last executing test programs: 1m21.682098414s ago: executing program 2 (id=4201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 1m21.367353086s ago: executing program 2 (id=4203): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9c}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000004c0)}, {&(0x7f00000005c0)="63659fbf67ada579e90ad963fe7ce0a62fb57bb30cb8168afc6c442ec534e72f633a103e5e39c809bbea456d41e98aea096870ac3dddf8012c4b09452c942c50c5db737a9616010776df4f5a0c8db50bea4d9b", 0x53}, {&(0x7f0000000640)}, {&(0x7f0000001000)="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", 0x30b}], 0x4}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0xa, @dev={0xfe, 0x80, '\x00', 0x24}, 0xab8}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000006c0)="ed4d928de1ad94c9796ef8d9141643bb104c20bd93b0c1558f7a2fde05584aad78b6dee38b9fc462d5c4ba90f038b732af44bf1e80f7c3c7b347b59a680c085d96db543378fe44db214f09eb4a9b8a75eb7f43d7f428d65f3bcfa39fbf7238f367b5e54901004638ef4abd38d09b04278b4cbe225cfa3654e422f495571dde1963425ead2efb56082ccbb5ac7c70fc25187f67e17f", 0x95}, {&(0x7f00000008c0)="55616e647e14f923c0e66e0b20c22a00e02e5b1b7691f8f041e2ea9069a659f9b39cadad8b6d4b5789831325255f4eb3191add843bf88d21da10ae5ac5a2ac233462f470c2a38c66a46bd29863182ddfdeac2ab5d0bf9564bb237f0091278f40354e443640921a7e60d6390d1f76eda2f7bc0e721c28a162d4b43f1ed98117bfa5a8b82d38d6643cfc", 0x89}, {&(0x7f0000000a40)="6c1ace6f0c25cc6f7f47a9db088a19d75082a31db8fbd1f8e833c822d08c663dbdbf249f24e1427bb37a77fd4e27c1d2b39abcaaec09dcf9cb4e572dfb72363d4c694278ecd164e88f8d3d93083a50bd1f3d2652792c6f85c5c5cac81c71eb3b7df52701d4ddd7fe1a223a76f19f6737db00d6737e04bb0318fd492eabf90cb3cf5f890b62e3a620e67689b4d99410cb6aa448495f24b97f163efa3d0cfeabd1c3960be8ce600ec962654ec37ab69a2a40bf858e682656a9364e", 0xba}, {&(0x7f0000000b00)="67b05aa64895ef1e9e0d13554742eb87e260e3a515494e1e77532b2d8c059c89396f6c8270102d790f1ff930edb244bc8f20b57c", 0x34}, {&(0x7f0000003040)="bde8ff6f3c7cfaf158fb69f12b2de96d040d893e5b48dfdf028c3badaab0ca592f5440344f622f7f781fe087b40f4931144bc4320f654ae1b4a38047633518e4e2f10f0e09677a1b2fcaed0dbed2f21caf6a41d93ab549e61ddc5ce3a0fc1734bc5fbe7cf87a0cdb906c3241bcda488978400b2280d15146d3e03620dbf8c287ef069ea27234adeed001dba5bfc4db058366921f6af169bede12cbb1dd37941c5c8a1a1b668689ca2008cbf9ebef0bc3f666e6407eb206d864c92596c7b15a1dd2d21a3374a1", 0xc6}, {&(0x7f0000003140)="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", 