ T5884] usb 2-1: config 0 descriptor?? [ 250.827493][ T5886] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 250.996380][ T5886] usb 5-1: config 0 has no interfaces? [ 251.018829][ T5886] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.056722][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.065289][ T5886] usb 5-1: Product: syz [ 251.069952][ T5886] usb 5-1: Manufacturer: syz [ 251.134093][ T5886] usb 5-1: SerialNumber: syz [ 251.163412][ T5886] usb 5-1: config 0 descriptor?? [ 251.260666][ T5884] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 251.269456][ T5884] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 251.303456][ T5884] dragonrise 0003:0079:0006.0008: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 251.323432][ T5884] dragonrise 0003:0079:0006.0008: no inputs found [ 251.330257][ T5884] dragonrise 0003:0079:0006.0008: force feedback init failed [ 251.477372][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.496255][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.549112][ T5884] usb 2-1: USB disconnect, device number 30 [ 252.339585][ T7819] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.507'. [ 252.353469][ T5884] usb 4-1: USB disconnect, device number 48 [ 252.362779][ T7777] vhci_hcd: connection closed [ 252.365865][ T3476] vhci_hcd: stop threads [ 252.453752][ T3476] vhci_hcd: release socket [ 252.467873][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 252.486889][ T3476] vhci_hcd: disconnect device [ 252.494197][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 252.531343][ T9] usb 3-1: USB disconnect, device number 43 [ 252.653157][ T7824] futex_wake_op: syz.2.508 tries to shift op by 32; fix this program [ 253.017783][ T7836] input: syz0 as /devices/virtual/input/input14 [ 253.033529][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 253.196096][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.211924][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.223440][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.244917][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.254890][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.268447][ T9] usb 3-1: config 0 descriptor?? [ 253.459937][ T5919] usb 5-1: USB disconnect, device number 43 [ 253.483391][ T5882] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 253.686602][ T5882] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 253.712847][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 253.731471][ T5882] usb 2-1: SerialNumber: syz [ 253.790061][ T5882] usb 2-1: config 0 descriptor?? [ 253.930849][ T7849] vlan0: entered allmulticast mode [ 253.936269][ T7849] bond0: entered allmulticast mode [ 253.941448][ T7849] bond_slave_0: entered allmulticast mode [ 253.975456][ T7849] bond_slave_1: entered allmulticast mode [ 254.116015][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.136310][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.246353][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 254.271471][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 254.295699][ T9] usb 3-1: USB disconnect, device number 44 [ 254.402945][ T5884] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 254.430816][ T5882] hackrf 2-1:0.0: Board ID: 00 [ 254.442962][ T5882] hackrf 2-1:0.0: Firmware version: HKÏ$©·ìsõK÷Á %¼f®Ä Õ [ 254.490567][ T5882] hackrf 2-1:0.0: Registered as swradio24 [ 254.500039][ T7858] binder: 7853:7858 ioctl c018620b 200000000000 returned -14 [ 254.507593][ T5882] videodev: could not get a free minor [ 254.523939][ T5882] hackrf 2-1:0.0: Failed to register as video device (-23) [ 254.550383][ T5882] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 254.623834][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 254.640169][ T5884] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 254.649109][ T5884] usb 4-1: config 0 has no interface number 0 [ 254.656627][ T5884] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.687393][ T5884] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 254.705502][ T5884] usb 4-1: config 0 interface 126 has no altsetting 0 [ 254.737783][ T5884] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 254.777131][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.797215][ T5884] usb 4-1: Product: syz [ 254.810892][ T5884] usb 4-1: Manufacturer: syz [ 254.871215][ T5884] usb 4-1: SerialNumber: syz [ 254.904335][ T5884] usb 4-1: config 0 descriptor?? [ 254.913138][ T7857] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 254.920515][ T7857] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 254.988237][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.043325][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.049391][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 255.131780][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 255.136073][ T5882] usb 2-1: USB disconnect, device number 31 [ 255.438301][ T5884] ir_usb 4-1:0.126: IR Dongle converter detected [ 255.691281][ T5884] usb 4-1: IRDA class descriptor not found, device not bound [ 255.739356][ T5884] usb 4-1: USB disconnect, device number 49 [ 255.775217][ T5843] udevd[5843]: setting mode of /dev/bus/usb/004/049 to 020664 failed: No such file or directory [ 255.786362][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.796355][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.817837][ T5843] udevd[5843]: setting owner of /dev/bus/usb/004/049 to uid=0, gid=0 failed: No such file or directory [ 256.205911][ T5884] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 256.318800][ T3476] tipc: Subscription rejected, illegal request [ 256.377464][ T7897] tipc: Started in network mode [ 256.387778][ T5884] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 256.415113][ T7897] tipc: Node identity 4, cluster identity 4711 [ 256.429287][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.452888][ T7897] tipc: Node number set to 4 [ 256.472373][ T5884] usb 5-1: config 0 descriptor?? [ 257.015652][ T5884] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 257.031686][ T5884] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 257.325472][ T7888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.345584][ T7888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.394674][ T5884] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 257.434820][ T5884] [drm] Initialized udl on minor 2 [ 257.507713][ T5884] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 257.549993][ T5884] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 257.588302][ T5886] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 257.622444][ T5884] usb 5-1: USB disconnect, device number 44 [ 257.658255][ T5886] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 257.862940][ T5882] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 258.082796][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 258.133804][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.168017][ T5882] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c [ 258.210831][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.248317][ T5882] usb 3-1: Product: syz [ 258.315198][ T5882] usb 3-1: Manufacturer: syz [ 258.346772][ T5882] usb 3-1: SerialNumber: syz [ 258.650994][ T5882] empeg 3-1:1.0: empeg converter detected [ 258.659999][ T5882] empeg 3-1:1.0: probe with driver empeg failed with error -71 [ 258.709812][ T7924] netlink: 'syz.4.535': attribute type 20 has an invalid length. [ 258.721413][ T5882] usb 3-1: USB disconnect, device number 45 [ 259.093929][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 259.269699][ T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 259.278635][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.343354][ T9] usb 4-1: config 0 has no interface number 0 [ 259.366473][ T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 259.396252][ T9] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.432637][ T9] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 259.442898][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.467211][ T9] usb 4-1: Product: syz [ 259.478267][ T9] usb 4-1: Manufacturer: syz [ 259.483122][ T5882] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 259.501152][ T9] usb 4-1: SerialNumber: syz [ 259.531152][ T9] usb 4-1: config 0 descriptor?? [ 259.667670][ T5882] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 259.692814][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.711525][ T5882] usb 2-1: Product: syz [ 259.722732][ T5882] usb 2-1: Manufacturer: syz [ 259.733238][ T5882] usb 2-1: SerialNumber: syz [ 259.759989][ T5882] usb 2-1: config 0 descriptor?? [ 259.948411][ T7928] program syz.3.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.123023][ T5919] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 260.174907][ T5887] usb 4-1: USB disconnect, device number 50 [ 260.183088][ T5882] usb 2-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 260.302820][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 260.355329][ T5919] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 260.383127][ T5919] usb 3-1: config 0 has no interface number 0 [ 260.392322][ T5919] usb 3-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.409007][ T5882] usb 2-1: Read permanent extended address 50:6c:c6:83:10:82:2a:1e from device [ 260.425672][ T5919] usb 3-1: config 0 interface 188 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 260.470882][ T5919] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 129, changing to 11 [ 260.490802][ T5919] usb 3-1: config 0 interface 188 altsetting 0 endpoint 0x8D has invalid maxpacket 10062, setting to 1024 [ 260.502851][ T5919] usb 3-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.519143][ T5919] usb 3-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b [ 260.542778][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.561080][ T5919] usb 3-1: Product: syz [ 260.578515][ T5919] usb 3-1: Manufacturer: syz [ 260.603071][ T5919] usb 3-1: SerialNumber: syz [ 260.645749][ T5882] usb 2-1: USB disconnect, device number 32 [ 260.653495][ T5919] usb 3-1: config 0 descriptor?? [ 260.662787][ T7935] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 260.679898][ T5919] option 3-1:0.188: GSM modem (1-port) converter detected [ 260.898876][ T7951] loop6: detected capacity change from 0 to 524287999 [ 261.055246][ T5885] usb 3-1: USB disconnect, device number 46 [ 261.071031][ T5885] option 3-1:0.188: device disconnected [ 262.222947][ T5882] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 262.372796][ T5886] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 262.384819][ T5882] usb 2-1: config 3 has an invalid interface number: 29 but max is 0 [ 