last executing test programs: 8m51.9317838s ago: executing program 4 (id=3083): r0 = open(&(0x7f0000000040)='.\x00', 0x458881, 0x6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x1) kcmp(r2, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x6) 8m51.616970822s ago: executing program 4 (id=3085): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x14, 0xbd, "3ee924b0a47471d95798967209fcaae30e4477c6d50a204d0ea19b9611eb2118d49b4a0f3f5d09469c20992178ba759e5fd1552f4715a6abc691d753085a4eae6b46cc2bbbb9d57cd33f3460b0d3077900f368e87c590d4f6437a5664f30c22a0ecd0f9fca28806ebd0a3d69c186b5661fd907c16a54bffe7a85e0d6543e47a7aa16605caa2f1e404f26fe725155af07da6d99bf4635bc5391067fa8280f841e71aed21198562864da3a5fcc18a107e64ad30da3c4cd8bda1ced679fb7"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1000, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000700)={0x40, 0xb, 0x2, "34d1"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="d67f20486be5"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "d1ab"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x1c}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) 8m48.302191713s ago: executing program 4 (id=3095): r0 = socket(0x40000000015, 0x805, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x60}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@nfc_llcp, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000200)=""/42, 0x2a}], 0x3}, 0x122) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) 8m46.250281157s ago: executing program 4 (id=3098): openat$vcs(0xffffffffffffff9c, &(0x7f00000023c0), 0x80802, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', r5, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x4) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000004c0)={{0x1000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x8080000, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x2, 0x3}, {0x100000, 0x0, 0x8}, {0x11000, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x1a, 0x1}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0xf}, {0x6000, 0x1, 0x0, 0x82, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x7, 0x1}, {0xeeee0000}, {0x2, 0xfffe}, 0x10d, 0x0, 0xf000, 0x90, 0x0, 0x900, 0x900, [0x0, 0x0, 0x0, 0x4]}) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='./file0\x00') epoll_create1(0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 8m46.059205252s ago: executing program 4 (id=3099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x237, &(0x7f0000000400)={0x0, 0xc06f, 0x10100, 0x1, 0x8000305, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100101) accept4(r8, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x80) fchdir(r10) r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r11, 0x2007ffb) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) close(r11) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 8m45.532766306s ago: executing program 4 (id=3100): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c8000280"], 0x140}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 8m45.136957723s ago: executing program 32 (id=3100): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29420987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f31096c060890e0878f0e1ac6e7049b096e959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074b0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c8000280"], 0x140}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_get_self_attr(0x68, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') read$FUSE(r3, &(0x7f0000001840)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 52.319359182s ago: executing program 0 (id=4917): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000002100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9f, 0x6576, 0xd}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x23a, &(0x7f00000003c0)={0x0, 0x1c2a, 0x10100, 0x0, 0x128}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x16, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f000000010000007921c107ecb97f8d50357a8e1a9e"], 0x48) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 50.181324258s ago: executing program 0 (id=4923): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x204, 0x10001, 0xffffffffffffffff, 0x1008, 0xcaa, 0x1fc, 0x4, 0x400002c, 0x2, 0x5}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000e8000/0x1000)=nil, 0x1000, 0x3) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="040001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f00000005c0)={0x0, 0x800, 0x2, 0x9, 0x18, 0xfd02e5f200000000, 0x7f, 0x800, 0x3, 0x9, 0x80000000, 0x4}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 49.673110111s ago: executing program 1 (id=4925): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x5, [{0x6, 0x3, 0x200}]}, @fwd={0xf}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f, 0x5f]}}, &(0x7f00000006c0)=""/228, 0x43, 0xe4, 0x0, 0x1, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000005450090200000000000000b97644f47aa45bd6b6d56918659c881a603b89649f2de4ba1ea15c8f56d3e768e1a2936557d36d9c018419e83d778456290ee0bdac359d6f7b58a72047d5a9587d29de"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x401, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 49.502690332s ago: executing program 3 (id=4927): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x8c, {0x8c, 0x11, "a93c211dcc2ebbfbbc95af9072e2dc444381133cf48c236d8dc63c37649e5d7f7ba7d49e71cb6665983e6051a8ea9e9df42baac6a5417aed43ac6420e3a077e812d66c906ea8ec5c04e4217004eb1a7766ebb8c24fb51d739ec816873b67c185fde0d087f16435db613079ff08f62cf3a3e32f53bdfeb65ce05b0fbda959dd21bfa472935472ded1ffa8"}}, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x1, 0x5}, @generic={0x26, 0x10, 0x4, "661e5c1b045de48df12728c7ee7f2190d7cd8375645da040888f5cb05d13474d314c99"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x4, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x3, 0x6}, @generic={0x89, 0x10, 0x2, "6525c9b30dc298a52861ca79d0287383706d795da5ec0acbd12d085009d4579b8175b49fc110c97e19eeedb042700f2dc4d80d79cb86e54272e50b9c133547e732373d4e7c37f6bfcc00d677ef9044ca8601efd55588b3b8bbdc2fa6f37dcc4879a62de59c07b1267148041d6369acfa2380b9ca5ae1fe29a0fa9111bdeea759ec1205652c38"}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x8, 0x5c, "05bcfed3", "69d3cf33"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x6316a171567cee14, 0x3, 0x2, 0x5, 0x1000, 0x380}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x14, 0xbd, "3ee924b0a47471d95798967209fcaae30e4477c6d50a204d0ea19b9611eb2118d49b4a0f3f5d09469c20992178ba759e5fd1552f4715a6abc691d753085a4eae6b46cc2bbbb9d57cd33f3460b0d3077900f368e87c590d4f6437a5664f30c22a0ecd0f9fca28806ebd0a3d69c186b5661fd907c16a54bffe7a85e0d6543e47a7aa16605caa2f1e404f26fe725155af07da6d99bf4635bc5391067fa8280f841e71aed21198562864da3a5fcc18a107e64ad30da3c4cd8bda1ced679fb7"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1000, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000700)={0x40, 0xb, 0x2, "34d1"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="d67f20486be5"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "d1ab"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x1c}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) 49.374090363s ago: executing program 1 (id=4928): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x50}, {&(0x7f0000000bc0)=""/95, 0x5f}], 0x2, 0x4000ffe, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000240)=0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000081", @ANYRES16=r3, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600501400000800270003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 49.20483655s ago: executing program 2 (id=4931): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={@remote, 0x1d, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000300)={@remote, r4}, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b0002000000000904e70fcb1cca67000904000000ff"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r5, 0xffffffffffffffff, 0x0) 49.194601032s ago: executing program 1 (id=4932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x45}, {0x6}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10fc}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000180)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8008) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0xfffffffffffffe9a, {0xd000, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa710c3e20fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362eb5bf86fce896dbc2a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca433d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eeae43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b5511ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40080) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0x3000], 0x0, 0x2, 0x200000000000008}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 49.053511843s ago: executing program 5 (id=4933): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffff1, 0x810800) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) unshare(0x6020400) r2 = socket$pptp(0x18, 0x1, 0x2) connect(r2, &(0x7f0000000940)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80) syz_open_dev$sg(0x0, 0x0, 0x20000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r3, 0xffffffffffffffff, 0x0) 48.21805256s ago: executing program 1 (id=4934): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xff9, &(0x7f0000001e40)=""/4089, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.177082477s ago: executing program 0 (id=4935): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001a00100029bd7000fcdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x63, 0x9, 0x5, 0x6, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x9, 0x4, 0x3, 0x7, 0x0, 0x71, 0x7, 0x4, 0x1, 0x5, 0xd091, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x3, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0x8000d14, 0x8, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x7, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x5, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x41, 0x2], [0x3, 0xf5fd, 0x0, 0x5, 0x1, 0x1100, 0x8d2, 0x9, 0x2, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x3, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xaa, 0x3, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0x1, 0xa2ed, 0x2, 0x25], [0x9, 0xc7, 0x7, 0xb, 0x5, 0x938, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0xb0, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xe, 0x7, 0xfffffffe, 0xa, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) writev(0xffffffffffffffff, 0x0, 0x0) alarm(0x9) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 48.081173888s ago: executing program 5 (id=4936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, {0x0, 0x0, 0x15}, 0x400000}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e0001000000000000000000000000000000000000000002000010"], 0xb8}}, 0x0) (async) r1 = fanotify_init(0x200, 0x0) (async, rerun: 64) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) (rerun: 64) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x8000000, r3, 0x0) 48.033431082s ago: executing program 1 (id=4937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r1], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)=""/146, 0x92}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/150, 0x96}], 0x3}, 0x2}], 0x1, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000003000000000088a8000081000000884845140024006700000521900000000001e000040000000000000090784e82ef2b03b7e9a3"], 0x3e) 47.994076431s ago: executing program 5 (id=4938): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000b4321f00070000000a00630018000000", @ANYRES32, @ANYBLOB="0000000000200000b706000014008004b703000000000000850000002f000000bf0900000000000055090100000000007b00000000000000bf91000000000000b702000000000000850000000c000000b70000000000450095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xff9, &(0x7f0000001e40)=""/4089, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 47.885184554s ago: executing program 5 (id=4939): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4004, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x28, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xba}}, 0x14) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x7ff, 0x101000) syz_fuse_handle_req(r3, &(0x7f0000002200)="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", 0x2000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x14, 0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x0) 47.872333438s ago: executing program 2 (id=4940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) exit(0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 47.625890093s ago: executing program 3 (id=4941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000200000007000000", @ANYRES32, @ANYBLOB="000001008a20000014001a80100004800c000180080001"], 0x34}, 0x1, 0x0, 0x0, 0x54005}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100005800c0005"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003400000000004000a80040001"], 0x364}}, 0x0) 47.505751796s ago: executing program 3 (id=4942): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x1000000004, 0x1c1b01) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000140)={{0x2, 0x2, 0x9, 0x1, 0x10000}, 0x8, 0x16}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300), 0x80000000, 0x0) syz_io_uring_setup(0x34ff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x2, &(0x7f00000001c0)={{0x0, 0x989680}, {r5, r6+10000000}}, &(0x7f00000002c0)) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@arm64={0x2, 0x2, 0x6, '\x00', 0x7bcf}) r7 = msgget$private(0x0, 0x5e3) msgrcv(r7, 0x0, 0x0, 0x2, 0x1000) msgrcv(r7, 0x0, 0x0, 0x0, 0x1000) msgctl$IPC_RMID(r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 47.323568224s ago: executing program 3 (id=4943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) r1 = socket$kcm(0x2, 0x1, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r1, r0}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r2}) (rerun: 64) 47.242337738s ago: executing program 3 (id=4944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x56d6810a, 0x8005) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x10001}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x10001}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3, r3, 0x434}, 0xc) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3, r3, 0x434}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5, 0x84, 0x89, 0x10, 0xf205, 0xb038, 0x2619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0x8, 0x1, 0x1}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5, 0x84, 0x89, 0x10, 0xf205, 0xb038, 0x2619, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0x8, 0x1, 0x1}}]}}]}}, 0x0) 43.753227258s ago: executing program 2 (id=4945): syz_usb_connect(0x0, 0x167, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xa4, 0x24, 0xbd, 0xff, 0x413c, 0x8218, 0xa9bf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x155, 0x1, 0x6, 0x10, 0x0, 0x40, [{{0x9, 0x4, 0xfa, 0x8, 0x7, 0x5b, 0x52, 0xd4, 0x1, [], [{{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x5, 0xff, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x4, 0xf8, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xc, 0x3, 0x40}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x9, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x71}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x40, 0x4, 0x40}}, {{0x9, 0x5, 0x80, 0x1, 0xdea543342251ae5b, 0x4, 0x2a, 0x5, [@generic={0xf6, 0x30, "4771fe02d7b2e2162096b50b3652363d4b22f3334725e5ea23e5132a13d07a7350763f2ed8def4bf390abd81991de630c476dcdd2572261dd6ddabd3574eed385b873193d9252e3e00820b73684fbee41dc848d4c7d1df30869cf57c593e127fd991e5f45490cbfac1969b017ba31fd2da0cb9f69e6f65fbe5a0ab0f5e609c3fceecfaed28370e9f2aac0825d5ac17d36c8493bb092e3b397127a75f61a4b193548e581415ef58cacbdd81ba8bf81d9665570b0f031d9b96f8cf94405de690aec5ac2ec93734f26f7040ceddafc35327a50eb67673150d549daca6015e06a17b857c021c998d58f446f7bc2f1ed22dfad7f19f3e"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x0, 0x0, 0x4}}]}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220182018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b70300002000000085000000d4000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffc) socket$unix(0x1, 0x5, 0x0) 43.743842938s ago: executing program 0 (id=4946): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x20) 43.59257387s ago: executing program 5 (id=4947): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32], &(0x7f00000000c0)='GPL\x00', 0x2, 0xff9, &(0x7f0000001e40)=""/4089, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 43.384994403s ago: executing program 3 (id=4948): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x48, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r7, 0x3516, 0x0, 0x2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) sendmmsg$sock(r3, &(0x7f0000000580)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@txtime={{0x0, 0x1, 0x3d, 0xbc80}}], 0x18}}, {{&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x1, 0x1, "05895e0ae088a37841d84529f6f75c1c2f5bb5120819fbdda683e510269743ea0f4efdf270c83e09b5a7a9000320449baba2c76bad0e867a80a31d3ab09a31", 0x37}, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="f7d1f8a0890936d70ddafb20d3ec086067a217b6f6431f3fc34b0f2cc335a249e684c4cc5153d65378bf30d6274b60cd3665420a4ab20fc5103504dcbce987214c9fae237063a0dbbdaa4bdfee1f3e4b16b8cbf9dabe49fc00f3cc4ef05e80653a942454c56a5d6b68fcd1a88cdd74b1987d986ebe65dec64330d3f872ff1cbacb137654f9c19a85043d8c3ec003bed5f29a"}, {&(0x7f0000000140)="fd36c1524ed36f15e3b8cff049413d29a3fced172859fbf0bf99993d834147ec752ce62aebec7c59ddca0987b2af3a83fe2292791349696aafdbdfea95cb1dbb6a1c351b4072987f2c60e277222ed8fc0875a23cf5c8bc0ae157597353bf3473ebb47544fd0719c3c310e89329781c3fed5e0ec55b824369cdc477385c5884f7416db8a8fa0c622af2c91b5b2c63c98151408b98795852ade272b8836d9950697071bd99f42591407ecfc3f815f27f78318571f5d002d515c43d1d"}, {&(0x7f0000000200)="e74e18c0771381150f674c2014afb6a4509a77f2af35bf9cabae416ad3287c6e6a7654ba6699ad8a4bd95f82e3707c53f4c791c11dc438af347186a6c8a81c6faba9e90910f4f786d9a3362e21cc3cc5f420766824ddbb3feef912453733f747c6f494f2aa37c2a2be363780a6bea886aa2140ad019f7aa59b3d85622390dd862ff08cdc82270d4b85f6f1ed721f598e5f6abff4c480ffaf2b06a31f2f02a1f86096652ae505114d80b85334e3f3aecf7f28a49a5ec52aac7412d2cce61c148cb8"}, {&(0x7f0000000300)="bd19a6e326bcaba60aa12f54b5a1279d22cbb014073fd076af2b82c3a7b3909f3d7d0941975b638a1cb9868ddeec151338294602ab0cc021ecfea9af2439f7a198821fc7368f0f5635ef86554af185efcd520fa2e8fb70ac88b6c76c9b94b9b6b5fb44ec5fe1518b5158ed48bfbe4ca73325c984b29739"}], 0x0, &(0x7f00000003c0)=[@mark={{0x0, 0x1, 0x24, 0x2}}, @txtime, @txtime={{0x0, 0x1, 0x3d, 0xffffffffffffff43}}, @txtime={{0x0, 0x1, 0x3d, 0x5}}, @txtime={{0x0, 0x1, 0x3d, 0x2}}, @txtime={{0x0, 0x1, 0x3d, 0x8}}]}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="17a90a304d7a777fcb574b0d3051ff5ba7096b2e9cabe919245616450fff06f0327273179a593f2d36073280f18a11e1bfb44b0c89b5c7e00d0f83495da0814612546fc50ebf720f7944df22039352420d5f0d3d4051ec726634f5bbf4558bc449b1a70651dddb5399"}, {&(0x7f0000000500)="b7cdd7f0d1620f4ed5978b909f6c4c"}]}}], 0x1, 0x6000004) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 42.63762432s ago: executing program 5 (id=4949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x6}, {0x6, "93104eb05cdaa7fffbf05f7eeb91b39e2bd351bae0bfa2a9a4fd4cd72fff5351a0593fedc698c8fa4c1b19c3521e3066db7e047d6d3cb783dcbd6bfc35cf7132"}}}}, 0x47) bind$alg(0xffffffffffffffff, 0x0, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = fanotify_init(0x202, 0x0) fanotify_mark(r7, 0x1, 0x48000013, r5, 0x0) 39.55820133s ago: executing program 2 (id=4950): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000b4321f000a0000000a00630018000000", @ANYRES32, @ANYBLOB="0000000000200000b706000014008004b703000000000000850000002f000000bf0900000000000055090100000000007b00000000000000bf91000000000000b702000000000000850000000c000000b70000000000450095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xff9, &(0x7f0000001e40)=""/4089, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 38.689085465s ago: executing program 0 (id=4951): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x8c, {0x8c, 0x11, "a93c211dcc2ebbfbbc95af9072e2dc444381133cf48c236d8dc63c37649e5d7f7ba7d49e71cb6665983e6051a8ea9e9df42baac6a5417aed43ac6420e3a077e812d66c906ea8ec5c04e4217004eb1a7766ebb8c24fb51d739ec816873b67c185fde0d087f16435db613079ff08f62cf3a3e32f53bdfeb65ce05b0fbda959dd21bfa472935472ded1ffa8"}}, 0x0, &(0x7f00000002c0)={0x0, 0xf, 0xd0, {0x5, 0xf, 0xd0, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x1, 0x5}, @generic={0x26, 0x10, 0x4, "661e5c1b045de48df12728c7ee7f2190d7cd8375645da040888f5cb05d13474d314c99"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x4, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x3, 0x6}, @generic={0x89, 0x10, 0x2, "6525c9b30dc298a52861ca79d0287383706d795da5ec0acbd12d085009d4579b8175b49fc110c97e19eeedb042700f2dc4d80d79cb86e54272e50b9c133547e732373d4e7c37f6bfcc00d677ef9044ca8601efd55588b3b8bbdc2fa6f37dcc4879a62de59c07b1267148041d6369acfa2380b9ca5ae1fe29a0fa9111bdeea759ec1205652c38"}, @ptm_cap={0x3}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x8, 0x5c, "05bcfed3", "69d3cf33"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x6316a171567cee14, 0x3, 0x2, 0x5, 0x1000, 0x380}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0x14, 0xbd, "3ee924b0a47471d95798967209fcaae30e4477c6d50a204d0ea19b9611eb2118d49b4a0f3f5d09469c20992178ba759e5fd1552f4715a6abc691d753085a4eae6b46cc2bbbb9d57cd33f3460b0d3077900f368e87c590d4f6437a5664f30c22a0ecd0f9fca28806ebd0a3d69c186b5661fd907c16a54bffe7a85e0d6543e47a7aa16605caa2f1e404f26fe725155af07da6d99bf4635bc5391067fa8280f841e71aed21198562864da3a5fcc18a107e64ad30da3c4cd8bda1ced679fb7"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1000, 0x80}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0xc}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000700)={0x40, 0xb, 0x2, "34d1"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="d67f20486be5"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "d1ab"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x1c}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) 37.958233818s ago: executing program 1 (id=4952): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x236, &(0x7f00000002c0)={0x0, 0x1d691, 0x10100, 0x3, 0x2b0, 0x0, r5}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x6bed, 0x41e5, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x803, 0x101}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r2], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r16, 0x0, 0xf37, 0x0) write(r12, &(0x7f0000000240)="94", 0x1) setsockopt$inet6_group_source_req(r12, 0x29, 0x2f, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x28, @private0, 0x9}}, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x5}}}, 0x108) vmsplice(r16, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r15, r11, 0x10001008f8, 0x100000000000000) write$char_usb(r16, &(0x7f0000000140)="d374", 0x2) write(r13, 0x0, 0x0) 32.393589871s ago: executing program 2 (id=4953): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)={'security\x00', 0x2d, "b6446c8a8e717758255b0903bf5d3df2c64b9cc8edcebf9896e288812e8267a3c815173f3f46bdff3623f75c27"}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x10, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 31.932935364s ago: executing program 0 (id=4954): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x8, 0x800) fsetxattr$security_evm(r3, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "6bcfc674bf8cfd83adbb89a036d38b508c770dc1"}, 0x15, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9900, &(0x7f0000000180)={0x7d, 0x100000, 0x80000, {r4}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000380000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r9 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 24.786907856s ago: executing program 33 (id=4948): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x83f, &(0x7f0000000180)={0x0, 0xadfa, 0x100, 0x3, 0x8002ab}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x48, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r7, 0x3516, 0x0, 0x2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) sendmmsg$sock(r3, &(0x7f0000000580)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@txtime={{0x0, 0x1, 0x3d, 0xbc80}}], 0x18}}, {{&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x1, 0x1, "05895e0ae088a37841d84529f6f75c1c2f5bb5120819fbdda683e510269743ea0f4efdf270c83e09b5a7a9000320449baba2c76bad0e867a80a31d3ab09a31", 0x37}, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="f7d1f8a0890936d70ddafb20d3ec086067a217b6f6431f3fc34b0f2cc335a249e684c4cc5153d65378bf30d6274b60cd3665420a4ab20fc5103504dcbce987214c9fae237063a0dbbdaa4bdfee1f3e4b16b8cbf9dabe49fc00f3cc4ef05e80653a942454c56a5d6b68fcd1a88cdd74b1987d986ebe65dec64330d3f872ff1cbacb137654f9c19a85043d8c3ec003bed5f29a"}, {&(0x7f0000000140)="fd36c1524ed36f15e3b8cff049413d29a3fced172859fbf0bf99993d834147ec752ce62aebec7c59ddca0987b2af3a83fe2292791349696aafdbdfea95cb1dbb6a1c351b4072987f2c60e277222ed8fc0875a23cf5c8bc0ae157597353bf3473ebb47544fd0719c3c310e89329781c3fed5e0ec55b824369cdc477385c5884f7416db8a8fa0c622af2c91b5b2c63c98151408b98795852ade272b8836d9950697071bd99f42591407ecfc3f815f27f78318571f5d002d515c43d1d"}, {&(0x7f0000000200)="e74e18c0771381150f674c2014afb6a4509a77f2af35bf9cabae416ad3287c6e6a7654ba6699ad8a4bd95f82e3707c53f4c791c11dc438af347186a6c8a81c6faba9e90910f4f786d9a3362e21cc3cc5f420766824ddbb3feef912453733f747c6f494f2aa37c2a2be363780a6bea886aa2140ad019f7aa59b3d85622390dd862ff08cdc82270d4b85f6f1ed721f598e5f6abff4c480ffaf2b06a31f2f02a1f86096652ae505114d80b85334e3f3aecf7f28a49a5ec52aac7412d2cce61c148cb8"}, {&(0x7f0000000300)="bd19a6e326bcaba60aa12f54b5a1279d22cbb014073fd076af2b82c3a7b3909f3d7d0941975b638a1cb9868ddeec151338294602ab0cc021ecfea9af2439f7a198821fc7368f0f5635ef86554af185efcd520fa2e8fb70ac88b6c76c9b94b9b6b5fb44ec5fe1518b5158ed48bfbe4ca73325c984b29739"}], 0x0, &(0x7f00000003c0)=[@mark={{0x0, 0x1, 0x24, 0x2}}, @txtime, @txtime={{0x0, 0x1, 0x3d, 0xffffffffffffff43}}, @txtime={{0x0, 0x1, 0x3d, 0x5}}, @txtime={{0x0, 0x1, 0x3d, 0x2}}, @txtime={{0x0, 0x1, 0x3d, 0x8}}]}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="17a90a304d7a777fcb574b0d3051ff5ba7096b2e9cabe919245616450fff06f0327273179a593f2d36073280f18a11e1bfb44b0c89b5c7e00d0f83495da0814612546fc50ebf720f7944df22039352420d5f0d3d4051ec726634f5bbf4558bc449b1a70651dddb5399"}, {&(0x7f0000000500)="b7cdd7f0d1620f4ed5978b909f6c4c"}]}}], 0x1, 0x6000004) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 21.895063164s ago: executing program 34 (id=4949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x6}, {0x6, "93104eb05cdaa7fffbf05f7eeb91b39e2bd351bae0bfa2a9a4fd4cd72fff5351a0593fedc698c8fa4c1b19c3521e3066db7e047d6d3cb783dcbd6bfc35cf7132"}}}}, 0x47) bind$alg(0xffffffffffffffff, 0x0, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = fanotify_init(0x202, 0x0) fanotify_mark(r7, 0x1, 0x48000013, r5, 0x0) 17.686491026s ago: executing program 35 (id=4952): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x236, &(0x7f00000002c0)={0x0, 0x1d691, 0x10100, 0x3, 0x2b0, 0x0, r5}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x6bed, 0x41e5, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x803, 0x101}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r2], 0x48}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r16, 0x0, 0xf37, 0x0) write(r12, &(0x7f0000000240)="94", 0x1) setsockopt$inet6_group_source_req(r12, 0x29, 0x2f, &(0x7f0000000480)={0x9, {{0xa, 0x4e20, 0x28, @private0, 0x9}}, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x5}}}, 0x108) vmsplice(r16, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r15, r11, 0x10001008f8, 0x100000000000000) write$char_usb(r16, &(0x7f0000000140)="d374", 0x2) write(r13, 0x0, 0x0) 17.619578341s ago: executing program 2 (id=4958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/547], 0x224}, 0x1, 0x0, 0x0, 0xa312bbeaf5c81b6e}, 0x4004000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000280)={0x3, @win={{0xd, 0x0, 0x7f}, 0x0, 0x0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x40}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.346143243s ago: executing program 36 (id=4954): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x8, 0x800) fsetxattr$security_evm(r3, &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "6bcfc674bf8cfd83adbb89a036d38b508c770dc1"}, 0x15, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x100000b2, 0xa6040) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9900, &(0x7f0000000180)={0x7d, 0x100000, 0x80000, {r4}}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000380000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r9 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x0, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 0s ago: executing program 37 (id=4958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/547], 0x224}, 0x1, 0x0, 0x0, 0xa312bbeaf5c81b6e}, 0x4004000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000280)={0x3, @win={{0xd, 0x0, 0x7f}, 0x0, 0x0, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x40}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 365.068503][T24110] ip6gre2: entered promiscuous mode [ 1365.079391][T24110] ip6gre2: entered allmulticast mode [ 1365.113014][T22787] usb 4-1: device descriptor read/64, error -71 [ 1365.196316][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1365.236670][ T24] usb 6-1: device descriptor read/8, error -71 [ 1365.352191][T22787] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1365.502779][T22787] usb 4-1: device descriptor read/64, error -71 [ 1365.509214][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1365.533365][ T24] usb 6-1: device descriptor read/8, error -71 [ 1365.622897][T22787] usb usb4-port1: attempt power cycle [ 1365.642754][ T24] usb usb6-port1: unable to enumerate USB device [ 1365.869863][T24117] FAULT_INJECTION: forcing a failure. [ 1365.869863][T24117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1365.883777][T24117] CPU: 0 UID: 0 PID: 24117 Comm: syz.0.4622 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1365.883806][T24117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1365.883819][T24117] Call Trace: [ 1365.883828][T24117] [ 1365.883837][T24117] dump_stack_lvl+0x189/0x250 [ 1365.883874][T24117] ? __pfx____ratelimit+0x10/0x10 [ 1365.883906][T24117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1365.883939][T24117] ? __pfx__printk+0x10/0x10 [ 1365.883961][T24117] ? __might_fault+0xb0/0x130 [ 1365.883994][T24117] should_fail_ex+0x414/0x560 [ 1365.884038][T24117] _copy_from_iter+0x1db/0x16f0 [ 1365.884073][T24117] ? rcu_is_watching+0x15/0xb0 [ 1365.884108][T24117] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1365.884131][T24117] ? __pfx__copy_from_iter+0x10/0x10 [ 1365.884164][T24117] ? __build_skb_around+0x257/0x3e0 [ 1365.884193][T24117] ? netlink_sendmsg+0x642/0xb30 [ 1365.884217][T24117] ? skb_put+0x11b/0x210 [ 1365.884244][T24117] netlink_sendmsg+0x6b2/0xb30 [ 1365.884279][T24117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.884308][T24117] ? aa_sock_msg_perm+0x94/0x160 [ 1365.884337][T24117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1365.884363][T24117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.884388][T24117] __sock_sendmsg+0x21c/0x270 [ 1365.884424][T24117] ____sys_sendmsg+0x52d/0x830 [ 1365.884456][T24117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1365.884492][T24117] ? import_iovec+0x74/0xa0 [ 1365.884517][T24117] ___sys_sendmsg+0x21f/0x2a0 [ 1365.884546][T24117] ? __pfx____sys_sendmsg+0x10/0x10 [ 1365.884620][T24117] ? __might_fault+0xb0/0x130 [ 1365.884644][T24117] __sys_sendmmsg+0x227/0x430 [ 1365.884676][T24117] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1365.884700][T24117] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1365.884748][T24117] ? ksys_write+0x22a/0x250 [ 1365.884770][T24117] ? __pfx_ksys_write+0x10/0x10 [ 1365.884787][T24117] ? rcu_is_watching+0x15/0xb0 [ 1365.884825][T24117] __x64_sys_sendmmsg+0xa0/0xc0 [ 1365.884854][T24117] do_syscall_64+0xfa/0x3b0 [ 1365.884872][T24117] ? lockdep_hardirqs_on+0x9c/0x150 [ 1365.884901][T24117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.884922][T24117] ? clear_bhb_loop+0x60/0xb0 [ 1365.884947][T24117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.884967][T24117] RIP: 0033:0x7fc5c378e929 [ 1365.884986][T24117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.885003][T24117] RSP: 002b:00007fc5c463d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1365.885033][T24117] RAX: ffffffffffffffda RBX: 00007fc5c39b5fa0 RCX: 00007fc5c378e929 [ 1365.885049][T24117] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1365.885065][T24117] RBP: 00007fc5c463d090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.885075][T24117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1365.885084][T24117] R13: 0000000000000000 R14: 00007fc5c39b5fa0 R15: 00007fc5c3adfa28 [ 1365.885107][T24117] [ 1366.242478][T22787] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1366.265031][T22787] usb 4-1: device descriptor read/8, error -71 [ 1366.502563][T22787] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1366.522914][T22787] usb 4-1: device descriptor read/8, error -71 [ 1366.649702][T22787] usb usb4-port1: unable to enumerate USB device [ 1366.712452][T10884] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1366.800199][ T5967] usb 2-1: USB disconnect, device number 55 [ 1366.941876][T10884] usb 1-1: config 0 has no interfaces? [ 1366.960401][T10884] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1366.974864][T10884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.139381][T10884] usb 1-1: Product: syz [ 1367.202873][T10884] usb 1-1: Manufacturer: syz [ 1367.207682][T10884] usb 1-1: SerialNumber: syz [ 1367.307680][T10884] usb 1-1: config 0 descriptor?? [ 1367.680805][T24125] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1368.065840][T24147] FAULT_INJECTION: forcing a failure. [ 1368.065840][T24147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.081455][T24147] CPU: 0 UID: 0 PID: 24147 Comm: syz.2.4633 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1368.081485][T24147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1368.081498][T24147] Call Trace: [ 1368.081508][T24147] [ 1368.081518][T24147] dump_stack_lvl+0x189/0x250 [ 1368.081555][T24147] ? __pfx____ratelimit+0x10/0x10 [ 1368.081588][T24147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1368.081620][T24147] ? __pfx__printk+0x10/0x10 [ 1368.081643][T24147] ? __might_fault+0xb0/0x130 [ 1368.081677][T24147] should_fail_ex+0x414/0x560 [ 1368.081710][T24147] _copy_from_user+0x2d/0xb0 [ 1368.081733][T24147] kstrtouint_from_user+0xc4/0x170 [ 1368.081766][T24147] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1368.081814][T24147] proc_fail_nth_write+0x88/0x240 [ 1368.081841][T24147] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1368.081885][T24147] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1368.081912][T24147] vfs_write+0x27b/0xa90 [ 1368.081954][T24147] ? __pfx_vfs_write+0x10/0x10 [ 1368.081989][T24147] ? __fget_files+0x2a/0x420 [ 1368.082018][T24147] ? __fget_files+0x3a0/0x420 [ 1368.082043][T24147] ? __fget_files+0x2a/0x420 [ 1368.082075][T24147] ksys_write+0x145/0x250 [ 1368.082097][T24147] ? __pfx_ksys_write+0x10/0x10 [ 1368.082123][T24147] ? do_syscall_64+0xbe/0x3b0 [ 1368.082147][T24147] do_syscall_64+0xfa/0x3b0 [ 1368.082165][T24147] ? lockdep_hardirqs_on+0x9c/0x150 [ 1368.082196][T24147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.082217][T24147] ? clear_bhb_loop+0x60/0xb0 [ 1368.082243][T24147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.082263][T24147] RIP: 0033:0x7f6bea38d3df [ 1368.082282][T24147] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1368.082300][T24147] RSP: 002b:00007f6beb2b4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1368.082323][T24147] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6bea38d3df [ 1368.082337][T24147] RDX: 0000000000000001 RSI: 00007f6beb2b40a0 RDI: 0000000000000005 [ 1368.082350][T24147] RBP: 00007f6beb2b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.082363][T24147] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1368.082376][T24147] R13: 0000000000000000 R14: 00007f6bea5b5fa0 R15: 00007f6bea6dfa28 [ 1368.082406][T24147] [ 1368.309892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1368.321023][ T24] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1368.455306][ T5967] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1368.532979][ T24] usb 4-1: device descriptor read/64, error -71 [ 1368.812572][ T5967] usb 2-1: device descriptor read/64, error -71 [ 1368.837214][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1368.982442][ T24] usb 4-1: device descriptor read/64, error -71 [ 1369.092352][ T5967] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1369.092597][ T24] usb usb4-port1: attempt power cycle [ 1369.232457][ T5967] usb 2-1: device descriptor read/64, error -71 [ 1369.357501][ T5967] usb usb2-port1: attempt power cycle [ 1369.453104][ T5924] usb 1-1: USB disconnect, device number 59 [ 1369.462162][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1369.494223][ T24] usb 4-1: device descriptor read/8, error -71 [ 1369.549005][T24163] netlink: 'syz.0.4638': attribute type 27 has an invalid length. [ 1369.650399][T24163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.658043][T24163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.702303][ T5967] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1369.735440][T24163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.748879][T24163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.821566][T24163] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.830804][ T24] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1369.842549][T24163] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.852456][T24163] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.861529][T24163] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.866877][ T5967] usb 2-1: device descriptor read/8, error -71 [ 1369.883226][T24163] geneve1: left promiscuous mode [ 1369.889037][T24163] geneve1: left allmulticast mode [ 1369.895001][ T24] usb 4-1: device descriptor read/8, error -71 [ 1370.002656][ T24] usb usb4-port1: unable to enumerate USB device [ 1370.031624][T24163] bridge1: left promiscuous mode [ 1370.047560][T24163] bridge1: left allmulticast mode [ 1370.081539][T24163] bridge2: left promiscuous mode [ 1370.132389][ T5967] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1370.163285][ T5967] usb 2-1: device descriptor read/8, error -71 [ 1370.275111][ T5967] usb usb2-port1: unable to enumerate USB device [ 1370.295944][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 1370.325830][T24170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4641'. [ 1370.383093][T10884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1370.433419][T24175] netlink: 'syz.2.4642': attribute type 10 has an invalid length. [ 1370.542445][T10884] usb 6-1: Using ep0 maxpacket: 16 [ 1370.559305][T10884] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1370.592264][T10884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.612196][T10884] usb 6-1: Product: syz [ 1370.625738][T10884] usb 6-1: Manufacturer: syz [ 1370.632575][T10884] usb 6-1: SerialNumber: syz [ 1370.676407][T10884] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1370.692427][T10884] r8152-cfgselector 6-1: config 0 descriptor?? [ 1370.780540][T24181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4645'. [ 