0xef0}, {&(0x7f0000004140)="c825e6307753c61f8de6eff27e8845c3b67c9cc42f0796f5d2ee505f280f6e188fdf866479d3762b48c63dca68687c205c8f60cb94947339251e576f7da14510c62b9b7b0c12c1e3100086f4613ad4b0f039841bb1a4d8176736d8164f86f22b461dbefe2c5f2b9498357fbc5082e458177b9be0a5458bb2103f6635426721473164c7f95a1706c878c2112f1b8ab7c7fef0f5771225573033d91af3f7d92533208eaec466c1c7b03ae57738334a0d8d10b3932f3964d164c9348b3f2b8c48b8d3e329a13e14e6512058ddbca3fcfe68e2e6d15ce139ad36a3ab5a9cf613b6e6c7ebf2b53168f1cdddf2492b18fba12ee023fb7b5d754acbb3c706d4b3ef226f3559f7ef5e47a7cb8ebefa6c27dc3d5403218b1b05d261b5d30139f15e72860b88d945f6fc2da69eec72f0fb4644da7b24e371e95965bbfba45693a243652e5f7e8e3b27bb9cd7831f15ea293cfc4f1472da6c862517428115279a049d742fcc21cd8f78ccb74257d9983952d7cec88fb4bca934088c8de17efa95441a4849523202beb0b5c325e2aa432f5321f312d67bb3f007b6b44ff60a684f19abefb3fc3ab26f3103e3caee48ac7b201e5a114b138e6b18628eb5cb65498906ce50edccc8634d050f8b98ecbc63c917748b4413f20a9e47e032e67ad76765c20c49098c9b0f53b5f09b4386417cd5fd34f192059a858a6812405446245cba7b0d6cfac62ea51901d6df9e11778bef1b2caaf4defc1009ab5da93f1de4a47caa6ca60d718d28a00c4dbce66546dd42c15c73cbb100d2c5966411b2fdc45405f640761102cdc60655af92ddf14f062f8e8e2305b9e8e251f9b40ffe9c206d070ef7911b1839590be4d9eb36d0670519188ce337e649be91be7f63ad15462af8626145e7586f3a2123087fb7d6a7bbc5fead9669a6e292ce524428fc4a0001b3adf56703d902162efd19779760f7915cb0547fa0a435bece20d5dbfb312421c3caa711865769d18d98778d224d00e406da89b2a905486443f24b9b3da92c22980b7e96d27678b904f85ee7fb5f3de997814cc310077c918665da47cc765f5c70cdd65a25b294494af029daf08f2b9b95edc61bfa0b79c1d55266a743684503cb1aa87462c7c226b147bf44fb6075c1611fa66b0eef585e858146faf38910a07939d5125a939df387f6ff55de8ff00d801ef1e1a5f225c84164cbfa5e90b956dae37eb0923b13e0d1b0405bda8d5a1ada2fea35e51f39c47411b73ba10ad1a0f6778a13eebfbf8eb58eec26029a8736253ea63bc00b3be0237b88c47a5c2c3a5d0864dcf5e8351eba8aef1bab1b60eb2bf0a9447b76b46f9d54155cf8ac879296fa25834cc171c4379ad81833d5ca5d739a996fa13a1413069624056fa04896282022d205db070614f8b6707de8ed5b76bafe916d4e2969c1baacaede05c78d03437000bf4bb9ecc28949a5351423db7c8f28e7a63841ff61ac7fdea556d9b5a1633eb3e7c26ec7c7e5defe9400cb0f1a3fa6ec8854d2606d927aa6bed3c7db836d69b0f8aafeac13751d89803506e69dae2a6717f518285b9936549c02ecab898d8aeca8d3973fca18436a0bd51ca871078d728f8f4b1c8c2f598078bf32d7c546d5f7a77248d9d1c2cd9da0e7e8146152eb56c5ef928425199f9e24c6ef8d2c65b5b83d8ed24136d30d66b6ca625cc9ec2c6995decb87176e99eeb8cc8967f92281c55db5cfbf54763f4c2d60b1a0aa23dd5c69957f0383b7fd862d79ffc2c0d4df80c8107535370e16dcdc165c0e94d5b68b78e76ed5595921b2bb7ee9a0086b22026a6f655867db32440ed597243e57c310a4f50a870c976545d75a35e6a623a0af3f0f0acf98d93aa22ca63adf8f2a15e7b82f26b1ba12801ca8c022631a98d57963010ed759cc797506fcbc5f5cd0317ab7743b8512eebde900e09176b47408501aab3e6319847327e3c89e81994fa884f722956c9230bf87d251d8e7c3197cf03a51b6fd634c7354e0ee8094f76cb2e4e7ffd0cd5b18bcc027b188624d366545e963e2197a246f7e2e15d46fac1e475aaa635714a602cd6bf770203d3f489cbfa4a8bf9c3757ca747c13e66496e45767e5977a44d10bb1e057fe00a8183537cc1c292335916fdd0021b5b025016610a08c03f199b0c0d391380851ba17f9b2ac73ae0528604875cdcd1b6a1490b2b09e781ede02ac7d372bf196672d1f63db0fd215ba4122e5af991ba1b7a981409342e953231066bddea942743c63ffb1