262.393601][ T5882] usb 2-1: config 3 has no interface number 0 [ 262.402948][ T5882] usb 2-1: config 3 interface 29 has no altsetting 0 [ 262.511736][ T5882] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=7a.e2 [ 262.521245][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.529357][ T5882] usb 2-1: Product: syz [ 262.553546][ T5882] usb 2-1: Manufacturer: syz [ 262.558367][ T5882] usb 2-1: SerialNumber: syz [ 262.632813][ T5885] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 262.652871][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 262.660197][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.683041][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.708748][ T5886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.727025][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.747284][ T5886] usb 4-1: Product: syz [ 262.752956][ T5886] usb 4-1: Manufacturer: syz [ 262.762430][ T5886] usb 4-1: SerialNumber: syz [ 262.782816][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 262.798318][ T5885] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.798348][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.798371][ T5885] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.807546][ T5885] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.807576][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.807597][ T5885] usb 3-1: Product: syz [ 262.807613][ T5885] usb 3-1: Manufacturer: syz [ 262.807650][ T5885] usb 3-1: SerialNumber: syz [ 263.001749][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.002179][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.005660][ T5886] usb 4-1: 0:2 : does not exist [ 263.062283][ T5886] usb 4-1: USB disconnect, device number 51 [ 263.101963][ T5885] usb 3-1: 0:2 : does not exist [ 263.110827][ T5885] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 263.149785][ T5885] usb 3-1: USB disconnect, device number 47 [ 263.208849][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.210455][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.232003][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 263.344401][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.372589][ T5882] usb 2-1: bad CDC descriptors [ 263.391208][ T5882] usb 2-1: USB disconnect, device number 33 [ 263.582973][ T5885] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 263.745151][ T5885] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 263.763740][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.794127][ T5885] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 263.805458][ T5885] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 263.823324][ T5885] usb 3-1: Manufacturer: syz [ 263.843981][ T5885] usb 3-1: config 0 descriptor?? [ 263.853145][ T5882] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 263.986383][ T7988] ucma_write: process 436 (syz.0.553) changed security contexts after opening file descriptor, this is not allowed. [ 263.998850][ T5885] rc_core: IR keymap rc-hauppauge not found [ 264.009480][ T5885] Registered IR keymap rc-empty [ 264.020197][ T5885] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 264.033908][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.043906][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.046792][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 264.055457][ T5885] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 264.079915][ T5882] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 264.091531][ T5882] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 264.111926][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 264.141216][ T5885] usb 3-1: USB disconnect, device number 48 [ 264.207231][ T5887] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 264.373185][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 264.398468][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.432461][ T5887] usb 5-1: config 0 has no interfaces? [ 264.451241][ T5887] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 264.470830][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.472243][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.497454][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.500535][ T5887] usb 5-1: Product: syz [ 264.516443][ T5887] usb 5-1: Manufacturer: syz [ 264.542875][ T5887] usb 5-1: SerialNumber: syz [ 264.565258][ T5887] usb 5-1: config 0 descriptor?? [ 264.788590][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.834677][ T7986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.853350][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.057402][ T24] usb 5-1: USB disconnect, device number 45 [ 265.750675][ T8017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.560'. [ 266.153625][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 266.162772][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 266.769712][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.790239][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.840108][ T5882] usb 4-1: can't set config #1, error -71 [ 266.931702][ T5882] usb 4-1: USB disconnect, device number 52 [ 267.868137][ T8049] batadv_slave_1: entered promiscuous mode [ 267.889536][ T8049] netlink: 'syz.2.569': attribute type 3 has an invalid length. [ 267.898792][ T30] audit: type=1326 audit(1748148577.266:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 267.940949][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.950182][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.964413][ T30] audit: type=1326 audit(1748148577.266:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 267.994664][ T30] audit: type=1326 audit(1748148577.286:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 268.018713][ T30] audit: type=1326 audit(1748148577.286:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 268.040946][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.052615][ T30] audit: type=1326 audit(1748148577.286:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 268.074843][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.082448][ T30] audit: type=1326 audit(1748148577.286:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 268.105128][ T30] audit: type=1326 audit(1748148577.286:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 268.127364][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.136504][ T30] audit: type=1326 audit(1748148577.286:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 268.158704][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.170050][ T30] audit: type=1326 audit(1748148577.286:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f95d8d2d0 code=0x7ffc0000 [ 268.192255][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.198890][ T5882] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 268.221933][ T30] audit: type=1326 audit(1748148577.286:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f95d8e56b code=0x7ffc0000 [ 268.244097][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.363049][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 268.386439][ T5882] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 268.412572][ T5882] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.446341][ T5882] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.464500][ T5882] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.473330][ T5882] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.482372][ T5882] usb 3-1: config 0 has no interface number 0 [ 268.488798][ T5882] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 268.500276][ T5882] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 268.518544][ T5882] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.530602][ T5882] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.546446][ T5882] usb 3-1: config 0 interface 125 has no altsetting 0 [ 268.554265][ T5882] usb 3-1: config 0 interface 125 has no altsetting 2 [ 268.566298][ T5882] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 268.575792][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.584511][ T5882] usb 3-1: Product: syz [ 268.589136][ T5882] usb 3-1: Manufacturer: syz [ 268.594596][ T5882] usb 3-1: SerialNumber: syz [ 268.623183][ T5882] usb 3-1: config 0 descriptor?? [ 268.642956][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 268.667406][ T5882] usb 3-1: selecting invalid altsetting 2 [ 268.824242][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 268.839009][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 268.860707][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.40 [ 268.890095][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.909650][ T24] usb 5-1: Product: syz [ 268.919355][ T24] usb 5-1: Manufacturer: syz [ 268.930137][ T24] usb 5-1: SerialNumber: syz [ 269.208024][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 269.254125][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 269.292556][ T24] usb 5-1: USB disconnect, device number 46 [ 269.462158][ T8066] fuse: Bad value for 'fd' [ 269.580184][ T8070] netlink: 'syz.3.576': attribute type 8 has an invalid length. [ 269.666581][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.577'. [ 269.973166][ T5882] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 270.011872][ T8078] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.025771][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 270.134809][ T5882] usb 4-1: config index 0 descriptor too short (expected 25454, got 77) [ 270.144427][ T5882] usb 4-1: config 115 has too many interfaces: 47, using maximum allowed: 32 [ 270.156042][ T5882] usb 4-1: config 115 has an invalid descriptor of length 121, skipping remainder of the config [ 270.167610][ T5882] usb 4-1: config 115 has 0 interfaces, different from the descriptor's value: 47 [ 270.179645][ T5882] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.188996][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.197182][ T5882] usb 4-1: Product: syz [ 270.201385][ T5882] usb 4-1: Manufacturer: syz [ 270.205419][ T24] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 270.206191][ T5882] usb 4-1: SerialNumber: syz [ 270.219859][ T24] usb 5-1: config 0 has no interface number 0 [ 270.239827][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 270.251164][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 270.270946][ T24] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 270.284722][ T5919] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 270.289386][ T24] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 270.302236][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.310462][ T24] usb 5-1: Product: syz [ 270.314865][ T24] usb 5-1: Manufacturer: syz [ 270.319511][ T24] usb 