1371.092449][ T5967] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1371.121421][T22183] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 1371.262246][ T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1371.277420][ T5967] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1371.289529][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.302352][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.315171][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1371.335026][ T5967] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1371.348418][ T5967] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1371.358551][ T5967] usb 1-1: Manufacturer: syz [ 1371.369150][ T5967] usb 1-1: config 0 descriptor?? [ 1371.414179][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1371.427764][ T24] usb 4-1: config 0 has no interface number 0 [ 1371.438959][ T24] usb 4-1: New USB device found, idVendor=12ef, idProduct=0100, bcdDevice=f0.7a [ 1371.452326][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.460370][ T24] usb 4-1: Product: syz [ 1371.469511][ T24] usb 4-1: Manufacturer: syz [ 1371.474534][ T24] usb 4-1: SerialNumber: syz [ 1371.491851][ T24] usb 4-1: config 0 descriptor?? [ 1371.500157][ T24] usb 4-1: active config #0 != 1 ?? [ 1371.710303][ T24] usb 4-1: USB disconnect, device number 125 [ 1371.794808][ T5967] appleir 0003:05AC:8243.0078: unknown main item tag 0x0 [ 1371.803575][ T5967] appleir 0003:05AC:8243.0078: No inputs registered, leaving [ 1371.829973][ T5967] appleir 0003:05AC:8243.0078: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1372.077541][T24205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1372.093033][T24205] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1372.100287][T24205] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1372.122674][T24205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1372.321937][T24224] loop2: detected capacity change from 0 to 7 [ 1372.348680][T24224] Dev loop2: unable to read RDB block 7 [ 1372.375452][T24224] loop2: AHDI p2 p3 [ 1372.387585][T24224] loop2: partition table partially beyond EOD, truncated [ 1372.401574][T24230] fuse: Bad value for 'rootmode' [ 1372.409182][T24224] loop2: p2 size 150995456 extends beyond EOD, truncated [ 1372.603229][ T5924] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1372.672225][ T5876] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1372.774608][ T5924] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 1372.786559][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.802408][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1372.820835][ T5924] usb 3-1: config 1 has no interface number 0 [ 1372.827303][ T5876] usb 4-1: device descriptor read/64, error -71 [ 1372.841561][ T5924] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1372.883176][ T5924] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.898620][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1372.908871][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.919599][ T5924] usb 3-1: Product: syz [ 1372.927809][ T5924] usb 3-1: Manufacturer: syz [ 1372.935545][ T5924] usb 3-1: SerialNumber: syz [ 1372.955178][ T5924] cdc_wdm 3-1:1.128: skipping garbage [ 1372.969348][ T5924] cdc_wdm 3-1:1.128: cdc-wdm1: USB WDM device [ 1372.987016][ T5924] cdc_wdm 3-1:1.128: Unknown control protocol [ 1373.072195][ T5876] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 1373.155864][ T24] usb 3-1: USB disconnect, device number 64 [ 1373.213747][ T5876] usb 4-1: device descriptor read/64, error -71 [ 1373.224224][ T5924] usb 1-1: reset high-speed USB device number 60 using dummy_hcd [ 1373.282239][T24247] program syz.5.4665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1373.322466][ T5876] usb usb4-port1: attempt power cycle [ 1373.352417][T17327] Bluetooth: hci2: command 0x0406 tx timeout [ 1373.542508][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1373.663119][ T5876] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1373.695543][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 1373.730341][ T5923] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1373.749230][ T5876] usb 4-1: device descriptor read/8, error -71 [ 1373.779177][ T5923] usb 6-1: config 0 has no interface number 0 [ 1373.804289][ T5923] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1373.868658][ T5923] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1373.902881][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.910953][ T5923] usb 6-1: Product: syz [ 1373.952262][ T5923] usb 6-1: Manufacturer: syz [ 1373.956940][ T5923] usb 6-1: SerialNumber: syz [ 1374.008027][ T5923] usb 6-1: config 0 descriptor?? [ 1374.027802][T22787] usb 1-1: USB disconnect, device number 60 [ 1374.042399][ T5876] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1374.092784][ T5876] usb 4-1: device descriptor read/8, error -71 [ 1374.143437][T21489] Bluetooth: hci4: command 0x0c1a tx timeout [ 1374.143441][T11371] Bluetooth: hci5: command 0x0405 tx timeout [ 1374.150142][T17327] Bluetooth: hci1: command 0x0405 tx timeout [ 1374.195832][T24263] x_tables: unsorted entry at hook 2 [ 1374.222544][ T5876] usb usb4-port1: unable to enumerate USB device [ 1374.512488][ T5876] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1374.687610][ T5876] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1374.707573][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.750127][ T5876] usb 2-1: Product: syz [ 1374.775946][ T5876] usb 2-1: Manufacturer: syz [ 1374.780687][ T5876] usb 2-1: SerialNumber: syz [ 1374.823677][ T5876] usb 2-1: config 0 descriptor?? [ 1374.865911][ T5876] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 1374.889397][ T5876] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1374.918754][ T5876] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1375.082188][T22183] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1375.128849][ T5923] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1375.161023][ T5923] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1375.221761][ T5923] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1375.240816][T24264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1375.252453][T22183] usb 3-1: device descriptor read/64, error -71 [ 1375.279191][ T5923] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1375.288628][ T5876] usb 2-1: USB disconnect, device number 60 [ 1375.377842][ T5923] usb 6-1: USB disconnect, device number 7 [ 1375.533806][T22183] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1375.684461][T22183] usb 3-1: device descriptor read/64, error -71 [ 1375.793112][T22183] usb usb3-port1: attempt power cycle [ 1375.827992][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1375.828018][ T30] audit: type=1326 audit(1750343039.928:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1375.857956][ T30] audit: type=1326 audit(1750343039.928:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1375.881127][T10884] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1375.888943][ T5967] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1375.901387][ T30] audit: type=1326 audit(1750343039.938:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1375.924025][ T30] audit: type=1326 audit(1750343039.938:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1375.946981][ T30] audit: type=1326 audit(1750343039.938:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1375.971413][ T30] audit: type=1326 audit(1750343039.938:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1375.994883][ T30] audit: type=1326 audit(1750343039.938:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1376.017764][ T30] audit: type=1326 audit(1750343039.938:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1376.055587][ T30] audit: type=1326 audit(1750343039.938:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1376.081198][T10884] usb 2-1: config index 0 descriptor too short (expected 65187, got 12) [ 1376.089896][T10884] usb 2-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 1376.099396][ T30] audit: type=1326 audit(1750343039.938:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24293 comm="syz.5.4680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7ffc0000 [ 1376.122557][ T5967] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1376.134592][T10884] usb 2-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 1376.145866][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.156931][T10884] usb 2-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 1376.167635][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.177695][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1376.192335][ T5967] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1376.201996][ T5967] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1376.210463][T22183] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1376.218954][ T5967] usb 1-1: Manufacturer: syz [ 1376.224048][T10884] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 1376.233585][T10884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.242501][T22183] usb 3-1: device descriptor read/8, error -71 [ 1376.251386][T10884] usb 2-1: Product: syz [ 1376.256692][ T5967] usb 1-1: config 0 descriptor?? [ 1376.261922][T10884] usb 2-1: Manufacturer: syz [ 1376.267287][T10884] usb 2-1: SerialNumber: syz [ 1376.492374][T22183] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1376.500230][T10884] usb 2-1: USB disconnect, device number 61 [ 1376.526530][T22183] usb 3-1: device descriptor read/8, error -71 [ 1376.652728][T22183] usb usb3-port1: unable to enumerate USB device [ 1376.681442][ T5967] appleir 0003:05AC:8243.0079: unknown main item tag 0x0 [ 1376.692144][ T5967] appleir 0003:05AC:8243.0079: No inputs registered, leaving [ 1376.709680][ T5967] appleir 0003:05AC:8243.0079: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1377.152256][ T5967] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1377.344688][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 1377.352285][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1377.373640][ T5967] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1377.383470][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.391529][ T5967] usb 6-1: Product: syz [ 1377.396324][ T5967] usb 6-1: Manufacturer: syz [ 1377.401080][ T5967] usb 6-1: SerialNumber: syz [ 1377.418810][ T5967] usb 6-1: config 0 descriptor?? [ 1377.428429][ T5967] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1377.438358][ T5967] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1378.044030][ T5967] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1378.122583][T10884] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 1378.416264][T24320] ptrace attach of "./syz-executor exec"[22133] was attempted by "./syz-executor exec"[24320] [ 1378.683088][ T5967] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1378.693214][ T5967] em28xx 6-1:0.0: board has no eeprom [ 1378.749230][T24324] fuse: Bad value for 'fd' [ 1378.916646][T22183] usb 1-1: USB disconnect, device number 61 [ 1378.962610][ T5967] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1378.994566][ T5967] em28xx 6-1:0.0: dvb set to bulk mode. [ 1379.011812][T10884] em28xx 6-1:0.0: Binding DVB extension [ 1379.030942][ T5967] usb 6-1: USB disconnect, device number 8 [ 1379.059942][ T5967] em28xx 6-1:0.0: Disconnecting em28xx [ 1379.185857][T10884] em28xx 6-1:0.0: Registering input extension [ 1379.194798][ T5967] em28xx 6-1:0.0: Closing input extension [ 1379.226429][ T5967] em28xx 6-1:0.0: Freeing device [ 1379.418631][T24330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4689'. [ 1379.427946][T24330] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1379.592412][T10884] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1379.788456][T10884] usb 3-1: Using ep0 maxpacket: 32 [ 1379.804129][T10884] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1379.822267][T10884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.833190][T24326] syz.1.4689 (24326): drop_caches: 2 [ 1379.841538][T10884] usb 3-1: config 0 has no interface number 0 [ 1379.848235][T10884] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1379.866047][T10884] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1379.875366][T10884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.884337][T10884] usb 3-1: Product: syz [ 1379.898795][T10884] usb 3-1: Manufacturer: syz [ 1379.908914][T10884] usb 3-1: SerialNumber: syz [ 1379.928580][T10884] usb 3-1: config 0 descriptor?? [ 1379.939407][T10884] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1379.956939][T10884] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1380.412474][ T5967] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1380.543527][T10884] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1380.579361][T10884] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1380.692247][ T5967] usb 2-1: Using ep0 maxpacket: 16 [ 1380.710335][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.735486][T10884] usb 3-1: USB disconnect, device number 69 [ 1380.758075][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.787447][ T5967] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1380.816282][ T5967] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1380.828443][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.851527][ T5967] usb 2-1: config 0 descriptor?? [ 1381.181682][ T5967] usbhid 2-1:0.0: can't add hid device: -71 [ 1381.210810][ T5967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1381.273999][ T5967] usb 2-1: USB disconnect, device number 62 [ 1381.441252][T11371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1381.452772][T11371] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1381.462726][T11371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1381.470814][T11371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1381.492317][T11371] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1381.542416][ T5923] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1381.622204][ T5876] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1381.705222][ T5923] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1381.727091][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.748744][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.764498][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1381.780056][ T5923] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1381.790527][ T5923] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1381.800766][ T5876] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1381.811729][ T5876] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1381.821414][ T5923] usb 6-1: Manufacturer: syz [ 1381.826796][ T5876] usb 3-1: config 0 has no interface number 0 [ 1381.834940][ T5876] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1381.846507][ T5923] usb 6-1: config 0 descriptor?? [ 1381.863476][ T5876] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1381.873278][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.886738][ T5876] usb 3-1: config 0 descriptor?? [ 1381.958013][T24363] fuse: Unknown parameter 'ù¾¡group_00000000000000000000' [ 1382.100194][T24358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.109207][T24358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.146050][ T5876] usb 3-1: USB disconnect, device number 70 [ 1382.281079][ T5923] appleir 0003:05AC:8243.007A: unknown main item tag 0x0 [ 1382.299679][ T5923] appleir 0003:05AC:8243.007A: No inputs registered, leaving [ 1382.330681][T24360] chnl_net:caif_netlink_parms(): no params data found [ 1382.339793][ T5923] appleir 0003:05AC:8243.007A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1382.701233][T24377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4704'. [ 1382.780859][T24360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.788508][T24360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.807882][T24360] bridge_slave_0: entered allmulticast mode [ 1382.824513][T24360] bridge_slave_0: entered promiscuous mode [ 1382.867652][T24360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.889466][T24360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.904212][T24360] bridge_slave_1: entered allmulticast mode [ 1382.921077][T24383] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1382.923623][T24360] bridge_slave_1: entered promiscuous mode [ 1382.980370][T24383] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4705'. [ 1383.353406][T24360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.400301][T24360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.593328][T17327] Bluetooth: hci3: command tx timeout [ 1383.643605][T24360] team0: Port device team_slave_0 added [ 1383.671730][T24360] team0: Port device team_slave_1 added [ 1383.712273][ T5923] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 1384.534102][ T5876] usb 6-1: USB disconnect, device number 9 [ 1384.836454][T24395] could not allocate digest TFM handle cryptd(blake2b-160) [ 1384.952915][T10884] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1384.987526][T24403] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4711'. [ 1385.124534][T10884] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1385.133703][T10884] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1385.144336][T10884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1385.153988][T10884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1385.192101][T10884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1385.208706][T10884] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1385.219317][T10884] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1385.232130][T10884] usb 2-1: Product: syz [ 1385.236735][T10884] usb 2-1: Manufacturer: syz [ 1385.253911][T10884] cdc_wdm 2-1:1.0: skipping garbage [ 1385.259206][T10884] cdc_wdm 2-1:1.0: skipping garbage [ 1385.267970][T10884] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1385.274493][T10884] cdc_wdm 2-1:1.0: Unknown control protocol [ 1385.303233][ T5876] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1385.361752][ T13] bond0 (unregistering): Released all slaves [ 1385.467686][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 1385.483736][ T5876] usb 1-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 1385.499862][ T5876] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1385.527961][ T5876] usb 1-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=4a.cb [ 1385.546636][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.555670][ T5876] usb 1-1: Product: syz [ 1385.560048][ T5876] usb 1-1: Manufacturer: syz [ 1385.565649][ T5876] usb 1-1: SerialNumber: syz [ 1385.596973][T24404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.607790][T24404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.608626][ T13] bond1 (unregistering): Released all slaves [ 1385.629707][ C1] wdm_int_callback: 4 callbacks suppressed [ 1385.629733][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1385.642205][ C1] wdm_int_callback: 4 callbacks suppressed [ 1385.642223][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1385.654387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1385.661199][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1385.667846][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1385.674714][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1385.681371][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1385.688410][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1385.693756][T10884] usb 2-1: USB disconnect, device number 63 [ 1385.695038][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1385.707051][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1385.708105][T17327] Bluetooth: hci3: command tx timeout [ 1385.801924][ T5876] usb 1-1: USB disconnect, device number 62 [ 1385.920079][ T13] bond2 (unregistering): Released all slaves [ 1385.993975][T24360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.012626][T24360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.069371][T24360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.086092][T24360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.093584][T24360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.121092][T24406] ALSA: mixer_oss: invalid OSS volume '2' [ 1386.134704][T24406] ALSA: mixer_oss: invalid OSS volume 'Ip6InAddrErrors' [ 1386.141916][T24406] ALSA: mixer_oss: invalid OSS volume 'Ip6InUnknownProtos' [ 1386.149798][T24406] ALSA: mixer_oss: invalid OSS volume 'Ip6InTruncatedPkts' [ 1386.152259][T24360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.167963][T24406] ALSA: mixer_oss: invalid OSS volume 'Ip6InDiscards' [ 1386.167985][T24406] ALSA: mixer_oss: invalid OSS volume 'Ip6InDelivers' [ 1386.210951][ T13] tipc: Disabling bearer [ 1386.217047][ T13] tipc: Left network mode [ 1386.279278][ T13] IPVS: stopping backup sync thread 17311 ... [ 1386.379433][T24409] `: renamed from vlan0 (while UP) [ 1386.411245][T24360] hsr_slave_0: entered promiscuous mode [ 1386.426867][T24360] hsr_slave_1: entered promiscuous mode [ 1386.437944][T24360] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1386.449812][T24360] Cannot create hsr debugfs directory [ 1386.888844][T24418] delete_channel: no stack [ 1386.932896][T24418] delete_channel: no stack [ 1387.302689][ T5923] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1387.484257][ T5923] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1387.523725][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1387.523746][ T30] audit: type=1326 audit(1750343051.618:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24420 comm="syz.5.