fd1ac3c0353baa7083fe04951c991e192943c78d6bcf92067b587bce89c0a3cdd1f1c57161fe0f5c94f3fd24bb0d05dd5cae895baba0109862197dbc7d3fe4d803904765e95d52702f54879e60f3276a0604450db22390ddf23227a8c90401601caa8fe5ace44378a13df52d972510789e7c3b028b3db2b1790b801ac05dfd370af02e42a3212cea6cd94113189144cdbb2b4ef0c54bcc90d74333afeaacab6cdcfed92d714c069ea851c83f1362fb038cfdbbaead494e300e02c61043dc8bb61e4e2f5f45276dbe26895b9b651ba64362478b3e351c97f9372e995783633712780d5348de3278ecc9648ba3361250fcc045a452183ef8206bdd131a63787e60c05b525f895a1f7d99bac09f83d139b63d760231968f95cc223f7dee362404401b94b22ce5d3abc44a8a2e12f2c71866de75e6cff96e9575a16b4d330b6230a68c9bbe932b43794a3a8ebfb79c0d6afabfbcc06e17a370d28cd714aa027b8bfde3690653e40bf00a53f92fe40726d532dad31fcb6bbed30062a21e86a44c9a19c8b8277a65a4c126d85cd41e9b59ada6bc0112c4af3552ec713f2a1afbdcabc0bdf67d04ee289840e5b831b443e1185d51c3feaafbcc64c35fcf0250a16099604975609ec8286ebdaf3c179a80effbd211c9b28673eb293a291df97bd8a464420207f04bdb6c74616eb44180bb1a488f795da4ce8caf3d29cc20638c4b4f4888c8dd6ec887aaaed6208c92c34065de8e014d5e43f8391af20ed2c312599acaeb63b124075af6d80b99f05ae703c6d7b4de94b2912e9250e2ef3c209640112af375b18ba1111b53450ebd0c05dd8ca2c3e876efe2a3920057f37d03fb1b9cbe6814837cf6aac214f4d1906d30442094b540aaf6722376126c62cec7b8a5abf3a624a04580c97a1a68f45fc6da93a92af6c75114d21a753d243f5619515e8032b0360367fb2101a58140f9dd8a0d2246b1c502032f287e068b720d60fbb844423407e1a9aa8f3e45060155fd9a76b2d938dd8578ecdc7bd9e7c82f56d8f87d2605c2400b55a8a0d596136b31120d1c721f6e51f7b697a8fd4ca5a1632b2c6687248e538a151a934ee67b946077ef4752d485848b1b11d6dbbcd9e79dd6a0cb1bfddc30ada36b65f8417b6a6d282effde2d32efef5924f1f00f393248de4b3ad94fc232dc91c3a67e1a477bdf57a8910eeb381a03a4df093cbf2322d8707d5bed631f3ad5783cc30f9a12b41c86cd5452fcde16b413853f8e36334f7fa3554860b049f2d6dc45ce3b5df690e1ba80bd11d21c0a6f3eee5fefbcd34193d13cc450b69286e53f1693c077b2fe0eb55fc97af16df6717e9f92d4315954a4df059920291bcc56e73b19885a84a1f268218e771d0826ac1469633fa7a81fdba1e710cba1f004ffdd909da2b2449d4ef232a523e206d504ba8afa8c47d53d852ceeb8dd2f15eb56e5df2fe8e304d655a60d45c4d8e78cfe85e27e56adb67ee402d789a89c4ae523544380938af8f1811dc59b9e2dc68fb7208e95a0225e75e646cd9242e034233bcbc598535ec47ab203f893ca52ac6700694001d04b3bab082ba6f119d7c8a6e28b4f8ee05d4cb6e518d55ce9eeb07d7eceb257b51d6dd6c67620983fb6ad021e0e095d4b27268e37826a2cfd3f44fc84056f96b12b99162622ccabb18783a8ac805a41a5fe7ae047705ede88382c816889d217ebb3f5b6fa29511e318f75eaed1c41b386a6c2c685e8ff9a4f60d4123e7a5e4d85ea294b5a971315349cbd4da6768f84cb34076ff96f4b110693f304d71953cec1e1095deead7264565ae66dd126bc2f7ccc40b2c8934f356aa232191b7e64e5ba5bf064d20eeb5079cbba90378ec427855803b3195bb4b1c18521c2d2ffcf1d675cba4fc9799beca0616dd2e45fc0642bb48d8f87f3623fb2b0322cd9d273c3e4f8ff27a6df6a7fb758a6367d1afc8fe84ce09b22f773f9c59f5c54c2f4612a4ab944e98c86e3f159c61f5d21e934aa983188dbfef475fec672a69d5b4200f96d845a6e6c83bd437bc071208d47aceeb0f9a6796dcfb3da96e9a1874d8c8a9601c8205250c5cc4b41a77301faa5", 