5-1: SerialNumber: syz [ 270.328987][ T24] usb 5-1: config 0 descriptor?? [ 270.336878][ T8075] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 270.344707][ T8075] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 270.354593][ T24] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 270.368064][ T24] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 270.431837][ T8073] netlink: 'syz.3.577': attribute type 7 has an invalid length. [ 270.446359][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.456360][ T5919] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 270.458626][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.466793][ T5919] usb 2-1: config 0 has no interface number 0 [ 270.481311][ T5919] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 270.492027][ T5919] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 270.501367][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.521699][ T5919] usb 2-1: config 0 descriptor?? [ 270.539321][ T5919] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input17 [ 270.619691][ T5919] usb 5-1: USB disconnect, device number 47 [ 270.670397][ T5919] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 270.719256][ T5919] cyberjack 5-1:0.69: device disconnected [ 270.917440][ T8085] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 271.123198][ T5886] usb 3-1: USB disconnect, device number 49 [ 271.133361][ T8079] batadv_slave_1: left promiscuous mode [ 271.143277][ T5919] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 271.186243][ T8092] loop6: detected capacity change from 0 to 7 [ 271.250141][ T8092] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 271.269209][ T8092] loop6: partition table partially beyond EOD, truncated [ 271.318252][ T8092] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 271.336607][ T5885] usb 2-1: USB disconnect, device number 35 [ 271.392879][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 271.408635][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.428877][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.460403][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.526319][ T5919] usb 5-1: string descriptor 0 read error: -22 [ 271.543112][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 271.551421][ T5919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.581310][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.652943][ T5919] usb 5-1: 0:2 : does not exist [ 271.973251][ T5885] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 272.154335][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 272.200195][ T5885] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 272.238889][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.309743][ T5885] usb 2-1: Product: syz [ 272.333282][ T5885] usb 2-1: Manufacturer: syz [ 272.364420][ T5885] usb 2-1: SerialNumber: syz [ 272.407212][ T5885] usb 2-1: config 0 descriptor?? [ 272.562836][ T9] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 272.660997][ T5885] usb 2-1: USB disconnect, device number 36 [ 272.703257][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 272.719524][ T5882] usb 4-1: USB disconnect, device number 53 [ 272.764664][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 272.773295][ T9] usb 3-1: config 0 has no interface number 0 [ 272.807191][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.848689][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 272.891200][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 272.927480][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 272.960165][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.022846][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 273.093130][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.132244][ T9] usb 3-1: config 0 descriptor?? [ 273.172104][ T8102] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 273.201180][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 273.417255][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 273.417276][ T30] audit: type=1326 audit(1748148582.766:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.475531][ T30] audit: type=1326 audit(1748148582.766:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.498260][ T30] audit: type=1326 audit(1748148582.766:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff66498d2d0 code=0x7ffc0000 [ 273.524908][ T5885] usb 3-1: USB disconnect, device number 50 [ 273.552477][ T30] audit: type=1326 audit(1748148582.766:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.574687][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.598714][ T5885] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 273.608258][ T8122] syzkaller1: entered promiscuous mode [ 273.616479][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.618021][ T30] audit: type=1326 audit(1748148582.766:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.652758][ T8122] syzkaller1: entered allmulticast mode [ 273.679377][ T30] audit: type=1326 audit(1748148582.776:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.693290][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.727174][ T30] audit: type=1326 audit(1748148582.776:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.896257][ T30] audit: type=1326 audit(1748148582.776:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 273.996256][ T30] audit: type=1326 audit(1748148582.776:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff66498e969 code=0x7ffc0000 [ 274.129484][ T30] audit: type=1326 audit(1748148582.776:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.1.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff66498e9a3 code=0x7ffc0000 [ 274.176633][ T5886] usb 5-1: USB disconnect, device number 48 [ 274.330719][ T8132] ipt_rpfilter: unknown options [ 274.952354][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.971876][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.053050][ T5886] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 275.092902][ T5885] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 275.202799][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 275.217362][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.227834][ T5886] usb 3-1: config 0 has no interfaces? [ 275.247046][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.264302][ T5885] usb 5-1: config 0 has no interfaces? [ 275.279108][ T5885] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.289148][ T5886] usb 3-1: config 0 has no interfaces? [ 275.299179][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.310431][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.326635][ T5885] usb 5-1: Product: syz [ 275.330858][ T5885] usb 5-1: Manufacturer: syz [ 275.335638][ T5886] usb 3-1: config 0 has no interfaces? [ 275.347106][ T5885] usb 5-1: SerialNumber: syz [ 275.354391][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 275.376042][ T5885] usb 5-1: config 0 descriptor?? [ 275.382437][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 275.392051][ T5886] usb 3-1: Product: syz [ 275.399045][ T5886] usb 3-1: Manufacturer: syz [ 275.435720][ T5886] usb 3-1: config 0 descriptor?? [ 275.483285][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 275.654877][ T9] usb 4-1: config 0 has no interfaces? [ 275.676565][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 275.723417][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.767754][ T9] usb 4-1: Product: syz [ 275.784094][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.799214][ T9] usb 4-1: Manufacturer: syz [ 275.803390][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.819503][ T9] usb 4-1: SerialNumber: syz [ 275.846481][ T9] usb 4-1: config 0 descriptor?? [ 276.329706][ T5885] usb 3-1: USB disconnect, device number 51 [ 276.950379][ T8167] netlink: 'syz.1.602': attribute type 20 has an invalid length. [ 276.971760][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.987217][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.413926][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.421714][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.476990][ T8185] ipvlan2: entered promiscuous mode [ 277.923013][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.931767][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.219739][ T5882] usb 5-1: USB disconnect, device number 49 [ 278.649317][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.659025][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.773469][ T5886] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 278.835454][ T9] usb 4-1: USB disconnect, device number 54 [ 278.923148][ T5882] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 278.985381][ T5886] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.999913][ T5886] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.011571][ T5886] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.020812][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.034438][ T8203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 279.046037][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.070799][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 279.070819][ T30] audit: type=1800 audit(1748148588.426:347): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.617" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 279.072250][ T8221] fuse: Unknown parameter 'X¸Ô×õ¶›™xÅq˜ÈË·áåNÎ×LÒÞ [ 279.072250][ T8221] ‘A‚”]-’.ü_x«a?œ;MV¾~ø.B@즵®M½âV:ÍCq%àR|z¼ÛÖéÖÛ8¹á‰öè”Î%ê?