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x7fc00000 [ 1387.563610][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.621270][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.685304][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1387.761266][T17327] Bluetooth: hci3: command tx timeout [ 1387.777968][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1387.852682][ T5923] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1387.895768][ T5923] usb 2-1: Manufacturer: syz [ 1387.929525][ T5923] usb 2-1: config 0 descriptor?? [ 1388.072346][ T5967] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1388.100810][ T13] hsr_slave_0: left promiscuous mode [ 1388.249546][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 1388.251582][ T5967] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1388.251613][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.264373][ T5967] usb 6-1: config 0 descriptor?? [ 1388.365079][ T5923] appleir 0003:05AC:8243.007B: unknown main item tag 0x0 [ 1388.376287][ T5923] appleir 0003:05AC:8243.007B: No inputs registered, leaving [ 1388.422387][ T5923] appleir 0003:05AC:8243.007B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1388.526069][ T5967] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1389.182372][ T5967] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1389.235768][ T5967] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1389.260995][ T5967] usb 6-1: USB disconnect, device number 10 [ 1389.827621][T17327] Bluetooth: hci3: command tx timeout [ 1390.494854][ T5923] usb 2-1: USB disconnect, device number 64 [ 1390.742893][T22787] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1390.750658][T24258] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1390.879877][ T13] IPVS: stop unused estimator thread 0... [ 1390.949613][T24258] usb 3-1: Using ep0 maxpacket: 16 [ 1390.958054][T22787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.978416][T24258] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 1390.993622][T22787] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1391.012347][T24258] usb 3-1: config 0 has no interface number 0 [ 1391.025818][T24258] usb 3-1: config 0 interface 62 altsetting 253 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1391.044428][T22787] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1391.070578][T24258] usb 3-1: config 0 interface 62 has no altsetting 0 [ 1391.086788][T22787] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1391.100792][T24258] usb 3-1: New USB device found, idVendor=be49, idProduct=178f, bcdDevice=d3.18 [ 1391.102927][ T5967] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1391.114864][T24258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.131927][T22787] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1391.152949][T22787] usb 6-1: Manufacturer: syz [ 1391.157888][T24258] usb 3-1: Product: syz [ 1391.175085][T24258] usb 3-1: Manufacturer: syz [ 1391.181537][T22787] usb 6-1: config 0 descriptor?? [ 1391.194369][T24258] usb 3-1: SerialNumber: syz [ 1391.206062][T22787] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1391.226180][T24258] usb 3-1: config 0 descriptor?? [ 1391.249518][T24258] cdc_acm 3-1:0.62: skipping garbage [ 1391.284949][ T5967] usb 1-1: device descriptor read/64, error -71 [ 1391.465053][T24360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1391.501150][T24360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1391.522187][ T5967] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1391.546992][T24360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1391.586403][T24360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1391.652921][ T5967] usb 1-1: device descriptor read/64, error -71 [ 1391.772583][ T5967] usb usb1-port1: attempt power cycle [ 1391.867788][T24360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.910410][T24360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.934115][T22571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.941376][T22571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.959643][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.966851][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.975072][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1392.122736][ T5967] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1392.151273][T24360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.155088][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.177671][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.188509][ T10] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1392.198175][ T5967] usb 1-1: device descriptor read/8, error -71 [ 1392.215855][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.238136][ T10] usb 2-1: config 0 descriptor?? [ 1392.310212][T24360] veth0_vlan: entered promiscuous mode [ 1392.338756][T24360] veth1_vlan: entered promiscuous mode [ 1392.404163][T24360] veth0_macvtap: entered promiscuous mode [ 1392.415595][T24360] veth1_macvtap: entered promiscuous mode [ 1392.442883][ T5967] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1392.445950][T24360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.476983][T24360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.484413][ T5967] usb 1-1: device descriptor read/8, error -71 [ 1392.503516][T24360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.517303][T24360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.536572][T24360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.548608][T24360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.593825][ T5967] usb usb1-port1: unable to enumerate USB device [ 1392.725427][ T10] petalynx 0003:18B1:0037.007C: invalid report_size 61258 [ 1392.735156][ T10] petalynx 0003:18B1:0037.007C: item 0 2 1 7 parsing failed [ 1392.746382][ T10] petalynx 0003:18B1:0037.007C: parse failed [ 1392.754954][ T10] petalynx 0003:18B1:0037.007C: probe with driver petalynx failed with error -22 [ 1392.778146][T23006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.796465][T23006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.835475][T23004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.846781][T23004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.925415][T24258] usb 2-1: USB disconnect, device number 65 [ 1393.303793][T24533] syz.3.4697 (24533): drop_caches: 2 [ 1393.507039][T24258] usb 3-1: USB disconnect, device number 71 [ 1393.804218][T24258] usb 6-1: USB disconnect, device number 11 [ 1394.102607][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1394.264334][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1394.295183][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.313977][T24258] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1394.314475][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.338634][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1394.353343][T24548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4740'. [ 1394.371193][T24548] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4740'. [ 1394.384520][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1394.398132][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1394.406774][ T10] usb 2-1: Manufacturer: syz [ 1394.415623][ T10] usb 2-1: config 0 descriptor?? [ 1394.510066][T10884] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1394.510115][T24258] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1394.540753][T24258] usb 6-1: config 0 has no interface number 0 [ 1394.547374][T24258] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1394.566815][T24258] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1394.593988][T24258] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1394.607740][T24258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.633407][T24258] usb 6-1: config 0 descriptor?? [ 1394.639110][T24539] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1394.664546][T24258] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1394.695033][T10884] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1394.716981][T10884] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.731041][T10884] usb 1-1: config 220 has no interface number 2 [ 1394.742262][T10884] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1394.763410][T10884] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1394.770280][T10884] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1394.790097][T10884] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1394.829276][T10884] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1394.840196][T10884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.851654][ T10] appleir 0003:05AC:8243.007D: unknown main item tag 0x0 [ 1394.864327][ T10] appleir 0003:05AC:8243.007D: No inputs registered, leaving [ 1394.884936][T10884] usb 1-1: Product: syz [ 1394.889175][T10884] usb 1-1: Manufacturer: syz [ 1394.897405][T10884] usb 1-1: SerialNumber: syz [ 1394.902666][ T10] appleir 0003:05AC:8243.007D: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1394.918595][T24258] usb 6-1: USB disconnect, device number 12 [ 1395.722248][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1395.862483][T24258] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1395.877137][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.887572][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1395.898718][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1395.921711][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1395.931718][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1395.945702][ T10] usb 3-1: Manufacturer: syz [ 1395.954954][ T10] usb 3-1: config 0 descriptor?? [ 1395.968436][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1396.022310][T24258] usb 6-1: Using ep0 maxpacket: 8 [ 1396.029850][T24258] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1396.046911][T24258] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1396.057140][T24258] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1396.066733][T24258] usb 6-1: Product: syz [ 1396.071264][T24258] usb 6-1: Manufacturer: syz [ 1396.076524][T24258] usb 6-1: SerialNumber: syz [ 1396.296001][T24258] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 1396.306344][T24258] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1396.317610][T24258] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1396.325637][T24258] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1396.505268][T24258] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1396.518555][T24258] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1396.530522][T24258] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1396.544857][T24258] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1396.562395][T24258] usb 6-1: USB disconnect, device number 13 [ 1396.578391][T24258] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1396.596403][T24258] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1396.606668][T24258] visor 6-1:1.0: device disconnected [ 1396.843770][T24258] usb 2-1: USB disconnect, device number 66 [ 1397.115485][T10884] usb 1-1: selecting invalid altsetting 0 [ 1397.134768][T10884] usb 1-1: selecting invalid altsetting 0 [ 1397.141724][T10884] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1397.159496][T10884] usb 1-1: No valid video chain found. [ 1397.194926][T10884] usb 1-1: selecting invalid altsetting 0 [ 1397.210565][T10884] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1397.240452][T10884] usb 1-1: USB disconnect, device number 67 [ 1397.284256][T24580] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1397.332141][T24258] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1397.485857][T24258] usb 2-1: Using ep0 maxpacket: 16 [ 1397.496023][T24258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.511838][T24258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1397.528094][T24258] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1397.537566][T24258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.556774][T24258] usb 2-1: config 0 descriptor?? [ 1397.990687][T24258] corsair 0003:1B1C:1B02.007E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1398.221380][T24576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4750'. [ 1398.304369][T24258] corsair 0003:1B1C:1B02.007E: Failed to get K90 initial state (error -71). [ 1398.373621][T24258] usb 2-1: USB disconnect, device number 67 [ 1398.561166][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1398.572217][T24600] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1398.598568][T24600] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1398.621501][ T10] usb 3-1: USB disconnect, device number 72 [ 1398.702241][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1399.712278][T22787] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1399.864169][T22787] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1399.943699][T22787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.038469][T22787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.117457][T22787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1400.177970][T22787] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1400.200955][T22787] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1400.238260][T22787] usb 2-1: Manufacturer: syz [ 1400.261117][T22787] usb 2-1: config 0 descriptor?? [ 1400.435719][T24613] binder: 24612:24613 ioctl c0306201 0 returned -14 [ 1400.448738][T24613] binder: 24612:24613 ioctl c018aec0 0 returned -22 [ 1400.575874][T24617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1400.717240][T22787] appleir 0003:05AC:8243.007F: unknown main item tag 0x0 [ 1400.754355][T22787] appleir 0003:05AC:8243.007F: No inputs registered, leaving [ 1400.779848][T22787] appleir 0003:05AC:8243.007F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1401.679546][T24632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4765'. [ 1401.987177][T24638] bridge0: port 3(team0) entered blocking state [ 1402.002903][T24638] bridge0: port 3(team0) entered disabled state [ 1402.014456][T24638] team0: entered allmulticast mode [ 1402.022718][T24638] team_slave_0: entered allmulticast mode [ 1402.028804][T24638] team_slave_1: entered allmulticast mode [ 1402.038997][T24638] team0: entered promiscuous mode [ 1402.044571][T24638] team_slave_0: entered promiscuous mode [ 1402.054070][T24638] team_slave_1: entered promiscuous mode [ 1402.876307][T22787] usb 2-1: USB disconnect, device number 68 [ 1404.452183][ T5916] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1404.512192][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1404.615520][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.639240][ T5916] usb 1-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1404.670520][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.685932][ T10] usb 3-1: config 252 has an invalid interface number: 254 but max is 0 [ 1404.711530][ T5916] usb 1-1: Product: syz [ 1404.716358][ T10] usb 3-1: config 252 has no interface number 0 [ 1404.741163][ T5916] usb 1-1: Manufacturer: syz [ 1404.752573][ T10] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1404.767123][ T5916] usb 1-1: SerialNumber: syz [ 1404.787379][ T10] usb 3-1: config 252 interface 254 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 1404.809038][ T5916] usb 1-1: config 0 descriptor?? [ 1404.848393][ T10] usb 3-1: config 252 interface 254 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1404.863104][ T10] usb 3-1: config 252 interface 254 has no altsetting 0 [ 1404.877910][ T10] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1404.912355][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.927074][ T10] usb 3-1: Product: syz [ 1404.931550][ T10] usb 3-1: Manufacturer: syz [ 1404.937206][ T10] usb 3-1: SerialNumber: syz [ 1404.962213][T10884] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1404.993244][ T10] bfusb 3-1:252.254: probe with driver bfusb failed with error -5 [ 1405.042513][ T5916] usb 1-1: probing VID:PID(2201:012C) [ 1405.063584][ T5916] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 1405.106571][ T5916] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 1405.123414][ T5916] usb 1-1: USB disconnect, device number 68 [ 1405.143968][T10884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1405.170338][T24671] xt_hashlimit: overflow, rate too high: 0 [ 1405.180621][T10884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1405.198262][T10884] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1405.210410][T10884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.219006][T10884] usb 6-1: Product: syz [ 1405.223563][T10884] usb 6-1: Manufacturer: syz [ 1405.228207][T10884] usb 6-1: SerialNumber: syz [ 1405.243701][T10884] usb 6-1: config 0 descriptor?? [ 1405.308654][ T10] usb 3-1: USB disconnect, device number 73 [ 1405.559066][T10884] usb 6-1: USB disconnect, device number 14 [ 1405.797793][T24681] vxcan1: entered promiscuous mode [ 1406.092180][T22787] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1406.242480][T22787] usb 1-1: Using ep0 maxpacket: 32 [ 1406.253986][T22787] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1406.272398][T22787] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1406.295302][T22787] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1406.320289][T22787] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1406.352843][T22787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1406.369200][T22787] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1406.380894][T22787] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1406.391448][T22787] usb 1-1: Product: syz [ 1406.398645][T22787] usb 1-1: Manufacturer: syz [ 1406.412520][ T5923] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1406.421438][T22787] usb 1-1: SerialNumber: syz [ 1406.433240][T22787] usb 1-1: config 0 descriptor?? [ 1406.451795][T22787] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1406.478068][T22787] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1406.559973][T24692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 