0xc00}], 0x7, &(0x7f0000005140)=[@dstopts={{0x18, 0x29, 0x37, {0xda373314d31b919d}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x58, 0x29, 0x37, {0x0, 0x7, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @ra, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x88}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000005340)="5247d15247d3de2f043371a6a391e28e5e2c8f8bfafbe301e5845cd82bba6cec775e28a344dbc826cac696b52cebcb5ae50f6ba8a280c5f899817e5d79f7", 0x3e}, {&(0x7f0000000340)="97f9fa790482fd4ceff6b0950cf3e31c6cbe7a", 0x13}, {&(0x7f00000053c0)="0f7e406715548732b4058b4443eea2f938e437919c8370c06a5ae953d9ff6340770e1101a4fa8d0a46c4e08a3524bfd3263db56ed28a09e48ca18ee4c04a7d22c290ae7dda9350811fb854065da6009e0f44dbe47ec24e43054aeb1978d27305bb59c4ce8c8a0baaad9ba3dc2b426fccbbf69ff3610c669e90bfee37ec091f64580c39052d624d49d981191bccf133a6d761ffa06bb1b1ed0df8fca45613b5c781b7c3ddad4de716512a991509f69a6b6f69bba06220f6e8fdd6db8692d5980322ebade2de87ce64b43a7597334c99abbe9accc370b110d1eb65669d1bbe40953d17b334ddb934c68e7d87eaa4e1e0faf1f8ae24ba42529e85b2b62df63f8753d8ab0dee5c0e84d7e05f0b2f2d3ecb6046ad487e569a268f481aa9673fb250f06af393a0eeca097da73adc81387c477821f4b2ceea6e5451049088adcb48cb2f77c54e097fd15ad7d857152d1fe02b10ccbc5c0b072501ac7f5194562e191352a371568f80c36a280cc35aa214139d24e1a8b06f36f0b2eecd961f00280e45b7c318e6cb4f3e486a4b5fe3ad6e88f18b9ad76f5eecdb279c55d40c4451af163b3e7efd287dfef56dcbbe62c213f950fb84f7a4a10639ab388597ac66e4fc01c83a17fbc97117c4ac1c2401970b548e67db669eed780df421ab858cbc6b127b9ddf2f416f5553406ffd7af16198fec0261a9af0deee49a6ab24b720cbc66d08aac187addb10869c37adf15b59adbc3720d5560886e6fac370e99e5799ea672e367e1cc9917a852ec7bd0e035e9abbf1673deae0c3ab22160f72388c8eb6ac31b4d6e3112c7d2384eb4afe098c2fc995ba25285a5afd62eec796527a95af3ebd3b8e0d2372608e57b6b10a95d844d0124c37da02f313f084d583f51733a177541433f2a9546ac3fbf9b2ad215525e7e16bf47886b8565822d50bda44a3f7ebaab41b485449f23d5c4654a9da69eb514d268019627bebcb42fab7b6d8da9487ff0c5548c5312c12e358d32973d7a853c8bcbfd90b5dd5d8b5556b0a5beda12ab9e773146bcc50c657cea3c5a059ae9eb953ffdfd0ac2106414e68f91f47744ec541dddd779e2bd65ff7d6bdcc29c161d877147c2810fb066e990d8878ed2e45bf590c8339e60db55f77aa5e368be68313ecd14adf3a438b56192d24ab1e1ddb512f7ef01fbd7cdfe8a58cf923307096a622ac8507cc6ecfc10a9d002b00ccb71c6d663217b769813acf27a182a8d37a9e03e8d78c7a0c871ea0d05a72d48b95c17c40cb7af0bd1c6e2b0f5f7750b0e9ef7509e5c194c3be15ff893a5bed9df11759304382068ab130fa2d2107648323fc777178535c6ef4e9db97e9000883fea4f097d6a9e23e56f44ebd1258eced32abe0b405b8fb21df00b0eff32a9ce5ee0a8bd4a5a55a9b1e4201b44fb8ca7693b653bee27358a77762aca2af0af208c4daf7d1fc084dab16730c0dcabc3241c4494939817f7ed7d70ee58e8224b026c22a128f10459927c0