ãN6ןÊROüij¢f}g«0x0000000000000007' [ 279.077299][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 279.194910][ T5882] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 279.267365][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.287798][ T30] audit: type=1326 audit(1748148588.646:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 279.298129][ T5882] usb 2-1: config 0 descriptor?? [ 279.323926][ T9] usb 5-1: USB disconnect, device number 50 [ 279.367083][ T30] audit: type=1326 audit(1748148588.676:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 279.397213][ T30] audit: type=1326 audit(1748148588.676:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 279.424050][ T30] audit: type=1326 audit(1748148588.676:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 279.457259][ T30] audit: type=1326 audit(1748148588.676:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 279.490904][ T5882] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 279.533913][ T30] audit: type=1326 audit(1748148588.676:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 279.853040][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 280.047464][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.136905][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.172928][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.212798][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.289668][ T8230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.307388][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.422925][ T5885] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 280.773155][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 280.788808][ T5885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 280.828443][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.866124][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.920203][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.952781][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.993962][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 281.019841][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.260030][ T5885] usb 4-1: GET_CAPABILITIES returned 0 [ 281.265725][ T5885] usbtmc 4-1:16.0: can't read capabilities [ 281.557700][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.585519][ T5886] usb 4-1: USB disconnect, device number 55 [ 281.592875][ T8249] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 281.671281][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.683735][ T24] usb 5-1: USB disconnect, device number 51 [ 281.858188][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.870795][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.065932][ T5886] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 282.212802][ T5886] usb 3-1: device descriptor read/64, error -71 [ 282.262913][ T5887] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 282.283391][ T5882] gspca_sonixj: reg_w1 err -71 [ 282.299284][ T5882] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 282.311712][ T5882] usb 2-1: USB disconnect, device number 37 [ 282.360623][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.375969][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.444702][ T5887] usb 5-1: config 0 has no interfaces? [ 282.452903][ T5886] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 282.463605][ T5887] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.474147][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.482463][ T5887] usb 5-1: Product: syz [ 282.491362][ T5887] usb 5-1: Manufacturer: syz [ 282.503624][ T5887] usb 5-1: SerialNumber: syz [ 282.520919][ T5887] usb 5-1: config 0 descriptor?? [ 282.599118][ T8274] netlink: 'syz.3.631': attribute type 6 has an invalid length. [ 282.603386][ T5886] usb 3-1: device descriptor read/64, error -71 [ 282.608276][ T8274] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.631'. [ 282.724649][ T5886] usb usb3-port1: attempt power cycle [ 282.872914][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 282.999959][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.015666][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.035369][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 283.054334][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 283.088626][ T5886] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 283.112093][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 283.125221][ T5885] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 283.136968][ T5886] usb 3-1: device descriptor read/8, error -71 [ 283.143826][ T24] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 283.153972][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.166281][ T24] usb 4-1: config 0 descriptor?? [ 283.293075][ T5885] usb 2-1: device descriptor read/64, error -71 [ 283.392840][ T5886] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 283.424781][ T5886] usb 3-1: device descriptor read/8, error -71 [ 283.533485][ T5886] usb usb3-port1: unable to enumerate USB device [ 283.552865][ T5885] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 283.587404][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 283.597842][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 283.615413][ T24] usb 4-1: USB disconnect, device number 56 [ 283.687069][ T5885] usb 2-1: device descriptor read/64, error -71 [ 283.805093][ T5885] usb usb2-port1: attempt power cycle [ 284.153880][ T5885] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 284.193827][ T5885] usb 2-1: device descriptor read/8, error -71 [ 284.443535][ T5885] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 284.520431][ T5885] usb 2-1: device descriptor read/8, error -71 [ 284.754596][ T5885] usb usb2-port1: unable to enumerate USB device [ 285.129860][ T5887] usb 5-1: USB disconnect, device number 52 [ 285.412649][ T8319] FAULT_INJECTION: forcing a failure. [ 285.412649][ T8319] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 285.470615][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.0.641 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 285.470645][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.470662][ T8319] Call Trace: [ 285.470674][ T8319] [ 285.470683][ T8319] dump_stack_lvl+0x189/0x250 [ 285.470716][ T8319] ? __lock_acquire+0xaac/0xd20 [ 285.470747][ T8319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.470775][ T8319] ? __pfx__printk+0x10/0x10 [ 285.470799][ T8319] ? __might_fault+0xb0/0x130 [ 285.470837][ T8319] should_fail_ex+0x414/0x560 [ 285.470864][ T8319] _copy_from_iter+0x1db/0x15a0 [ 285.470897][ T8319] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 285.470919][ T8319] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 285.470947][ T8319] ? __pfx__copy_from_iter+0x10/0x10 [ 285.470974][ T8319] ? __build_skb_around+0x257/0x3e0 [ 285.471004][ T8319] ? netlink_sendmsg+0x642/0xb30 [ 285.471026][ T8319] ? skb_put+0x11b/0x210 [ 285.471056][ T8319] netlink_sendmsg+0x6b2/0xb30 [ 285.471090][ T8319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.471118][ T8319] ? aa_sock_msg_perm+0x94/0x160 [ 285.471143][ T8319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.471166][ T8319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.471191][ T8319] __sock_sendmsg+0x21c/0x270 [ 285.471215][ T8319] ____sys_sendmsg+0x505/0x830 [ 285.471249][ T8319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.471286][ T8319] ? import_iovec+0x74/0xa0 [ 285.471318][ T8319] ___sys_sendmsg+0x21f/0x2a0 [ 285.471348][ T8319] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.471419][ T8319] ? __fget_files+0x2a/0x420 [ 285.471445][ T8319] ? __fget_files+0x3a0/0x420 [ 285.471481][ T8319] __x64_sys_sendmsg+0x19b/0x260 [ 285.471512][ T8319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.471558][ T8319] ? do_syscall_64+0xba/0x210 [ 285.471593][ T8319] do_syscall_64+0xf6/0x210 [ 285.471638][ T8319] ? clear_bhb_loop+0x60/0xb0 [ 285.471663][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.471683][ T8319] RIP: 0033:0x7fddde18e969 [ 285.471704][ T8319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.471723][ T8319] RSP: 002b:00007fdddefe2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.471744][ T8319] RAX: ffffffffffffffda RBX: 00007fddde3b5fa0 RCX: 00007fddde18e969 [ 285.471759][ T8319] RDX: 0000000004004004 RSI: 0000200000000000 RDI: 0000000000000003 [ 285.471772][ T8319] RBP: 00007fdddefe2090 R08: 0000000000000000 R09: 0000000000000000 [ 285.471785][ T8319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.471797][ T8319] R13: 0000000000000000 R14: 00007fddde3b5fa0 R15: 00007fddde4dfa28 [ 285.471828][ T8319] [ 285.955520][ T30] audit: type=1326 audit(1748148595.306:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.1.644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff66498e969 code=0x0 [ 286.613603][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 286.811617][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 286.819949][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.833162][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 286.849201][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 286.882838][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 286.927888][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 286.988525][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 287.046390][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 287.958190][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 287.988390][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.033130][ T24] usb 5-1: Product: syz [ 288.063675][ T24] usb 5-1: Manufacturer: syz [ 288.068342][ T24] usb 5-1: SerialNumber: syz [ 288.090102][ T8368] loop6: detected capacity change from 0 to 7 [ 288.150844][ T24] usb 5-1: config 0 descriptor?? [ 288.252142][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.253173][ T8368] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 288.284549][ T8368] loop6: partition table partially beyond EOD, truncated [ 288.318155][ T8371] netlink: 'syz.1.656': attribute type 20 has an invalid length. [ 288.362646][ T8368] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 288.838538][ T24] usb 5-1: USB disconnect, device number 53 [ 289.040963][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.108357][ T8379] loop6: detected capacity change from 0 to 7 [ 289.115869][ T6336] udevd[6336]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 289.313956][ T8379] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 289.319348][ T8379] loop6: partition table partially beyond EOD, truncated [ 289.391029][ T8379] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 289.878615][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 290.027260][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 290.471580][ T8393] 8021q: VLANs not supported on caif0 [ 290.479181][ T8394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.664'. [ 290.513353][ T8394] x_tables: unsorted underflow at hook 3 [ 290.650699][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'. [ 290.722428][ T8400] kvm: MONITOR instruction emulated as NOP! [ 290.767070][ T8406] netlink: 'syz.4.665': attribute type 20 has an invalid length. [ 290.961488][ T5882] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 291.154884][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 291.167349][ T5882] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 291.176525][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.184972][ T5882] usb 2-1: Product: syz [ 291.189399][ T5882] usb 2-1: Manufacturer: syz [ 291.194353][ T5882] usb 2-1: SerialNumber: syz [ 291.207573][ T5882] usb 2-1: config 0 descriptor?? [ 291.262875][ T5882] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 291.272211][ T5882] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 291.284315][ T5882] usb-storage 2-1:0.0: USB Mass Storage device detected [ 291.327312][ T5882] usb-storage 