1406.588163][ T5923] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1406.612097][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1406.632238][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1406.647314][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1406.683312][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1406.692920][ T5923] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1406.701060][ T5923] usb 3-1: Manufacturer: syz [ 1406.714814][ T5923] usb 3-1: config 0 descriptor?? [ 1407.052384][T22787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1407.132928][ T5923] appleir 0003:05AC:8243.0080: unknown main item tag 0x0 [ 1407.158691][ T5923] appleir 0003:05AC:8243.0080: No inputs registered, leaving [ 1407.212191][T22787] usb 4-1: Using ep0 maxpacket: 16 [ 1407.217967][ T5923] appleir 0003:05AC:8243.0080: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1407.254175][T22787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.298007][T22787] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1407.364583][T22787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1407.402165][T10884] usb 1-1: USB disconnect, device number 69 [ 1407.404812][T22787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1407.408483][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1407.445335][T24699] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1407.471396][T22787] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1407.537939][T22787] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64 [ 1407.552413][T10884] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1407.605367][T22787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1407.625197][T22787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.642307][T22787] usb 4-1: Product: syz [ 1407.651747][T22787] usb 4-1: Manufacturer: syz [ 1407.691210][T22787] usb 4-1: SerialNumber: syz [ 1407.933855][T24697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.949689][T24697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.102454][ T5923] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1408.265089][ T5923] usb 6-1: No LPM exit latency info found, disabling LPM. [ 1408.301707][ T5923] usb 6-1: config 6 has an invalid interface number: 63 but max is 0 [ 1408.310901][ T5923] usb 6-1: config 6 has no interface number 0 [ 1408.317930][ T5923] usb 6-1: config 6 interface 63 altsetting 7 endpoint 0xA is Bulk; changing to Interrupt [ 1408.329256][ T5923] usb 6-1: config 6 interface 63 altsetting 7 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1408.340707][ T5923] usb 6-1: config 6 interface 63 has no altsetting 0 [ 1408.353500][ T5923] usb 6-1: string descriptor 0 read error: -22 [ 1408.360268][ T5923] usb 6-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=43.f8 [ 1408.370515][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.386138][T24717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1408.470564][ T5923] keyspan 6-1:6.63: Keyspan 1 port adapter converter detected [ 1408.493725][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 84 [ 1408.605910][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 81 [ 1408.892190][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 82 [ 1408.900023][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 1 [ 1408.963771][T22787] usb 4-1: USB disconnect, device number 4 [ 1408.997121][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 2 [ 1409.037765][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 83 [ 1409.078836][ T5923] keyspan 6-1:6.63: found no endpoint descriptor for endpoint 3 [ 1409.166255][ T5923] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1409.207784][ T5876] usb 3-1: USB disconnect, device number 74 [ 1409.285759][ T5923] usb 6-1: USB disconnect, device number 15 [ 1409.329400][ T5923] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1409.358333][ T5923] keyspan 6-1:6.63: device disconnected [ 1409.382364][T10884] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1409.595733][T10884] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1409.645551][T10884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.700052][T10884] usb 2-1: config 0 descriptor?? [ 1409.759837][T10884] cp210x 2-1:0.0: cp210x converter detected [ 1409.845313][ T5923] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1409.961477][T24752] net_ratelimit: 10 callbacks suppressed [ 1409.961494][T24752] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 1410.028392][T24745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.063008][T24745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.157312][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1410.170577][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1410.178634][ T5923] usb 6-1: can't read configurations, error -71 [ 1410.184935][T10884] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1410.207086][T10884] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1410.398013][T10884] usb 2-1: USB disconnect, device number 69 [ 1410.414856][T10884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1410.446740][T10884] cp210x 2-1:0.0: device disconnected [ 1411.459838][T24769] fuse: Unexpected value for 'default_permissions' [ 1411.528280][T24774] fuse: Bad value for 'group_id' [ 1411.533910][T24774] fuse: Bad value for 'group_id' [ 1411.672180][T10884] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1411.782287][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1411.825573][T10884] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1411.837867][T10884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.851118][T10884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.868840][T10884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1411.895501][T10884] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1411.910081][T10884] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1411.929787][T10884] usb 6-1: Manufacturer: syz [ 1411.944607][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1411.956552][T10884] usb 6-1: config 0 descriptor?? [ 1411.962967][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1412.014732][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1412.024245][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1412.036188][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1412.050180][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.060918][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.070118][ T10] usb 4-1: Product: syz [ 1412.074818][ T10] usb 4-1: Manufacturer: syz [ 1412.094672][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1412.100484][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1412.115376][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1412.125781][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 1412.415005][T10884] appleir 0003:05AC:8243.0081: unknown main item tag 0x0 [ 1412.427660][T10884] appleir 0003:05AC:8243.0081: No inputs registered, leaving [ 1412.443604][T10884] appleir 0003:05AC:8243.0081: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1412.456547][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1412.580183][T24781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.591368][T24781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.600184][T24779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.624560][T24779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.653428][ T10] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1412.676273][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1412.691339][ T10] usb 1-1: can't read configurations, error -61 [ 1412.772802][T10884] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1412.842541][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1412.899455][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.929912][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.947784][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.967926][ T5916] usb 4-1: USB disconnect, device number 5 [ 1412.968774][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.995124][ T10] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1413.011573][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1413.021640][ T10] usb 1-1: can't read configurations, error -61 [ 1413.034102][ T10] usb usb1-port1: attempt power cycle [ 1413.312212][T10884] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1413.372389][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1413.413468][ T10] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1413.430377][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1413.440842][ T10] usb 1-1: can't read configurations, error -61 [ 1413.477558][T10884] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1413.492998][T10884] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.516358][T10884] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1413.536166][T10884] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1413.555617][T10884] usb 2-1: Product: syz [ 1413.564588][T10884] usb 2-1: Manufacturer: syz [ 1413.582232][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1413.596326][T10884] hub 2-1:4.0: USB hub found [ 1413.632480][ T10] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1413.642596][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1413.650601][ T10] usb 1-1: can't read configurations, error -61 [ 1413.658119][ T10] usb usb1-port1: unable to enumerate USB device [ 1413.762699][ T5876] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1413.804838][T10884] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 1413.854893][T10884] usb 2-1: USB disconnect, device number 71 [ 1413.924302][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 1413.935457][ T5876] usb 3-1: config 194 has an invalid interface number: 102 but max is 2 [ 1413.946011][ T5876] usb 3-1: config 194 has 2 interfaces, different from the descriptor's value: 3 [ 1413.960796][ T5876] usb 3-1: config 194 has no interface number 1 [ 1413.969056][ T5876] usb 3-1: config 194 interface 0 has no altsetting 1 [ 1413.981711][ T5876] usb 3-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1413.992866][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.001153][ T5876] usb 3-1: Product: syz [ 1414.005746][ T5876] usb 3-1: Manufacturer: syz [ 1414.010497][ T5876] usb 3-1: SerialNumber: syz [ 1414.300030][ T5876] qmi_wwan 3-1:194.0: probe with driver qmi_wwan failed with error -22 [ 1414.323720][T10884] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1414.323952][ T5876] usb 3-1: unknown number of interfaces: 2 [ 1414.352676][ T5876] usb 3-1: USB disconnect, device number 75 [ 1414.462322][T10884] usb 4-1: device descriptor read/64, error -71 [ 1414.476642][ T5923] usb 6-1: USB disconnect, device number 18 [ 1414.712315][T10884] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1414.863108][T10884] usb 4-1: device descriptor read/64, error -71 [ 1414.985048][T10884] usb usb4-port1: attempt power cycle [ 1415.024258][T24818] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4823'. [ 1415.052274][ T5923] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1415.138972][ T30] audit: type=1800 audit(1750343079.238:2127): pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4824" name="file1" dev="tmpfs" ino=964 res=0 errno=0 [ 1415.169449][T24820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1415.254344][ T5923] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 1415.263749][ T5923] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1415.301660][ T5923] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1415.317323][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1415.329766][ T5923] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1415.332183][T10884] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1415.341835][ T5923] usb 6-1: Product: syz [ 1415.351264][ T5923] usb 6-1: Manufacturer: syz [ 1415.357125][ T5923] usb 6-1: SerialNumber: syz [ 1415.362978][T10884] usb 4-1: device descriptor read/8, error -71 [ 1415.504700][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1415.562228][ T5916] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1415.572395][ T5967] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1415.612614][T10884] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1415.642427][ T10] usb 2-1: device descriptor read/64, error -71 [ 1415.652880][T10884] usb 4-1: device descriptor read/8, error -71 [ 1415.712271][ T5967] usb 1-1: device descriptor read/64, error -71 [ 1415.718730][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 1415.731683][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.743270][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.754789][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1415.766235][T10884] usb usb4-port1: unable to enumerate USB device [ 1415.772690][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1415.783408][ T5916] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1415.792586][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.808895][ T5916] usb 3-1: config 0 descriptor?? [ 1415.882462][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1415.952359][ T5967] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1416.022215][ T10] usb 2-1: device descriptor read/64, error -71 [ 1416.082343][ T5967] usb 1-1: device descriptor read/64, error -71 [ 1416.114412][ T5923] usb 6-1: USB disconnect, device number 19 [ 1416.134986][ T10] usb usb2-port1: attempt power cycle [ 1416.192589][ T5967] usb usb1-port1: attempt power cycle [ 1416.249689][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: unknown main item tag 0x0 [ 1416.259417][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: unknown main item tag 0x0 [ 1416.268604][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: unknown main item tag 0x0 [ 1416.278464][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: unknown main item tag 0x0 [ 1416.286277][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: unknown main item tag 0x0 [ 1416.304887][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 1416.322422][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: U2F Zero LED initialised [ 1416.333628][ T5916] hid-u2fzero 0003:10C4:8ACF.0082: U2F Zero RNG initialised [ 1416.445271][ T5923] usb 3-1: USB disconnect, device number 76 [ 1416.473689][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1416.503860][ T10] usb 2-1: device descriptor read/8, error -71 [ 1416.542349][ T5967] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1416.563624][ T5967] usb 1-1: device descriptor read/8, error -71 [ 1416.622201][ T5916] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1416.742343][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1416.763357][ T10] usb 2-1: device descriptor read/8, error -71 [ 1416.772403][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 1416.779426][ T5916] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1416.788763][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.799650][ T5916] usb 6-1: config 0 descriptor?? [ 1416.804781][ T5967] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1416.832991][ T5967] usb 1-1: device descriptor read/8, error -71 [ 1416.873886][ T10] usb usb2-port1: unable to enumerate USB device [ 1416.946393][ T5967] usb usb1-port1: unable to enumerate USB device [ 1417.356755][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1417.523435][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1417.530500][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1417.539000][ T10] usb 3-1: config 0 has no interface number 0 [ 1417.548955][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1417.558253][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.567434][ T10] usb 3-1: Product: syz [ 1417.571686][ T10] usb 3-1: Manufacturer: syz [ 1417.576413][ T10] usb 3-1: SerialNumber: syz [ 1417.587277][ T10] usb 3-1: config 0 descriptor?? [ 1417.598837][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1417.605233][ T5876] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1417.762351][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 1417.775950][ T5876] usb 4-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 1417.788116][ T5876] usb 4-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1417.797566][ T10] gspca_spca1528: reg_w err -71 [ 1417.802259][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1417.816355][ T5876] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1417.826130][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.842415][ T5876] usb 4-1: config 0 descriptor?? [ 1417.843718][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1417.863132][ T5916] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1417.867175][ T5876] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1417.881738][ T5916] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1417.884676][ T10] usb 3-1: USB disconnect, device number 77 [ 1417.898134][ T5916] usb 6-1: USB disconnect, device number 20 [ 1418.591961][T24859] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 1418.612328][T24859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4840'. [ 1418.672353][ T5876] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1418.752384][ T5923] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1418.776213][T24863] fuse: Bad value for 'user_id' [ 1418.781422][T24863] fuse: Bad value for 'user_id' [ 1418.796787][T24863] input: syz0 as /devices/virtual/input/input106 [ 1418.821178][T24863] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1418.846513][ T5876] usb 3-1: config index 0 descriptor too short (expected 31, got 27) [ 1418.862503][ T5876] usb 3-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1418.882157][ T5876] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1418.897034][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1418.906270][ T5876] usb 3-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1418.914745][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 1418.919953][ T5876] usb 3-1: Product: syz [ 1418.924833][ T5876] usb 3-1: Manufacturer: syz [ 1418.930210][ T5876] usb 3-1: SerialNumber: syz [ 1418.935926][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.949029][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.972107][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1418.992319][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1419.002004][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.031693][ T5923] usb 6-1: config 0 descriptor?? [ 1419.388535][T24875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.400061][T24875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.448592][T24875] Invalid logical block size (-1) [ 1419.586232][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'. [ 1419.855334][ T5876] usb 3-1: USB disconnect, device number 78 [ 1420.031099][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1420.098846][T24887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.109115][T24887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.332312][ T5916] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1420.406659][T24258] usb 4-1: USB disconnect, device number 10 [ 1420.482354][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1420.500313][ T5916] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 1420.519322][ T5916] usb 2-1: config 0 has no interface number 1 [ 1420.547510][ T5916] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1420.586096][ T5916] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1420.630862][ T5916] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1420.684996][ T5916] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1420.739596][ T5916] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1420.756653][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1420.769261][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1420.785706][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1420.805036][ T5916] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1420.814583][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.823583][ T5916] usb 2-1: Product: syz [ 1420.828193][ T5916] usb 2-1: Manufacturer: syz [ 1420.834912][ T5916] usb 2-1: SerialNumber: syz [ 1420.880586][ T5916] usb 2-1: config 0 descriptor?? [ 1420.920322][T24886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1420.939952][ T5916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1420.965172][ T5916] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1421.019952][ T5916] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1421.032183][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1421.134691][T24900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4852'. [ 1421.182931][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1421.236439][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1421.237736][T24258] usb 2-1: USB disconnect, device number 76 [ 1421.245709][ T5967] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1421.266220][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.302408][ T10] usb 3-1: Product: syz [ 1421.311305][ T10] usb 3-1: Manufacturer: syz [ 1421.328258][ T10] usb 3-1: SerialNumber: syz [ 1421.393463][ T5967] usb 4-1: device descriptor read/64, error -71 [ 1421.455605][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1421.463422][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 1421.632373][ T5967] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1421.792181][ T5967] usb 4-1: device descriptor read/64, error -71 [ 1421.922225][T24894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.941505][ T5923] usbhid 6-1:0.0: can't add hid device: -71 [ 1421.954949][ T5923] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1421.965450][ T5967] usb usb4-port1: attempt power cycle [ 1421.992619][T24894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.011087][ T5923] usb 6-1: USB disconnect, device number 21 [ 1422.060801][T24911] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1422.073911][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1422.105120][T24894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.114141][T24894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.171553][T22787] r8152-cfgselector 3-1: USB disconnect, device number 79 [ 1422.332592][ T5967] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1422.352811][ T5967] usb 4-1: device descriptor read/8, error -71 [ 1422.532362][ T5923] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1422.592368][ T5967] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1422.623061][ T5967] usb 4-1: device descriptor read/8, error -71 [ 1422.672768][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1422.733812][ T5967] usb usb4-port1: unable to enumerate USB device [ 1422.954037][ T5923] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1423.033174][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.039735][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.087819][T24924] FAULT_INJECTION: forcing a failure. [ 1423.087819][T24924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1423.121470][T24924] CPU: 1 UID: 0 PID: 24924 Comm: syz.2.4860 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1423.121493][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1423.121504][T24924] Call Trace: [ 1423.121512][T24924] [ 1423.121520][T24924] dump_stack_lvl+0x189/0x250 [ 1423.121569][T24924] ? __pfx____ratelimit+0x10/0x10 [ 1423.121592][T24924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1423.121616][T24924] ? __pfx__printk+0x10/0x10 [ 1423.121633][T24924] ? __might_fault+0xb0/0x130 [ 1423.121656][T24924] should_fail_ex+0x414/0x560 [ 1423.121683][T24924] _copy_from_user+0x2d/0xb0 [ 1423.121701][T24924] do_ipv6_getsockopt+0x2b0/0x2300 [ 1423.121731][T24924] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1423.121757][T24924] ? aa_label_sk_perm+0x413/0x560 [ 1423.121779][T24924] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1423.121817][T24924] ? __lock_acquire+0xab9/0xd20 [ 1423.121850][T24924] ipv6_getsockopt+0xbd/0x290 [ 1423.121875][T24924] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1423.121901][T24924] ? sock_common_getsockopt+0x2d/0xb0 [ 1423.121927][T24924] do_sock_getsockopt+0x360/0x650 [ 1423.121948][T24924] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1423.121966][T24924] ? do_syscall_64+0x80/0x3b0 [ 1423.121979][T24924] ? __fget_files+0x3a0/0x420 [ 1423.121996][T24924] ? __fget_files+0x2a/0x420 [ 1423.122025][T24924] __x64_sys_getsockopt+0x1a5/0x250 [ 1423.122049][T24924] ? do_syscall_64+0x80/0x3b0 [ 1423.122069][T24924] ? do_syscall_64+0x80/0x3b0 [ 1423.122090][T24924] do_syscall_64+0xfa/0x3b0 [ 1423.122107][T24924] ? lockdep_hardirqs_on+0x9c/0x150 [ 1423.122137][T24924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.122158][T24924] ? clear_bhb_loop+0x60/0xb0 [ 1423.122184][T24924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.122204][T24924] RIP: 0033:0x7f6bea38e929 [ 1423.122222][T24924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1423.122241][T24924] RSP: 002b:00007f6beb2b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1423.122263][T24924] RAX: ffffffffffffffda RBX: 00007f6bea5b5fa0 RCX: 00007f6bea38e929 [ 1423.122278][T24924] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000003 [ 1423.122291][T24924] RBP: 00007f6beb2b4090 R08: 0000200000000000 R09: 0000000000000000 [ 1423.122305][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.122317][T24924] R13: 0000000000000000 R14: 00007f6bea5b5fa0 R15: 00007f6bea6dfa28 [ 1423.122348][T24924] [ 1423.452269][ T5923] usb 6-1: device descriptor read/64, error -71 [ 1423.572469][ T5923] usb usb6-port1: attempt power cycle [ 1423.912255][ T5923] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 1423.953218][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1424.162143][ T5916] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1424.202285][ T5923] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 1424.243867][ T5923] usb 6-1: device descriptor read/8, error -71 [ 1424.312177][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 1424.325450][ T5916] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 1424.347892][ T5916] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 1424.368061][ T5923] usb usb6-port1: unable to enumerate USB device [ 1424.412870][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 1424.421143][ T5916] usb 2-1: Product: syz [ 1424.426495][ T5916] usb 2-1: Manufacturer: syz [ 1424.431221][ T5916] usb 2-1: SerialNumber: syz [ 1424.457121][ T5916] usb 2-1: config 0 descriptor?? [ 1424.472167][T10884] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1424.649230][T10884] usb 4-1: Using ep0 maxpacket: 32 [ 1424.671593][T10884] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 1424.680412][T10884] usb 4-1: config 0 has no interface number 0 [ 1424.686931][T10884] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1424.718694][T10884] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1424.744749][T10884] usb 4-1: New USB device found, idVendor=0582, idProduct=ecd6, bcdDevice=6b.1b [ 1424.788260][T10884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.818990][T10884] usb 4-1: Product: syz [ 1424.826825][T10884] usb 4-1: Manufacturer: syz [ 1424.839238][T10884] usb 4-1: SerialNumber: syz [ 1424.859480][T10884] usb 4-1: config 0 descriptor?? [ 1425.165248][T10884] usb 4-1: USB disconnect, device number 15 [ 1425.290673][T11859] udevd[11859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.219/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1425.324879][ T5916] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 1425.380350][ T5916] usb 2-1: USB disconnect, device number 77 [ 1425.872463][ T5916] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1426.037143][ T5916] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1426.082690][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.124581][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.147622][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1426.177734][ T5916] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1426.191233][ T5916] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1426.206510][T24969] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4876'. [ 1426.206873][ T5916] usb 2-1: Manufacturer: syz [ 1426.239027][ T5916] usb 2-1: config 0 descriptor?? [ 1426.686309][ T5916] appleir 0003:05AC:8243.0083: No inputs registered, leaving [ 1426.705354][ T5916] appleir 0003:05AC:8243.0083: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1426.883105][ T5967] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 1426.897482][ T5916] usb 2-1: USB disconnect, device number 78 [ 1426.943711][T24981] fido_id[24981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1427.032139][ T5967] usb 6-1: device descriptor read/64, error -71 [ 1427.272521][ T5967] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 1427.412318][ T5967] usb 6-1: device descriptor read/64, error -71 [ 1427.532833][ T5967] usb usb6-port1: attempt power cycle [ 1427.622326][T22787] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1427.784626][T22787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1427.796913][T22787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1427.809697][T22787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1427.821438][T22787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1427.839234][T22787] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1427.849360][T22787] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1427.858059][T22787] usb 3-1: Manufacturer: syz [ 1427.868401][T22787] usb 3-1: config 0 descriptor?? [ 1427.879049][T24993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1427.913237][ T5967] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 1427.957820][ T5967] usb 6-1: device descriptor read/8, error -71 [ 1428.202302][ T5967] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 1428.223082][ T5967] usb 6-1: device descriptor read/8, error -71 [ 1428.313152][T22787] appleir 0003:05AC:8243.0084: unknown main item tag 0x0 [ 1428.325725][T22787] appleir 0003:05AC:8243.0084: No inputs registered, leaving [ 1428.337444][ T5967] usb usb6-port1: unable to enumerate USB device [ 1428.340091][T22787] appleir 0003:05AC:8243.0084: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1429.015283][T24993] xt_CONNSECMARK: invalid mode: 0 [ 1429.482242][T22787] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1429.646473][T22787] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1429.668415][T22787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.699559][T22787] usb 4-1: config 0 descriptor?? [ 1429.728045][T22787] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1429.935540][T22787] gspca_spca508: reg_read err -32 [ 1429.961228][T22787] gspca_spca508: reg_read err -32 [ 1429.989373][T22787] gspca_spca508: reg_read err -32 [ 1430.213281][T22787] gspca_spca508: reg_read err -71 [ 1430.272581][T22787] gspca_spca508: reg write: error -71 [ 1430.278064][T22787] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1430.333045][T22787] usb 4-1: USB disconnect, device number 16 [ 1430.394222][T24258] usb 3-1: USB disconnect, device number 80 [ 1430.453681][ T5916] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1431.049445][ T5916] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1431.061735][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.073309][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.083754][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1431.133325][ T5916] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1431.332265][ T5916] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1431.368848][ T5916] usb 1-1: Manufacturer: syz [ 1431.419289][ T5916] usb 1-1: config 0 descriptor?? [ 1431.829218][T25047] sctp: [Deprecated]: syz.5.4896 (pid 25047) Use of int in maxseg socket option. [ 1431.829218][T25047] Use struct sctp_assoc_value instead [ 1431.963819][ T5916] appleir 0003:05AC:8243.0085: No inputs registered, leaving [ 1431.980843][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1432.084491][ T5916] appleir 0003:05AC:8243.0085: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1432.134634][T24258] usb 1-1: USB disconnect, device number 79 [ 1432.625575][T25066] fido_id[25066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1433.632517][T22787] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1433.650436][ T30] audit: type=1326 audit(1750343097.728:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1433.764593][ T30] audit: type=1326 audit(1750343097.728:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1433.821573][ T30] audit: type=1326 audit(1750343097.728:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1433.854505][T22787] usb 6-1: config 3 has an invalid interface number: 29 but max is 0 [ 1433.872174][T22787] usb 6-1: config 3 has no interface number 0 [ 1433.916109][T22787] usb 6-1: config 3 interface 29 has no altsetting 0 [ 1433.942603][ T30] audit: type=1326 audit(1750343097.728:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1433.965178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1433.977161][ T30] audit: type=1326 audit(1750343097.728:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1433.999623][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.002516][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1434.015144][ T30] audit: type=1326 audit(1750343097.728:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1434.039100][T22787] usb 6-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=7a.e2 [ 1434.048399][T22787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.057266][T22787] usb 6-1: Product: syz [ 1434.061518][T22787] usb 6-1: Manufacturer: syz [ 1434.067315][ T30] audit: type=1326 audit(1750343097.728:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1434.090094][T22787] usb 6-1: SerialNumber: syz [ 1434.110603][ T30] audit: type=1326 audit(1750343097.728:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1434.133078][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.142378][ T30] audit: type=1326 audit(1750343097.738:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1434.142672][ T5916] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1434.164783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.186950][ T30] audit: type=1326 audit(1750343097.738:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25085 comm="syz.0.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c378e929 code=0x7ffc0000 [ 1434.232224][ T10] usb 2-1: device descriptor read/64, error -71 [ 1434.312532][T25082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.333704][T25082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.370710][T25082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.384987][ T5916] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1434.398918][T25082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.413086][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.433893][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.459635][T22787] usb 6-1: bad CDC descriptors [ 1434.472410][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1434.480354][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1434.514611][T22787] usb 6-1: USB disconnect, device number 30 [ 1434.516322][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1434.540486][ T5916] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1434.558235][ T5916] usb 4-1: Manufacturer: syz [ 1434.584885][ T5916] usb 4-1: config 0 descriptor?? [ 1434.622287][ T10] usb 2-1: device descriptor read/64, error -71 [ 1434.692309][ T5924] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1434.742861][ T10] usb usb2-port1: attempt power cycle [ 1434.853076][ T5924] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1434.867358][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.876211][ T5924] usb 3-1: Product: syz [ 1434.880457][ T5924] usb 3-1: Manufacturer: syz [ 1434.885393][ T5924] usb 3-1: SerialNumber: syz [ 1434.893409][ T5923] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1434.902499][ T5924] usb 3-1: config 0 descriptor?? [ 1434.915772][ T5924] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1435.017955][ T5916] appleir 0003:05AC:8243.0086: unknown main item tag 0x0 [ 1435.031203][ T5916] appleir 0003:05AC:8243.0086: No inputs registered, leaving [ 1435.051428][ T5916] appleir 0003:05AC:8243.0086: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1435.054539][ T5923] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1435.074211][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.090530][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.092348][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1435.138561][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1435.172812][ T10] usb 2-1: device descriptor read/8, error -71 [ 1435.270072][ T5923] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1435.282740][ T5923] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1435.293925][ T5923] usb 1-1: Manufacturer: syz [ 1435.316184][ T5923] usb 1-1: config 0 descriptor?? [ 1435.363874][T25094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.375611][T25094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.462208][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1435.482944][ T10] usb 2-1: device descriptor read/8, error -71 [ 1435.582964][T22787] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1435.592781][ T10] usb usb2-port1: unable to enumerate USB device [ 1435.623921][T25103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.642852][ T5924] sonixb 3-1:0.0: Error writing register 01: -110 [ 1435.652269][T25103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.660772][ T5924] sonixb 3-1:0.0: probe with driver sonixb failed with error -110 [ 1435.747752][T22787] usb 6-1: config 0 has no interfaces? [ 1435.757623][T22787] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1435.781617][T22787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.813383][T22787] usb 6-1: config 0 descriptor?? [ 1435.860336][ T5923] appleir 0003:05AC:8243.0087: No inputs registered, leaving [ 1435.888382][ T5923] appleir 0003:05AC:8243.0087: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1436.096678][ T10] usb 6-1: USB disconnect, device number 31 [ 1436.183626][T25102] delete_channel: no stack [ 1436.842164][T22787] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1436.848565][ T5916] usb 1-1: USB disconnect, device number 80 [ 1437.004469][T22787] usb 6-1: Using ep0 maxpacket: 32 [ 1437.050479][T22787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.080815][T22787] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1437.104699][ T10] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 1437.118473][T22787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.176665][T22787] usb 6-1: config 0 descriptor?? [ 1437.416901][ T5967] usb 3-1: USB disconnect, device number 81 [ 1437.536886][T25126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4918'. [ 1437.546245][ T10] usb 4-1: device descriptor read/64, error -71 [ 1437.622774][ T5916] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1437.668797][T22787] usbhid 6-1:0.0: can't add hid device: -71 [ 1437.682359][T22787] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1437.726005][T22787] usb 6-1: USB disconnect, device number 32 [ 1437.792307][ T10] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 1437.832205][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 1437.847758][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1437.857024][ T5916] usb 2-1: config 7 has