b38bbe0e208342bdac9ac0aa71b1f402d70afd371ba29e6221f31c12ba358e83fb54941e85441ddd016bc96fce0d07238a0d5cadc4e99d784167aa5a6017520a066efbf859d8bc03d8f2c36eb8feb12cf2236e7e3b6c1002b11d20b26807ff3a4fdcaed4b80d907dfcfe67208f2513d42ce1649ced2dfce19dc6581b113eb747aa5ffe93c78bb632ac3c818b9d80697878c74da7b6b6a3405e8b8494eab4eac6aa9be62cc144d8964bdccb9ac9bcd3c22b7844d545fa644246ded35e5a22bf1cd8b35e11484f84c759ff045b5efbb3bef44ddbf9f2afb62048d29b132c659503bdb7557d19f54456ea5a113478f319ed102bc3e5a551b940d09f92ffb2ac90ba30e20e0259cd04ee7ee9ec9a6d1b71dd151f961afcc1aefba420af2b77c1774bd17ad09d91c94157b520d3ecbfdc3bcfd1634eb365f992e21fde48410dfae4661a61cb29d7864b76ef55e4d26a5c1ec1a413f774e6881e7c5de475fd55c6b310a39d82a50921ef24ee826700ecab9255547c005af3d6e9e1ac7bef86de0c05fc79b8db87cd5dc4a3034a4c60e7800d7852486029939442d2a0126f99420701a3489f68cf508a3141444762110ff63b09667af659014dda99138ba7468b86d842ee3ad7bc25f6e353b750c394f21ee1d51b62eebafee6419b2189428662e8ace3b9216fe25d76d3b397b94bef6f9b597fdf55a056859cf4e8478230bb17b6490e3cce3d1cd29383642185a54bfbd38b906b1fd6389e3fbb0e7a538e91f5093ab4dec96e4ee47255644e630322841e38daf8732ada90998e1b4f871ddb3a6af2afdcdf2e0ae6a6bedc2c5960c8bfe4d2f34ba9e4efdafd4875897f662a6b921cd24c622217f82846ca171d8fe6ae49c98b1ba0d59d47a88311170b9522357b2f8eaae99a859f10b3ea4c76ebbe94e52f8f09d6669f706bd6050bada4ac783a8a14e74e41ba0250971bc464812797f333f4c7b71da43c608ce25f65f9cb180e318be5154eaf6691cad7987aac376c9f5a042352d7c4e922d7801a106bd5d3aa668c3519f6b546b419edd7a214e007cb6124aa06c9269900b6323e1c4e35a45a61031bc682629a5e333fc5131dfa77eb79748681a4831637d5ca42f4e3ff6dbaef6443ca301e882207140e7fafed8da8c72e01bac361fe9b939d37ea772f871922f6914ef044d0d4f0797561bc95cf545803da9fc5d35c9fe78e7cbe5812744f9f02d55aab3dbcdeecc75e7619d346dd6f31f2e27c1fd9a624ebeac64906a726959a05eb3e666788ff3932ebf754fe704a01f1f89d007f32f2d3c994b7f8b8794c49f1d4ff3e26bce1c55bf0800f0997fb2e28dfc2274320ccf5ff3a61d6ee4b03d791495c27c52c847b65c765e676ab648607e67041854f72775387018b43719bd4bdffd9a422aec6dbcb66715255e123b8d4964389498887b9ff463c56e7086faac413d61ab0ca42fb79a12d5d2ce064c87e111f83af75f846cb6d59a980502d68af5d3dca79f98a8d1a0689d61e4f900bc631842f05cabe289e500611d5398c8150719d20d7d14e2b5782dae7cae199014b31a476e1c4bd38fba61cd34c186294d118bb9866e0030813210a53e6ffe00b22ac934a7d77ed671bed080fdd80914efb603161922f0b734feee9cd25e0008d0e30c6ce00f5a44fc14fc632bff12027e01f0383a63d0e1e2c295c77dd8a6c98f2d5c4d93b6f316b44c11aeca1256a48904af6ba5089ebe4138e201020b7d61f7866e7a3cf493d9c86fae99a61a6390e6fa26b0f52393abeed3e4696707201a5aa249f4a0ff8b3d1896f12e98de0f50a06165045dae1a44c1e806ed34a1bfd3761e2b7127a3dada160736c466b5e6b4adecdc186147a4c91c177a4c648db5551ba872227ec517aa59d85db5d8084dbc525bce7cae31eb795cbb3310ddd375e36881a9736218e048c48a5b77e412ce5b5c7cd943fd41404824b19a094bec58de915769cd2cf3baa46fcf721780ed66423d653ca