2-1:0.0: device ignored [ 291.548265][ T24] usb 2-1: USB disconnect, device number 42 [ 292.093157][ T5882] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 292.260225][ T5882] usb 4-1: config 0 has no interfaces? [ 292.269778][ T5882] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 292.290418][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.318588][ T5882] usb 4-1: Product: syz [ 292.329158][ T5882] usb 4-1: Manufacturer: syz [ 292.395025][ T5882] usb 4-1: SerialNumber: syz [ 292.416132][ T5882] usb 4-1: config 0 descriptor?? [ 292.481137][ T8437] netlink: 'syz.1.674': attribute type 20 has an invalid length. [ 293.800761][ T8445] netlink: 'syz.4.676': attribute type 16 has an invalid length. [ 293.809647][ T8445] netlink: 'syz.4.676': attribute type 17 has an invalid length. [ 294.775721][ T24] usb 4-1: USB disconnect, device number 57 [ 294.993160][ T5882] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 295.180001][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 295.192789][ T5884] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 295.214904][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.248150][ T5882] usb 3-1: config 0 has no interfaces? [ 295.338390][ T5882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 295.348249][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.374545][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 295.374583][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 295.388629][ T5882] usb 3-1: Product: syz [ 295.467221][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.490801][ T5884] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 295.512278][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.514481][ T5882] usb 3-1: Manufacturer: syz [ 295.525318][ T5887] usb 4-1: device descriptor read/64, error -71 [ 295.590265][ T5882] usb 3-1: SerialNumber: syz [ 295.595291][ T5884] usb 2-1: config 0 descriptor?? [ 295.615657][ T5882] usb 3-1: config 0 descriptor?? [ 295.626066][ T5884] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 295.803009][ T5887] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 296.146777][ T8453] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.183285][ T5887] usb 4-1: device descriptor read/64, error -71 [ 296.314641][ T5887] usb usb4-port1: attempt power cycle [ 296.336946][ T24] usb 3-1: USB disconnect, device number 56 [ 296.713330][ T5887] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 296.743774][ T5887] usb 4-1: device descriptor read/8, error -71 [ 296.903037][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 296.997268][ T5887] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 297.038023][ T5887] usb 4-1: device descriptor read/8, error -71 [ 297.054808][ T24] usb 5-1: device descriptor read/64, error -71 [ 297.153340][ T5887] usb usb4-port1: unable to enumerate USB device [ 297.312885][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 297.493023][ T24] usb 5-1: device descriptor read/64, error -71 [ 297.617043][ T24] usb usb5-port1: attempt power cycle [ 297.994935][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 298.074743][ T5186] bcm5974 2-1:0.0: could not read from device [ 298.087466][ T24] usb 5-1: device descriptor read/8, error -71 [ 298.114289][ T5884] bcm5974 2-1:0.0: could not read from device [ 298.195412][ T5186] bcm5974 2-1:0.0: could not read from device [ 298.244625][ T5884] input: failed to attach handler mousedev to device input19, error: -5 [ 298.309071][ T5884] usb 2-1: USB disconnect, device number 43 [ 298.383023][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 298.416701][ T24] usb 5-1: device descriptor read/8, error -71 [ 298.583208][ T24] usb usb5-port1: unable to enumerate USB device [ 299.502740][ T8518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.521655][ T8518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.940722][ T8524] ptrace attach of "./syz-executor exec"[5847] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/adsp1 €}eö       ÿÿ ÿÿÿÿ    $  \x0c   , @ (    ÿÿ ÿÿÿÿ    $ @@  \x0c   , @ ( [ 300.155334][ T5919] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 300.290222][ T8531] loop6: detected capacity change from 0 to 7 [ 300.361359][ T8531] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 300.450759][ T8531] loop6: partition table partially beyond EOD, truncated [ 300.498292][ T8531] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 300.502836][ T24] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 300.621193][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.631224][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.705159][ T24] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 300.741084][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 300.776504][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.790535][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.803700][ T5919] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 300.812914][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.819063][ T24] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 300.832161][ T5919] usb 3-1: config 0 descriptor?? [ 300.868487][ T5919] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 300.953631][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.056004][ T24] usb 2-1: config 0 descriptor?? [ 301.171409][ T8529] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 301.516862][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.541644][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.561923][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.581657][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.601555][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.628316][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.646154][ T8537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.659696][ T8537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.735984][ T8529] rdma_op ffff88802e2ef1f0 conn xmit_rdma 0000000000000000 [ 301.791380][ T24] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 301.806263][ T24] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 301.887104][ T24] belkin 0003:1020:0006.0009: hidraw0: USB HID vde.11 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 302.132360][ T24] usb 2-1: USB disconnect, device number 44 [ 302.622119][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.638590][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.783963][ T24] usb 3-1: USB disconnect, device number 57 [ 303.228775][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.241213][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.268624][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.492998][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 303.664183][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 303.694715][ T8566] netlink: 'syz.2.711': attribute type 20 has an invalid length. [ 303.702920][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 303.771299][ T24] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 303.787565][ T24] usb 2-1: config 0 has no interface number 0 [ 303.808882][ T24] usb 2-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 303.820131][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.832807][ T24] usb 2-1: Product: syz [ 303.875076][ T24] usb 2-1: Manufacturer: syz [ 303.886479][ T24] usb 2-1: SerialNumber: syz [ 303.909936][ T24] usb 2-1: config 0 descriptor?? [ 303.979358][ T8565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.222126][ T8565] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.617544][ T8565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.382823][ T5886] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 305.533020][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 305.545311][ T5886] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 305.572199][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 305.580395][ T5886] usb 5-1: can't read configurations, error -61 [ 305.742850][ T5886] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 305.956614][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 305.978093][ T5886] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 306.012301][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 306.042009][ T5886] usb 5-1: can't read configurations, error -61 [ 306.080999][ T5886] usb usb5-port1: attempt power cycle [ 306.141682][ T24] usb 2-1: Found UVC 0.00 device syz (0408:4034) [ 306.160125][ T24] usb 2-1: No valid video chain found. [ 306.213257][ T24] usb 2-1: USB disconnect, device number 45 [ 306.433063][ T5886] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 306.439181][ T8590] loop6: detected capacity change from 0 to 7 [ 306.459412][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 306.465739][ T5886] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 306.491495][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 306.508817][ T5886] usb 5-1: can't read configurations, error -61 [ 306.547285][ T8590] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 306.553090][ T8590] loop6: partition table partially beyond EOD, truncated [ 306.570618][ T8590] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 306.654094][ T5886] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 306.693590][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 306.717940][ T5886] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 306.761488][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 306.779581][ T5886] usb 5-1: can't read configurations, error -61 [ 306.797430][ T5886] usb usb5-port1: unable to enumerate USB device [ 306.813761][ T8598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.839897][ T8598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.042800][ T5886] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 307.224187][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 307.248520][ T5886] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 307.262612][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.285141][ T5886] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 307.311058][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.327952][ T5886] usb 2-1: Product: syz [ 307.333691][ T5886] usb 2-1: Manufacturer: syz [ 307.338432][ T5886] usb 2-1: SerialNumber: syz [ 307.351864][ T5886] usb 2-1: config 0 descriptor?? [ 307.732829][ T5886] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 307.763460][ T8621] netlink: 'syz.0.726': attribute type 20 has an invalid length. [ 307.892339][ T8625] CIFS: VFS: Malformed UNC in devname [ 307.902816][ T5886] usb 3-1: config 0 has no interfaces? [ 307.912901][ T5886] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.931928][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.949264][ T5886] usb 3-1: Product: syz [ 307.955637][ T5886] usb 3-1: Manufacturer: syz [ 307.963037][ T5886] usb 3-1: SerialNumber: syz [ 308.057384][ T5886] usb 3-1: config 0 descriptor?? [ 308.279747][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'. [ 308.298197][ T5886] usb 2-1: USB disconnect, device number 46 [ 308.306006][ T8614] vlan2: entered promiscuous mode [ 308.315523][ T8614] bridge0: entered promiscuous mode [ 308.522732][ T30] audit: type=1326 audit(1748148617.866:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 308.646298][ T30] audit: type=1326 audit(1748148617.866:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 308.729155][ T30] audit: type=1326 audit(1748148617.876:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f95d8d2d0 code=0x7ffc0000 [ 308.834712][ T8640] loop6: detected capacity change from 0 to 63 [ 308.871973][ T5833] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.939329][ T30] audit: type=1326 audit(1748148617.876:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 308.976979][ T5833] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.054664][ T8640] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.102788][ T30] audit: type=1326 audit(1748148617.876:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 309.160832][ T5887] usb 3-1: USB disconnect, device number 58 [ 309.170688][ T8640] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.228064][ T30] audit: type=1326 audit(1748148617.886:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 309.241627][ T8644] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.319626][ T5833] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.341673][ T5833] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.372918][ T30] audit: type=1326 audit(1748148617.886:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 309.406243][ T5833] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.456537][ T8640] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.466510][ T30] audit: type=1326 audit(1748148617.886:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 309.493032][ T5886] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 309.501028][ T8640] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.569861][ T30] audit: type=1326 audit(1748148617.906:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 309.601995][ T30] audit: type=1326 audit(1748148617.906:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f95d8e969 code=0x7ffc0000 [ 309.680840][ T5886] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.701508][ T5886] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 309.721141][ T5886] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.752046][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.775917][ T5886] usb 5-1: Product: syz [ 309.781560][ T5886] usb 5-1: Manufacturer: syz [ 309.791508][ T5886] usb 5-1: SerialNumber: syz [ 310.049059][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.088523][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.126376][ T5886] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 310.200655][ T5886] usb 5-1: USB disconnect, device number 62 [ 310.692909][ T5886] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 310.863561][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 310.873388][ T5886] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 310.891559][ T5886] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 310.932212][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 310.980228][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.009749][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 311.050954][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.097072][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.156303][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.216006][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.352241][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 311.532372][ T5886] usb 5-1: usb_control_msg returned -32 [ 311.543299][ T5886] usbtmc 5-1:16.0: can't read capabilities [ 311.581950][ T5886] usb 5-1: USB disconnect, device number 63 [ 311.663589][ T8638] syz.1.732 (8638): drop_caches: 2 [ 311.702799][ T5885] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 311.878828][ T5885] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 311.909012][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.985094][ T5885] usb 3-1: Product: syz [ 312.027263][ T5885] usb 3-1: Manufacturer: syz [ 312.097908][ T5885] usb 3-1: SerialNumber: syz [ 312.208448][ T5885] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 312.336645][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 312.682804][ T5886] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 312.709802][ T8695] loop6: detected capacity change from 0 to 7 [ 312.730883][ T5833] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 312.737772][ T5833] loop6: partition table partially beyond EOD, truncated [ 312.749942][ T5833] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 312.854569][ T5885] usb 3-1: USB disconnect, device number 59 [ 312.910956][ T8695] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 312.916924][ T8695] loop6: partition table partially beyond EOD, truncated [ 312.945835][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 312.956360][ T8695] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 312.969458][ T5886] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 312.990408][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.020549][ T5886] usb 4-1: Product: syz [ 313.029509][ T5886] usb 4-1: Manufacturer: syz [ 313.042799][ T5886] usb 4-1: SerialNumber: syz [ 313.083014][ T5886] usb 4-1: config 0 descriptor?? [ 313.120383][ T5886] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 313.312642][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 313.323429][ T8690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.749'. [ 313.361145][ T5886] gp8psk: usb in 128 operation failed. [ 313.394344][ T5886] gp8psk: usb in 137 operation failed. [ 313.407137][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.443401][ T5886] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 313.473434][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 313.481433][ T24] ath9k_htc: Failed to initialize the device [ 313.498973][ T5886] usb 4-1: media controller created [ 313.552764][ T5885] usb 3-1: ath9k_htc: USB layer deinitialized [ 313.648464][ T8707] binder_alloc: 8706: binder_alloc_buf, no vma [ 313.658454][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.749230][ T8709] netlink: 'syz.0.752': attribute type 20 has an invalid length. [ 313.895818][ T5886] gp8psk_fe: Frontend revision 1 attached [ 313.903960][ T5886] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 313.915374][ T5886] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 313.923082][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 314.043269][ T5886] gp8psk: usb in 138 operation failed. [ 314.048868][ T5886] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 314.059136][ T5886] gp8psk: found Genpix USB device pID = 201 (hex) [ 314.084710][ T5885] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 314.084930][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.098212][ T5886] usb 4-1: USB disconnect, device number 62 [ 314.108057][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.138799][ T9] usb 2-1: config 220 has no interface number 2 [ 314.155711][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.188860][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 314.204982][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 314.216806][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 314.227211][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.421517][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.429986][ T9] usb 2-1: Product: syz [ 314.439584][ T9] usb 2-1: Manufacturer: syz [ 314.454310][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 314.460453][ T9] usb 2-1: SerialNumber: syz [ 314.485904][ T5885] usb 3-1: no configurations [ 314.500098][ T5885] usb 3-1: can't read configurations, error -22 [ 314.663747][ T5886] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 314.674432][ T5885] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 314.787639][ T9] usb 2-1: selecting invalid altsetting 0 [ 314.811874][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 314.841381][ T9] usb 2-1: No valid video chain found. [ 314.873715][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 314.891020][ T5885] usb 3-1: no configurations [ 314.894200][ T9] usb 2-1: selecting invalid altsetting 0 [ 314.897712][ T5885] usb 3-1: can't read configurations, error -22 [ 314.901725][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 314.928166][ T5885] usb usb3-port1: attempt power cycle [ 314.991732][ T9] usb 2-1: USB disconnect, device number 47 [ 315.302835][ T5885] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 315.338252][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 315.350371][ T5885] usb 3-1: no configurations [ 315.355657][ T5885] usb 3-1: can't read configurations, error -22 [ 315.402110][ T5884] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 315.470253][ T8730] netlink: 'syz.0.762': attribute type 1 has an invalid length. [ 315.481833][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 315.503537][ T5885] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 315.523620][ T5886] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 315.558732][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 315.568934][ T5885] usb 3-1: no configurations [ 315.573739][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 315.589570][ T5885] usb 3-1: can't read configurations, error -22 [ 315.602042][ T5884] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 315.612165][ T5885] usb usb3-port1: unable to enumerate USB device [ 315.622640][ T5884] usb 4-1: config 0 has no interface number 0 [ 315.634073][ T5884] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 315.643389][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.651507][ T5884] usb 4-1: Product: syz [ 315.656170][ T5884] usb 4-1: Manufacturer: syz [ 315.660822][ T5884] usb 4-1: SerialNumber: syz [ 315.670149][ T5884] usb 4-1: config 0 descriptor?? [ 315.680909][ T5884] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 315.712886][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 315.719759][ T5886] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 315.729315][ T5886] usb 5-1: config 0 has no interface number 0 [ 