an invalid interface number: 186 but max is 0 [ 1437.866107][ T5916] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 1437.878018][ T5916] usb 2-1: config 7 has an invalid descriptor of length 32, skipping remainder of the config [ 1437.888494][ T5916] usb 2-1: config 7 has no interface number 0 [ 1437.894782][ T5916] usb 2-1: config 7 interface 186 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1437.908943][ T5916] usb 2-1: config 7 interface 186 has no altsetting 0 [ 1437.920079][ T5916] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.8b [ 1437.930553][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.938714][ T5916] usb 2-1: Product: syz [ 1437.944068][ T5916] usb 2-1: Manufacturer: syz [ 1437.949207][ T10] usb 4-1: device firmware changed [ 1437.957884][T10884] usb 4-1: USB disconnect, device number 17 [ 1437.967748][ T5916] usb 2-1: SerialNumber: syz [ 1438.222354][T10884] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1438.545981][T10884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1438.582257][T10884] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1438.619749][T10884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.689538][T25138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1438.727239][T10884] usb 4-1: config 0 descriptor?? [ 1439.250523][T25122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.269667][T25122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.440173][T10884] usbhid 4-1:0.0: can't add hid device: -71 [ 1439.469593][T10884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1439.565716][T10884] usb 4-1: USB disconnect, device number 18 [ 1439.886679][ T5924] hid-generic 0000:0003:0000.0088: item fetching failed at offset 0/2 [ 1439.887390][ T5924] hid-generic 0000:0003:0000.0088: probe with driver hid-generic failed with error -22 [ 1440.007127][ T5916] usb 2-1: Cannot retrieve CPort count: -71 [ 1440.007183][ T5916] usb 2-1: Cannot retrieve CPort count: -71 [ 1440.007213][ T5916] es2_ap_driver 2-1:7.186: probe with driver es2_ap_driver failed with error -71 [ 1440.009734][ T5916] usb 2-1: USB disconnect, device number 83 [ 1440.458864][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1440.540468][T25172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1440.565316][ T5924] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1440.649463][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1440.649482][ T30] audit: type=1326 audit(1750343104.748:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25178 comm="syz.1.4932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddd8e929 code=0x0 [ 1440.734683][ T5924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1440.752197][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.753257][T25183] binder: BINDER_SET_CONTEXT_MGR already set [ 1440.766686][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.769593][T25183] binder: 25178:25183 ioctl 4018620d 200000000040 returned -16 [ 1440.779917][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1440.806952][ T30] audit: type=1326 audit(1750343104.908:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25181 comm="syz.5.4933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc07f8e929 code=0x0 [ 1440.839601][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1440.852291][ T5916] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1440.858005][ T5924] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1440.882430][ T5924] usb 4-1: Manufacturer: syz [ 1440.897651][ T5924] usb 4-1: config 0 descriptor?? [ 1441.012120][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 1441.020006][ T5916] usb 3-1: config 0 has an invalid interface number: 231 but max is 1 [ 1441.029755][ T5916] usb 3-1: config 0 has no interface number 1 [ 1441.036650][ T5916] usb 3-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 1441.048101][ T5916] usb 3-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 1441.061827][ T5916] usb 3-1: config 0 interface 231 has no altsetting 0 [ 1441.070966][ T5916] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1441.080508][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.088643][ T5916] usb 3-1: Product: syz [ 1441.093168][ T5916] usb 3-1: Manufacturer: syz [ 1441.097854][ T5916] usb 3-1: SerialNumber: syz [ 1441.105524][ T5916] usb 3-1: config 0 descriptor?? [ 1441.316238][ T5916] usb 3-1: Could not set interface, error -71 [ 1441.334208][ T5916] usb 3-1: USB disconnect, device number 82 [ 1441.341759][ T5924] appleir 0003:05AC:8243.0089: No inputs registered, leaving [ 1441.368371][ T5924] appleir 0003:05AC:8243.0089: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1441.545345][ T5916] usb 4-1: USB disconnect, device number 19 [ 1441.886182][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'. [ 1442.013449][T10884] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1442.032219][T22183] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1442.082583][ T5916] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1442.134412][T25206] netlink: 668 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1442.145091][T25206] netlink: 668 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1442.192526][T22183] usb 1-1: Using ep0 maxpacket: 16 [ 1442.199841][T10884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1442.219784][T22183] usb 1-1: config 0 has no interfaces? [ 1442.226327][T10884] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 1442.239059][T22183] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1442.248455][ T5916] usb 6-1: device descriptor read/64, error -71 [ 1442.257525][T10884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.265887][T22183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.278767][T10884] usb 2-1: config 0 descriptor?? [ 1442.285749][T22183] usb 1-1: config 0 descriptor?? [ 1442.523571][ T5916] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1442.536837][T25194] veth0_to_team: entered promiscuous mode [ 1442.549334][T25194] veth0_to_team: entered allmulticast mode [ 1442.679740][ T5916] usb 6-1: device descriptor read/64, error -71 [ 1445.092380][T25196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.117240][T25220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.343691][ T5916] usb usb6-port1: attempt power cycle [ 1445.423901][ T5967] usb 1-1: USB disconnect, device number 81 [ 1445.445411][T25196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.505642][T25220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.562314][T22183] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1445.772560][ T5916] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1445.934727][ T5916] usb 6-1: device descriptor read/8, error -71 [ 1446.142799][T22183] usb 4-1: Using ep0 maxpacket: 16 [ 1446.277914][T10884] usbhid 2-1:0.0: can't add hid device: -71 [ 1446.316066][T22183] usb 4-1: device descriptor read/all, error -71 [ 1446.330068][T10884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1446.350316][ T5967] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1446.429622][T10884] usb 2-1: USB disconnect, device number 84 [ 1446.572424][ T5967] usb 3-1: device descriptor read/64, error -71 [ 1446.832678][ T5967] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1447.002576][T22183] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1447.010739][ T5967] usb 3-1: device descriptor read/64, error -71 [ 1447.158769][ T5967] usb usb3-port1: attempt power cycle [ 1447.192457][T22183] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1447.229852][T22183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.267930][T22183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.308738][T22183] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1447.381948][T22183] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1447.596021][T22183] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1447.604443][ T5967] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1447.906554][T22183] usb 4-1: Manufacturer: syz [ 1447.931642][T25234] netlink: 'syz.5.4949': attribute type 4 has an invalid length. [ 1447.972744][ T5967] usb 3-1: device descriptor read/8, error -71 [ 1447.982265][T22183] usb 4-1: config 0 descriptor?? [ 1448.752533][ T5967] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1448.796487][ T5967] usb 3-1: device descriptor read/8, error -71 [ 1448.805569][T22183] appleir 0003:05AC:8243.008A: unknown main item tag 0x0 [ 1448.840813][T22183] appleir 0003:05AC:8243.008A: No inputs registered, leaving [ 1448.932623][ T5967] usb usb3-port1: unable to enumerate USB device [ 1449.787820][T25228] usb usb1: usbfs: process 25228 (syz.3.4948) did not claim interface 0 before use [ 1450.037423][T22183] appleir 0003:05AC:8243.008A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1452.932188][ T5916] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1457.641592][ T0] sched: DL replenish lagged too much [ 1461.062983][ T5916] usb 4-1: USB disconnect, device number 21 [ 1463.752189][ T5967] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1463.761363][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1464.992449][ T5967] usb 3-1: device descriptor read/64, error -32 [ 1465.312221][ T5967] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1469.242220][ T5967] usb 3-1: Using ep0 maxpacket: 16 [ 1472.132313][ T5967] usb 3-1: device descriptor read/all, error -71 [ 1473.235943][ T5967] usb usb3-port1: attempt power cycle [ 1474.230041][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1484.613009][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.619385][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.133255][T11371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1491.196561][T11371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1491.205590][T11371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1491.223406][T11371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1491.236096][T11371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1493.700348][T11371] Bluetooth: hci0: command tx timeout [ 1494.954389][T17327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1495.010441][T17327] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1495.019643][T17327] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1495.028723][T17327] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1495.038082][T17327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1495.173315][T21489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1495.187021][T21489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1495.196150][T21489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1495.215518][T21489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1495.234007][T21489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1495.749540][T11371] Bluetooth: hci0: command tx timeout [ 1495.757016][T11371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1495.775383][T11371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1495.790634][T11371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1495.813696][T11371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1495.846283][T11371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1497.107626][T21489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1497.118099][T21489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1497.143821][T21489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1497.167057][T21489] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1497.175110][T21489] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1497.182323][T25288] Bluetooth: hci2: command tx timeout [ 1497.342383][T21489] Bluetooth: hci3: command tx timeout [ 1497.824235][T21489] Bluetooth: hci0: command tx timeout [ 1497.903202][T21489] Bluetooth: hci4: command tx timeout [ 1499.262234][T21489] Bluetooth: hci2: command tx timeout [ 1499.270641][T11371] Bluetooth: hci6: command tx timeout [ 1499.425894][T11371] Bluetooth: hci3: command tx timeout [ 1499.902646][T11371] Bluetooth: hci0: command tx timeout [ 1499.992974][T11371] Bluetooth: hci4: command tx timeout [ 1501.342242][T11371] Bluetooth: hci6: command tx timeout [ 1501.347724][T11371] Bluetooth: hci2: command tx timeout [ 1501.506950][T11371] Bluetooth: hci3: command tx timeout [ 1502.062234][T11371] Bluetooth: hci4: command tx timeout [ 1503.422246][T21489] Bluetooth: hci6: command tx timeout [ 1503.428149][T11371] Bluetooth: hci2: command tx timeout [ 1503.582553][T11371] Bluetooth: hci3: command tx timeout [ 1504.142620][T11371] Bluetooth: hci4: command tx timeout [ 1505.502799][T11371] Bluetooth: hci6: command tx timeout [ 1515.195837][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1526.113570][T21489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1526.128247][T21489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1526.137557][T21489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1526.146352][T21489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1526.157118][T21489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1528.227707][T11371] Bluetooth: hci1: command tx timeout [ 1530.302155][T11371] Bluetooth: hci1: command tx timeout [ 1530.533135][T21489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1530.548504][T21489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1530.558272][T21489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1530.569159][T21489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1530.577913][T21489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1532.382375][T21489] Bluetooth: hci1: command tx timeout [ 1532.702497][T21489] Bluetooth: hci7: command tx timeout [ 1533.437157][T11371] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1533.457016][T11371] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1533.468825][T11371] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1533.478636][T11371] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1533.488655][T11371] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1534.462403][T11371] Bluetooth: hci1: command tx timeout [ 1534.784763][T11371] Bluetooth: hci7: command tx timeout [ 1535.582552][T11371] Bluetooth: hci8: command tx timeout [ 1536.862639][T11371] Bluetooth: hci7: command tx timeout [ 1537.662885][T11371] Bluetooth: hci8: command tx timeout [ 1538.942543][T11371] Bluetooth: hci7: command tx timeout [ 1538.982311][T21489] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1538.995863][T21489] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1539.005924][T21489] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1539.034309][T21489] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1539.044968][T21489] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1539.754212][T11371] Bluetooth: hci8: command tx timeout [ 1541.102315][T11371] Bluetooth: hci9: command tx timeout [ 1541.822627][T11371] Bluetooth: hci8: command tx timeout [ 1543.182171][T11371] Bluetooth: hci9: command tx timeout [ 1545.262370][T11371] Bluetooth: hci9: command tx timeout [ 1545.908589][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.922214][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.345262][T11371] Bluetooth: hci9: command tx timeout [ 1550.980864][T21489] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1551.000365][T21489] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1551.010916][T21489] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1551.026399][T21489] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1551.036220][T21489] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1553.102416][T11371] Bluetooth: hci10: command tx timeout [ 1555.182154][T11371] Bluetooth: hci10: command tx timeout [ 1557.266972][T11371] Bluetooth: hci10: command tx timeout [ 1559.343321][T11371] Bluetooth: hci10: command tx timeout [ 1587.042525][T11371] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1587.069691][T11371] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1587.080195][T11371] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1587.090846][T11371] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1587.099695][T11371] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1589.182279][T11371] Bluetooth: hci11: command tx timeout [ 1591.082514][T21489] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1591.095700][T21489] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1591.104788][T21489] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1591.119482][T21489] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1591.131024][T21489] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1591.262746][T21489] Bluetooth: hci11: command tx timeout [ 1593.182693][T21489] Bluetooth: hci12: command tx timeout [ 1593.342424][T21489] Bluetooth: hci11: command tx timeout [ 1593.558693][T11371] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1593.570349][T11371] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1593.579693][T11371] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1593.588360][T11371] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1593.606338][T11371] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1595.262140][T11371] Bluetooth: hci12: command tx timeout [ 1595.423411][T11371] Bluetooth: hci11: command tx timeout [ 1595.662269][T11371] Bluetooth: hci13: command tx timeout [ 1597.342166][T11371] Bluetooth: hci12: command tx timeout [ 1597.742424][T11371] Bluetooth: hci13: command tx timeout [ 1599.057599][T11371] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1599.079263][T11371] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1599.089030][T11371] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1599.099332][T11371] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1599.107718][T11371] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1599.422318][T21489] Bluetooth: hci12: command tx timeout [ 1599.822422][T21489] Bluetooth: hci13: command tx timeout [ 1601.182146][T21489] Bluetooth: hci14: command tx timeout [ 1601.902409][T21489] Bluetooth: hci13: command tx timeout [ 1603.262421][T21489] Bluetooth: hci14: command tx timeout [ 1605.342348][T21489] Bluetooth: hci14: command tx timeout [ 1607.348956][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.362151][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.422339][T21489] Bluetooth: hci14: command tx timeout [ 1611.507337][T11371] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1611.520041][T11371] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1611.530828][T11371] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1611.541585][T11371] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1611.550037][T11371] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1613.582259][T11371] Bluetooth: hci15: command tx timeout [ 1614.550588][T11371] Bluetooth: hci0: command 0x0406 tx timeout [ 1615.662471][T21489] Bluetooth: hci15: command tx timeout [ 1617.742171][T25359] Bluetooth: hci15: command tx timeout [ 1619.698826][T25359] Bluetooth: hci6: command 0x0406 tx timeout [ 1619.705128][T25359] Bluetooth: hci4: command 0x0406 tx timeout [ 1619.711279][T25359] Bluetooth: hci2: command 0x0406 tx timeout [ 1619.717506][T25359] Bluetooth: hci3: command 0x0406 tx timeout [ 1619.822597][T21489] Bluetooth: hci15: command tx timeout [ 1620.789236][ T31] INFO: task kworker/1:6:5924 blocked for more than 143 seconds. [ 1620.806343][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 1620.828440][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1620.838719][ T31] task:kworker/1:6 state:D stack:20392 pid:5924 tgid:5924 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1620.863174][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1620.870583][ T31] Call Trace: [ 1620.892530][ T31] [ 1620.895637][ T31] __schedule+0x16f5/0x4d00 [ 1620.900299][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1620.932493][ T31] ? schedule+0x165/0x360 [ 1620.936936][ T31] ? __pfx___schedule+0x10/0x10 [ 1620.941860][ T31] ? schedule+0x91/0x360 [ 1621.032994][ T31] schedule+0x165/0x360 [ 1621.037261][ T31] schedule_preempt_disabled+0x13/0x30 [ 1621.106407][ T31] __mutex_lock+0x724/0xe80 [ 1621.111001][ T31] ? __mutex_lock+0x51b/0xe80 [ 1621.141995][ T31] ? reg_check_chans_work+0x95/0xf00 [ 1621.147380][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1621.180808][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1621.189540][ T31] ? look_up_lock_class+0x74/0x170 [ 1621.200527][ T31] reg_check_chans_work+0x95/0xf00 [ 1621.206108][ T31] ? __lock_acquire+0xab9/0xd20 [ 1621.211036][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1621.221979][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1621.227790][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.238678][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1621.244860][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1621.250664][ T31] process_scheduled_works+0xae1/0x17b0 [ 1621.262170][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1621.268245][ T31] worker_thread+0x8a0/0xda0 [ 1621.284191][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1621.290620][ T31] ? __kthread_parkme+0x7b/0x200 [ 1621.300805][ T31] kthread+0x70e/0x8a0 [ 1621.305363][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1621.310543][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.321091][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.326679][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.337610][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.343058][ T31] ret_from_fork+0x3f9/0x770 [ 1621.347726][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.359070][ T31] ? __switch_to_asm+0x39/0x70 [ 1621.364281][ T31] ? __switch_to_asm+0x33/0x70 [ 1621.369100][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.379814][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.391703][ T31] [ 1621.406673][ T31] INFO: task kworker/u8:9:6953 blocked for more than 143 seconds. [ 1621.416277][ T31] Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 [ 1621.429774][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1621.441202][ T31] task:kworker/u8:9 state:D stack:19976 pid:6953 tgid:6953 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1621.458899][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 1621.465603][ T31] Call Trace: [ 1621.468927][ T31] [ 1621.471898][ T31] __schedule+0x16f5/0x4d00 [ 1621.482383][ T31] ? __lock_acquire+0xa91/0xd20 [ 1621.487293][ T31] ? schedule+0x165/0x360 [ 1621.491688][ T31] ? __pfx___schedule+0x10/0x10 [ 1621.506905][ T31] ? schedule+0x91/0x360 [ 1621.511260][ T31] schedule+0x165/0x360 [ 1621.516860][ T31] schedule_preempt_disabled+0x13/0x30 [ 1621.544673][ T31] __mutex_lock+0x724/0xe80 [ 1621.549261][ T31] ? look_up_lock_class+0x74/0x170 [ 1621.563535][ T31] ? __mutex_lock+0x51b/0xe80 [ 1621.568315][ T31] ? addrconf_verify_work+0x19/0x30 [ 1621.578324][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1621.585772][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1621.591593][ T31] addrconf_verify_work+0x19/0x30 [ 1621.601047][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1621.612253][ T31] process_scheduled_works+0xae1/0x17b0 [ 1621.617941][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1621.630122][ T31] worker_thread+0x8a0/0xda0 [ 1621.636041][ T31] kthread+0x70e/0x8a0 [ 1621.640189][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1621.654156][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.658836][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1621.668927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1621.677172][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.681846][ T31] ret_from_fork+0x3f9/0x770 [ 1621.690107][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1621.697972][ T31] ? __switch_to_asm+0x39/0x70 [ 1621.706273][ T31] ? __switch_to_asm+0x33/0x70 [ 1621.711108][ T31] ? __pfx_kthread+0x10/0x10 [ 1621.722193][ T31] ret_from_fork_asm+0x1a/0x30 [ 1621.727053][ T31] [ 1621.735331][ T31] [ 1621.735331][ T31] Showing all locks held in the system: [ 1621.747939][ T31] 5 locks held by kworker/u8:1/13: [ 1621.755313][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1621.770558][ T31] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1621.784313][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1621.798246][ T31] #3: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 1621.810033][ T31] #4: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1621.824342][ T31] 1 lock held by khungtaskd/31: [ 1621.829267][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1621.847037][ T31] 5 locks held by kworker/1:1/43: [ 1621.855710][ T31] 2 locks held by getty/5595: [ 1621.860460][ T31] #0: ffff88814d03b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1621.873779][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1621.887444][ T31] 3 locks held by kworker/1:6/5924: [ 1621.896542][ T31] #0: ffff88801a481d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1621.917262][ T31] #1: ffffc900045bfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1621.933466][ T31] #2: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 1621.949313][ T31] 3 locks held by kworker/u8:9/6953: [ 1621.958933][ T31] #0: ffff88814cc4a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1621.975582][ T31] #1: ffffc90003eafbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1621.993791][ T31] #2: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1622.010672][ T31] 1 lock held by syz.5.3690/20944: [ 1622.016194][ T31] #0: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1622.031058][ T31] 3 locks held by kworker/0:0/22183: [ 1622.036858][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1622.052127][ T31] #1: ffffc9000e81fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1622.074202][ T31] #2: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1622.098176][ T31] 1 lock held by syz-executor/22350: [ 1622.107081][ T31] #0: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1622.120037][ T31] 1 lock held by syz-executor/24360: [ 1622.128957][ T31] #0: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1622.141609][ T31] 1 lock held by syz.0.4954/25258: [ 1622.152157][ T31] #0: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1622.161250][ T31] 1 lock held by syz.2.4958/25275: [ 1622.176217][ T31] #0: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 1622.190367][ T31] 2 locks held by syz-executor/25283: [ 1622.201366][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.212458][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.229383][ T31] 2 locks held by syz-executor/25290: [ 1622.235996][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.250731][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.262649][ T31] 2 locks held by syz-executor/25291: [ 1622.268087][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.282373][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.306071][ T31] 2 locks held by syz-executor/25293: [ 1622.311618][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.323243][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.339179][ T31] 2 locks held by syz-executor/25295: [ 1622.346701][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.360451][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.373374][ T31] 2 locks held by syz-executor/25303: [ 1622.379122][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.391976][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.411687][ T31] 2 locks held by syz-executor/25310: [ 1622.418057][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.432243][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.449756][ T31] 2 locks held by syz-executor/25313: [ 1622.456339][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.471776][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.488384][ T31] 2 locks held by syz-executor/25320: [ 1622.494179][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.509509][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.533632][ T31] 2 locks held by syz-executor/25326: [ 1622.539176][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.556379][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.573264][ T31] 2 locks held by syz-executor/25335: [ 1622.578721][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.593124][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.611808][ T31] 2 locks held by syz-executor/25340: [ 1622.619190][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.633384][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.652030][ T31] 2 locks held by syz-executor/25344: [ 1622.657485][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.672545][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.690393][ T31] 2 locks held by syz-executor/25350: [ 1622.696935][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.727397][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.760208][ T31] 2 locks held by syz-executor/25357: [ 1622.771998][ T31] #0: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1622.781682][ T31] #1: ffffffff8f5102c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1622.822072][ T31] [ 1622.824465][ T31] ============================================= [ 1622.824465][ T31] [ 1622.857289][ T31] NMI backtrace for cpu 0 [ 1622.857313][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1622.857338][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1622.857351][ T31] Call Trace: [ 1622.857360][ T31] [ 1622.857370][ T31] dump_stack_lvl+0x189/0x250 [ 1622.857404][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1622.857432][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1622.857465][ T31] ? __pfx__printk+0x10/0x10 [ 1622.857501][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1622.857532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1622.857556][ T31] ? _printk+0xcf/0x120 [ 1622.857583][ T31] ? __pfx__printk+0x10/0x10 [ 1622.857608][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1622.857639][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1622.857667][ T31] watchdog+0xfee/0x1030 [ 1622.857698][ T31] ? watchdog+0x1de/0x1030 [ 1622.857733][ T31] kthread+0x70e/0x8a0 [ 1622.857760][ T31] ? __pfx_watchdog+0x10/0x10 [ 1622.857787][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.857813][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1622.857841][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1622.857877][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.857902][ T31] ret_from_fork+0x3f9/0x770 [ 1622.857934][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.857983][ T31] ? __switch_to_asm+0x39/0x70 [ 1622.858003][ T31] ? __switch_to_asm+0x33/0x70 [ 1622.858022][ T31] ? __pfx_kthread+0x10/0x10 [ 1622.858045][ T31] ret_from_fork_asm+0x1a/0x30 [ 1622.858082][ T31] [ 1622.858090][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1623.017180][ C1] NMI backtrace for cpu 1 [ 1623.017199][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1623.017220][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1623.017233][ C1] Workqueue: events_long defense_work_handler [ 1623.017264][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x17/0x2a0 [ 1623.017293][ C1] Code: 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 05 b9 d5 fe 10 <48> 89 44 24 08 83 3d bd 24 03 0e 00 0f 84 9d 01 00 00 65 8b 05 b0 [ 1623.017309][ C1] RSP: 0018:ffffc90000a07b20 EFLAGS: 00000082 [ 1623.017324][ C1] RAX: 47a4793c81822700 RBX: 0000000000000a06 RCX: 47a4793c81822700 [ 1623.017338][ C1] RDX: 0000000000000000 RSI: ffffffff8be28b60 RDI: ffffffff8be28b20 [ 1623.017350][ C1] RBP: ffffc90000a07be8 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be [ 1623.017363][ C1] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: dffffc0000000000 [ 1623.017377][ C1] R13: ffff888033b6eb80 R14: ffffffff99cd7748 R15: 1ffff92000140f6c [ 1623.017391][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1623.017405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1623.017417][ C1] CR2: 00002000003c8030 CR3: 00000000341fe000 CR4: 00000000003526f0 [ 1623.017434][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1623.017445][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1623.017455][ C1] Call Trace: [ 1623.017462][ C1] [ 1623.017473][ C1] trace_hardirqs_on+0x28/0x40 [ 1623.017495][ C1] _raw_spin_unlock_irqrestore+0x85/0x110 [ 1623.017521][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1623.017550][ C1] debug_check_no_obj_freed+0x451/0x470 [ 1623.017579][ C1] ? nf_conntrack_free+0x2e8/0x380 [ 1623.017601][ C1] kfree+0x112/0x440 [ 1623.017625][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1623.017654][ C1] nf_conntrack_free+0x2e8/0x380 [ 1623.017677][ C1] nf_conntrack_in+0xa24/0x1600 [ 1623.017711][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1623.017740][ C1] ? ipt_do_table+0x2a3/0x1640 [ 1623.017762][ C1] ? nf_hook+0x9d/0x380 [ 1623.017785][ C1] ? nf_hook+0x9d/0x380 [ 1623.017806][ C1] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 1623.017822][ C1] ? ipv4_conntrack_local+0x126/0x210 [ 1623.017841][ C1] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 1623.017863][ C1] nf_hook_slow+0xc5/0x220 [ 1623.017885][ C1] nf_hook+0x217/0x380 [ 1623.017909][ C1] ? nf_hook+0x9d/0x380 [ 1623.017931][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1623.017961][ C1] ? __pfx_dst_output+0x10/0x10 [ 1623.017987][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 1623.018004][ C1] __ip_local_out+0x4db/0x600 [ 1623.018026][ C1] ? __pfx_dst_output+0x10/0x10 [ 1623.018052][ C1] ip_local_out+0x26/0x70 [ 1623.018075][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 1623.018104][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1623.018124][ C1] ? nft_masq_eval+0x18/0x490 [ 1623.018143][ C1] ? synproxy_pernet+0x45/0x270 [ 1623.018171][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 1623.018198][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1623.018221][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1623.018245][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1623.018270][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1623.018294][ C1] ? worker_thread+0x8a0/0xda0 [ 1623.018308][ C1] ? kthread+0x70e/0x8a0 [ 1623.018325][ C1] ? ret_from_fork+0x3f9/0x770 [ 1623.018352][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1623.018385][ C1] nft_do_chain+0x409/0x1920 [ 1623.018415][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1623.018458][ C1] nft_do_chain_inet+0x25d/0x340 [ 1623.018482][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1623.018505][ C1] ? ipt_do_table+0x2a3/0x1640 [ 1623.018526][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1623.018545][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1623.018569][ C1] nf_hook_slow+0xc5/0x220 [ 1623.018590][ C1] NF_HOOK+0x206/0x3a0 [ 1623.018610][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1623.018630][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1623.018660][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1623.018676][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1623.018717][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1623.018738][ C1] ? skb_dst+0x4f/0xd0 [ 1623.018756][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1623.018777][ C1] NF_HOOK+0x30c/0x3a0 [ 1623.018796][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1623.018815][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1623.018832][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1623.018849][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1623.018869][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1623.018893][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1623.018910][ C1] __netif_receive_skb+0x143/0x380 [ 1623.018929][ C1] ? process_backlog+0x2d5/0x14f0 [ 1623.018953][ C1] process_backlog+0x60e/0x14f0 [ 1623.018970][ C1] ? __lock_acquire+0xab9/0xd20 [ 1623.019001][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1623.019024][ C1] __napi_poll+0xc7/0x480 [ 1623.019038][ C1] ? net_rx_action+0x46d/0xe30 [ 1623.019057][ C1] net_rx_action+0x707/0xe30 [ 1623.019075][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1623.019107][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1623.019142][ C1] handle_softirqs+0x286/0x870 [ 1623.019170][ C1] ? do_softirq+0xec/0x180 [ 1623.019197][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1623.019226][ C1] ? update_defense_level+0xec/0xd80 [ 1623.019250][ C1] do_softirq+0xec/0x180 [ 1623.019274][ C1] [ 1623.019280][ C1] [ 1623.019287][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1623.019311][ C1] ? __lock_acquire+0xab9/0xd20 [ 1623.019338][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1623.019362][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1623.019387][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1623.019415][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1623.019436][ C1] ? update_defense_level+0xec/0xd80 [ 1623.019459][ C1] update_defense_level+0x8d2/0xd80 [ 1623.019484][ C1] ? update_defense_level+0xec/0xd80 [ 1623.019507][ C1] ? __pfx_update_defense_level+0x10/0x10 [ 1623.019538][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1623.019568][ C1] defense_work_handler+0x2d/0xd0 [ 1623.019591][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1623.019617][ C1] process_scheduled_works+0xae1/0x17b0 [ 1623.019657][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1623.019692][ C1] worker_thread+0x8a0/0xda0 [ 1623.019720][ C1] kthread+0x70e/0x8a0 [ 1623.019740][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1623.019765][ C1] ? __pfx_kthread+0x10/0x10 [ 1623.019785][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1623.019809][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1623.019846][ C1] ? __pfx_kthread+0x10/0x10 [ 1623.019864][ C1] ret_from_fork+0x3f9/0x770 [ 1623.019889][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1623.019914][ C1] ? __switch_to_asm+0x39/0x70 [ 1623.019932][ C1] ? __switch_to_asm+0x33/0x70 [ 1623.019953][ C1] ? __pfx_kthread+0x10/0x10 [ 1623.019972][ C1] ret_from_fork_asm+0x1a/0x30 [ 1623.019997][ C1] [ 1623.882040][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1623.888973][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00082-gfb4d33ab452e #0 PREEMPT(full) [ 1623.900906][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1623.911091][ T31] Call Trace: [ 1623.914412][ T31] [ 1623.917378][ T31] dump_stack_lvl+0x99/0x250 [ 1623.922020][ T31] ? __asan_memcpy+0x40/0x70 [ 1623.926657][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1623.931933][ T31] ? __pfx__printk+0x10/0x10 [ 1623.936672][ T31] panic+0x2db/0x790 [ 1623.940638][ T31] ? __pfx_panic+0x10/0x10 [ 1623.945148][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1623.951030][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1623.956492][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1623.962706][ T31] watchdog+0x102d/0x1030 [ 1623.967086][ T31] ? watchdog+0x1de/0x1030 [ 1623.971559][ T31] kthread+0x70e/0x8a0 [ 1623.975673][ T31] ? __pfx_watchdog+0x10/0x10 [ 1623.980391][ T31] ? __pfx_kthread+0x10/0x10 [ 1623.985110][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1623.990360][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1623.995619][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.000249][ T31] ret_from_fork+0x3f9/0x770 [ 1624.004886][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.010056][ T31] ? __switch_to_asm+0x39/0x70 [ 1624.014869][ T31] ? __switch_to_asm+0x33/0x70 [ 1624.019667][ T31] ? __pfx_kthread+0x10/0x10 [ 1624.024296][ T31] ret_from_fork_asm+0x1a/0x30 [ 1624.029204][ T31] [ 1624.032585][ T31] Kernel Offset: disabled [ 1624.036924][ T31] Rebooting in 86400 seconds..