315.739335][ T5886] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 315.748813][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.757366][ T5886] usb 5-1: Product: syz [ 315.761657][ T5886] usb 5-1: Manufacturer: syz [ 315.767038][ T5886] usb 5-1: SerialNumber: syz [ 315.779343][ T5886] usb 5-1: config 0 descriptor?? [ 315.806657][ T5886] smsc95xx v2.0.0 [ 315.933142][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 315.943609][ T8741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.959406][ T5884] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 316.407154][ T5886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 316.423757][ T5886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.570976][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 116 [ 316.988021][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.218442][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225037][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.329696][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.973151][ T5887] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 318.158040][ T5887] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 318.176831][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.214378][ T5887] usb 3-1: config 0 descriptor?? [ 318.251074][ T5887] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 318.407206][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.416531][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.694883][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 318.695538][ T5919] usb 4-1: USB disconnect, device number 63 [ 318.769631][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 318.839608][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 318.869849][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 318.869869][ T30] audit: type=1326 audit(1748148628.216:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 318.898381][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.921157][ T5919] quatech2 4-1:0.51: device disconnected [ 319.056342][ T30] audit: type=1326 audit(1748148628.216:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 319.098996][ T30] audit: type=1326 audit(1748148628.226:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 319.161300][ T5886] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 319.207727][ T30] audit: type=1326 audit(1748148628.226:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 319.231706][ T30] audit: type=1326 audit(1748148628.226:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 319.243092][ T5886] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 319.277668][ T30] audit: type=1326 audit(1748148628.226:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 319.299877][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.316771][ T5919] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 319.352205][ T5886] usb 5-1: USB disconnect, device number 64 [ 319.388735][ T30] audit: type=1326 audit(1748148628.226:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37918e969 code=0x7ffc0000 [ 319.488338][ T30] audit: type=1326 audit(1748148628.226:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc37918d2d0 code=0x7ffc0000 [ 319.555712][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 319.592457][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 319.619548][ T30] audit: type=1326 audit(1748148628.226:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc37918e56b code=0x7ffc0000 [ 319.666965][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.685113][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 319.711802][ T30] audit: type=1326 audit(1748148628.226:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8773 comm="syz.3.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc37918e56b code=0x7ffc0000 [ 319.733949][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.783748][ T5919] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 319.797918][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.818201][ T5919] usb 4-1: Product: syz [ 319.829251][ T5919] usb 4-1: Manufacturer: syz [ 319.839625][ T5919] usb 4-1: SerialNumber: syz [ 319.856509][ T5919] usb 4-1: config 0 descriptor?? [ 319.872124][ T5919] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected [ 319.999692][ T5919] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 320.076547][ T5886] usb 4-1: USB disconnect, device number 64 [ 320.127605][ T5886] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 320.169441][ T5886] ti_usb_3410_5052 4-1:0.0: device disconnected [ 320.343061][ T5887] gp8psk: usb in 128 operation failed. [ 320.357781][ T5887] gp8psk: usb in 137 operation failed. [ 320.376065][ T5887] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 320.412979][ T5887] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 320.534864][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.556346][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.733341][ T5885] usb 3-1: USB disconnect, device number 64 [ 320.952858][ T5887] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 321.181919][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 321.221971][ T8800] syz.1.776 (8800): drop_caches: 2 [ 321.222047][ T5887] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 321.267553][ T5887] usb 5-1: config 0 has no interface number 0 [ 321.285161][ T8811] No such timeout policy "syz1" [ 321.312431][ T5887] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 321.333452][ T8815] tipc: Started in network mode [ 321.352076][ T8815] tipc: Node identity e0000002, cluster identity 4711 [ 321.394480][ T8815] tipc: Enabling of bearer rejected, failed to enable media [ 321.402767][ T5887] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 321.402803][ T5887] usb 5-1: config 0 interface 41 has no altsetting 0 [ 321.425580][ T5887] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 321.462365][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.507600][ T5887] usb 5-1: Product: syz [ 321.517165][ T5887] usb 5-1: Manufacturer: syz [ 321.521807][ T5887] usb 5-1: SerialNumber: syz [ 321.537183][ T8807] xt_CT: No such helper "snmp" [ 321.633974][ T5887] usb 5-1: config 0 descriptor?? [ 321.685337][ T8789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.703519][ T8789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.910229][ T8826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.939218][ T8789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.947274][ T8789] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 321.959902][ T8826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.039124][ T8826] input: syz1 as /devices/virtual/input/input21 [ 322.598026][ T5887] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 323.472069][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.565651][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.295503][ T5886] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 324.369563][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.419022][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.481075][ T5886] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 324.492540][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.584700][ T5886] usb 3-1: config 0 descriptor?? [ 324.626251][ T5886] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 325.093042][ T5884] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 325.255383][ T5884] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 325.274074][ T5884] usb 2-1: config 0 has no interface number 0 [ 325.285023][ T5884] usb 2-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.298574][ T5884] usb 2-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 325.311047][ T5884] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 166, changing to 7 [ 325.333082][ T5884] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 325.345295][ T5884] usb 2-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.462833][ T5887] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 325.492066][ T5887] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 325.496044][ T5884] usb 2-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= d.81 [ 325.513953][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.543700][ T5887] usb 5-1: USB disconnect, device number 65 [ 325.584075][ T5884] usb 2-1: Product: syz [ 325.600862][ T5884] usb 2-1: Manufacturer: syz [ 325.622071][ T5884] usb 2-1: SerialNumber: syz [ 325.640450][ T5884] usb 2-1: config 0 descriptor?? [ 325.662966][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 325.667181][ T8862] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 325.755498][ T5884] em28xx 2-1:0.92: New device syz syz @ 480 Mbps (093b:a005, interface 92, class 92) [ 325.787234][ T5884] em28xx 2-1:0.92: DVB interface 92 found: isoc [ 326.149639][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.199389][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.259225][ T5884] em28xx 2-1:0.92: unknown em28xx chip ID (0) [ 326.347800][ T5884] em28xx 2-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 326.383586][ T5884] em28xx 2-1:0.92: board has no eeprom [ 326.462933][ T5884] em28xx 2-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 326.492194][ T5884] em28xx 2-1:0.92: dvb set to isoc mode. [ 326.503527][ T24] em28xx 2-1:0.92: Remote control support is not available for this card. [ 326.527783][ T5884] usb 2-1: USB disconnect, device number 48 [ 326.558713][ T5884] em28xx 2-1:0.92: Disconnecting em28xx [ 326.583381][ T5884] em28xx 2-1:0.92: Closing input extension [ 326.641147][ T5884] em28xx 2-1:0.92: Freeing device [ 326.664387][ T5886] gp8psk: usb in 128 operation failed. [ 326.690799][ T5886] gp8psk: usb in 137 operation failed. [ 326.707962][ T5886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 326.742801][ T5886] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 327.339604][ T5887] usb 3-1: USB disconnect, device number 65 [ 327.911188][ T8906] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 328.503012][ T5886] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 328.646640][ T8916] netlink: 'syz.3.805': attribute type 20 has an invalid length. [ 328.652869][ T5886] usb 5-1: device descriptor read/64, error -71 [ 328.962797][ T5886] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 329.202849][ T5886] usb 5-1: device descriptor read/64, error -71 [ 329.336122][ T5886] usb usb5-port1: attempt power cycle [ 329.672826][ T5886] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 329.708221][ T5886] usb 5-1: device descriptor read/8, error -71 [ 329.944493][ T8926] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 329.955287][ T5886] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 330.004657][ T5886] usb 5-1: device descriptor read/8, error -71 [ 330.054081][ T8925] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 330.127268][ T5886] usb usb5-port1: unable to enumerate USB device [ 330.309005][ T8933] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 330.730124][ T8945] bond0: entered promiscuous mode [ 330.735464][ T8945] bond_slave_0: entered promiscuous mode [ 330.741673][ T8945] bond_slave_1: entered promiscuous mode [ 331.194729][ T8957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.224737][ T24] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 331.248929][ T8957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.292941][ T31] INFO: task kworker/1:7:5902 blocked for more than 143 seconds. [ 331.357067][ T31] Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 [ 331.378486][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.404732][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 331.413956][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.424332][ T31] task:kworker/1:7 state:D stack:21352 pid:5902 tgid:5902 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 331.436282][ T24] usb 3-1: config 0 descriptor?? [ 331.496240][ T31] Workqueue: usb_hub_wq hub_event [ 331.499047][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 331.509168][ T31] Call Trace: [ 331.722410][ T31] [ 331.727892][ T31] __schedule+0x16e2/0x4cd0 [ 331.733491][ T31] ? __lock_acquire+0xaac/0xd20 [ 331.738687][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.744933][ T31] ? schedule+0x165/0x360 [ 331.749522][ T31] ? __pfx___schedule+0x10/0x10 [ 331.758656][ T31] ? schedule+0x91/0x360 [ 331.767777][ T31] schedule+0x165/0x360 [ 331.772222][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.781403][ T31] __mutex_lock+0x724/0xe80 [ 331.786684][ T31] ? __mutex_lock+0x51b/0xe80 [ 331.791676][ T31] ? hub_event+0x21cb/0x4a00 [ 331.796901][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.802239][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.872419][ T31] hub_event+0x21cb/0x4a00 [ 331.880792][ T31] ? __lock_acquire+0xaac/0xd20 [ 331.892043][ T31] ? do_raw_spin_lock+0x121/0x290 [ 331.901174][ T31] ? __pfx_hub_event+0x10/0x10 [ 331.911671][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 331.922131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.931926][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 331.946756][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 331.957860][ T31] process_scheduled_works+0xadb/0x17a0 [ 331.964496][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.972508][ T31] worker_thread+0x8a0/0xda0 [ 331.986712][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.997462][ T31] ? __kthread_parkme+0x7b/0x200 [ 332.003120][ T31] kthread+0x70e/0x8a0 [ 332.016628][ T31] ? __pfx_worker_thread+0x10/0x10 [ 332.023358][ T31] ? __pfx_kthread+0x10/0x10 [ 332.036848][ T31] ? __pfx_kthread+0x10/0x10 [ 332.060694][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.077843][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.092847][ T31] ? __pfx_kthread+0x10/0x10 [ 332.097795][ T31] ret_from_fork+0x4b/0x80 [ 332.115066][ T31] ? __pfx_kthread+0x10/0x10 [ 332.137337][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.158802][ T31] [ 332.170133][ T31] [ 332.170133][ T31] Showing all locks held in the system: [ 332.234107][ T31] 6 locks held by kworker/1:0/24: [ 332.255554][ T31] #0: ffff888021a8e948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 332.295732][ T31] #1: ffffc900001e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 332.346282][ T31] #2: ffff888144b31198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 332.367401][ T31] #3: ffff888027cf1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 332.403616][ T31] #4: ffff888027075160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 332.435927][ T31] #5: ffff88805e06cf98 (&d->usb_mutex#2){+.+.}-{4:4}, at: gp8psk_usb_in_op+0x89/0x220 [ 332.465034][ T31] 1 lock held by khungtaskd/31: [ 332.482322][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 332.517907][ T31] 5 locks held by kworker/1:1/49: [ 332.542152][ T31] #0: ffff888021a8e948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 332.621688][ T31] #1: ffffc90000ba7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 332.702608][ T31] #2: ffff888028b6d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 332.746261][ T31] #3: ffff888028bc1510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 332.811434][ T31] #4: ffff88802738e568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 332.831665][ T31] 2 locks held by kworker/u8:5/1090: [ 332.844878][ T31] 2 locks held by getty/5591: [ 332.855861][ T31] #0: ffff888030a070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 332.884360][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 332.938131][ T31] 1 lock held by udevd/5833: [ 332.957692][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 332.999677][ T31] 2 locks held by kworker/0:4/5887: [ 333.023318][ T31] 5 locks held by kworker/1:7/5902: [ 333.038477][ T31] #0: ffff888021a8e948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 333.061147][ T31] #1: ffffc9000476fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 333.076863][ T31] #2: ffff888145ba9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 333.089871][ T31] #3: ffff888145bb3510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 333.100628][ T31] #4: ffff88802738e568 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 333.111121][ T31] [ 333.113973][ T31] ============================================= [ 333.113973][ T31] [ 333.123201][ T31] NMI backtrace for cpu 1 [ 333.123219][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 333.123247][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.123260][ T31] Call Trace: [ 333.123269][ T31] [ 333.123277][ T31] dump_stack_lvl+0x189/0x250 [ 333.123310][ T31] ? __wake_up_klogd+0xd9/0x110 [ 333.123337][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.123366][ T31] ? __pfx__printk+0x10/0x10 [ 333.123395][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 333.123419][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 333.123437][ T31] ? _printk+0xcf/0x120 [ 333.123461][ T31] ? __pfx__printk+0x10/0x10 [ 333.123484][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.123505][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 333.123535][ T31] watchdog+0xfee/0x1030 [ 333.123564][ T31] ? watchdog+0x1de/0x1030 [ 333.123598][ T31] kthread+0x70e/0x8a0 [ 333.123626][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.123650][ T31] ? __pfx_kthread+0x10/0x10 [ 333.123675][ T31] ? __pfx_kthread+0x10/0x10 [ 333.123698][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.123721][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.123746][ T31] ? __pfx_kthread+0x10/0x10 [ 333.123769][ T31] ret_from_fork+0x4b/0x80 [ 333.123790][ T31] ? __pfx_kthread+0x10/0x10 [ 333.123814][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.123850][ T31] [ 333.123892][ T31] Sending NMI from CPU 1 to CPUs 0: [ 333.273556][ C0] NMI backtrace for cpu 0 [ 333.273574][ C0] CPU: 0 UID: 0 PID: 3447 Comm: kworker/u8:8 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 333.273594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.273605][ C0] Workqueue: bat_events batadv_nc_worker [ 333.273631][ C0] RIP: 0010:batadv_nc_purge_paths+0x313/0x3b0 [ 333.273656][ C0] Code: ff ff e8 00 f7 9a f6 4c 89 f7 be 03 00 00 00 e8 a3 ff 93 f9 e9 8c fe ff ff e8 e9 f6 9a f6 eb 05 e8 e2 f6 9a f6 48 8b 7c 24 50 98 20 34 00 48 8b 44 24 48 42 0f b6 04 28 84 c0 4c 8b 74 24 40 [ 333.273671][ C0] RSP: 0018:ffffc9000b33fa28 EFLAGS: 00000293 [ 333.273685][ C0] RAX: ffffffff8b24faee RBX: ffffffff8b24fce0 RCX: ffff888030c3bc00 [ 333.273698][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88805f4f1100 [ 333.273709][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 333.273719][ C0] R10: dffffc0000000000 R11: fffff52001667f34 R12: ffff88805f32d220 [ 333.273731][ C0] R13: dffffc0000000000 R14: ffff8880286abc80 R15: ffff8880286abc90 [ 333.273744][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 333.273757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.273768][ C0] CR2: 00007fc37937d2d8 CR3: 0000000078816000 CR4: 00000000003526f0 [ 333.273785][ C0] Call Trace: [ 333.273793][ C0] [ 333.273808][ C0] batadv_nc_worker+0x369/0x610 [ 333.273828][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 333.273845][ C0] process_scheduled_works+0xadb/0x17a0 [ 333.273875][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.273910][ C0] worker_thread+0x8a0/0xda0 [ 333.273942][ C0] kthread+0x70e/0x8a0 [ 333.273963][ C0] ? __pfx_worker_thread+0x10/0x10 [ 333.273979][ C0] ? __pfx_kthread+0x10/0x10 [ 333.273999][ C0] ? __pfx_kthread+0x10/0x10 [ 333.274017][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.274036][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.274063][ C0] ? __pfx_kthread+0x10/0x10 [ 333.274082][ C0] ret_from_fork+0x4b/0x80 [ 333.274099][ C0] ? __pfx_kthread+0x10/0x10 [ 333.274118][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.274142][ C0] [ 333.274741][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 333.491764][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 333.503586][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.513842][ T31] Call Trace: [ 333.517127][ T31] [ 333.520063][ T31] dump_stack_lvl+0x99/0x250 [ 333.524672][ T31] ? __asan_memcpy+0x40/0x70 [ 333.529269][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.534484][ T31] ? __pfx__printk+0x10/0x10 [ 333.539092][ T31] panic+0x2db/0x790 [ 333.543008][ T31] ? __pfx_panic+0x10/0x10 [ 333.547438][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 333.552205][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 333.558030][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 333.563419][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 333.569596][ T31] watchdog+0x102d/0x1030 [ 333.574030][ T31] ? watchdog+0x1de/0x1030 [ 333.578464][ T31] kthread+0x70e/0x8a0 [ 333.582550][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.587245][ T31] ? __pfx_kthread+0x10/0x10 [ 333.591847][ T31] ? __pfx_kthread+0x10/0x10 [ 333.596470][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.601693][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.606904][ T31] ? __pfx_kthread+0x10/0x10 [ 333.611505][ T31] ret_from_fork+0x4b/0x80 [ 333.615963][ T31] ? __pfx_kthread+0x10/0x10 [ 333.620563][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.625492][ T31] [ 333.628874][ T31] Kernel Offset: disabled [ 333.633205][ T31] Rebooting in 86400 seconds..