1b6d848cfbe6cbda95b8a5af9309bec12ffc25cc425dc61e71e747d691dbfe7596a3f06e19b17de4958617f4fbc6a5f25f228ecc8add843cd1c67d8d42f29e1380b828378fe25e9560c911575c2b0d6ad0617574d5ab5c95c836b652dc0ab6cd4e2ccf826f887e4fe80baca72a060ca2eb41440d0453a536ff0fbdbcf37aaa62c507f1be0fc10a7e1c81890e1de9c83e9466a7d7a4867f575d1e4ef28f81bd0a7d3effb81269c65ae3f1d0e472304e0f46d687f1a019c303e738e4af1350942c45d5b32d450b0ed8313ea33cb05b694631536ad8b7dc070a18164de1224a5e34480163897d2e7603e45ea5f563c7e75044b4cd5bcfefa5c221e5ec2d3d47524016cb5ac8c54d86cd3fc79ee22b555b82d0e52bac2a4cecddafce44260005a6df98014a5124c438ade952814922c37f75565a60286ac0cd5130aee9acc613823d59402696e0ace7d822d1a688afee85e990f8a58f527dea6e72e15b5f52bc5d6efcff6ce8c3c49429baa93743600dd085cd43d01f43be4fb00fd92cd3874a0a9049285063392db01c14897c55afc83e849e34385d03d1dcf62041ebd29f68e0838e1d518bea33a78f7815f56d6af66861d9c67c9c3f0d5360bb892ade54149c5d61801046dfde5f59745a39895a37efdf3c3e8984b7b51ef8661134ae42c6acaf2113f8b7f6384bda5434138442040271af86ae05eaf19abc6f43c9efd331886d65be015e1c47946b0afc3a3ee8c569792d6746ff664b29e34dc3a36407e83c2666ef9dc178dd7dfabae62c7bae1b9cdc002605d799c97cb6ef15383611ef57be496a5ee37483616210f53cd2c13cb0540c95eb6d93d7cd5fe6f835ca5e02b9a1561584a1761e577f261791ef68117e8c6a22ccaf468ae20610017fc81f5f826628beb2ead0c1a2e43726cd279a2c3d6ab2d7f5db41be6a81e29117bf484ddbbf3cc66bc83f61673cbf319847fdadd3b1e50392273646c86fc62e67d17721c3b78da948eb25bd5c3b6c683155e560b7879fa68d149984155e6931162c04049ab5e62efc9846c1343a79ef2052980b044015c8ea9c3d7690a9f9a226a306000e7fb0af3ec06fb04b7ead3f273c202240cf44edb0a177e04a7ba3efac4e8e7df1af4fe0958c0a75235a22f00054bf712f6e7ad0c7549e7fe7961008c84ec50d4fe5dd64b083050fcd6115940b9cfef8409b7317c52dd319468247fc237a19147cc620665db0ba19a50c2785db6020ba85898782c2aeed62fb064d6a3e91f40ef0178eb574f0747e38cb59914aa18c9fd4d8c189e61caa9e12d39320d2943b1d6996aad96dd58728968c52891ac6adce376cb7e256be452ad0d91e1b90eb045b1bcfb051ec56ebcb6f8218fd72c7de48a690fb5ec88caa746e6b14983cb89ff0f100b0ef09c6424aa02ae8e687c6f5428838e91f8bff6a22b8547b65c1c0bb788f935e6754d4cfe40608beef0f91996f61e8462c4c7ecdc2110708d71e7c51bc7fa24f54339080d639bed6dd7806857e5c2dedd8644d41286d8a6c569f421b6b2050817288be8de95a3cca248d0b53c87eff6b8b6a9b74a0cb3ca4df84dfcd8666a65a7575e2746785517f823a0c3f838ea92e6665c4fbe3fdf2d0cae9e2485de0eb7924433a8c6a5db6ed7ae5ecac91ebf03e938c0dbaf13527e191c85b91e35e1e431f6c5aa00b0022c9d0f394d0eb71762b954600ad54887d85885479c967708d823b83ccdc9ca9f6f1af0af9fc83e786f27c0132e1cdd1808498c6912660aecf4ead48994d4d59a592e2bfd7e4dc5aa3d8a5ca4a85accc83bbffa5cf13d102c4ff55e7cb61d15f778514acbf6d8e297497f18e8b1a9754cc3625c087b25c26ef928f18713c2afd7e6f392c04dd08431e48dd69cd149634a3efec0a7d0b1f33435bea70ab0f7662e7798ca9374e1fac36186b0ec5351d9254dff1c7930b61482fafaa4cd94bbf1e797bcc1ba5010e56aa930a17ecc2bee328402cd0c9893033dd89c3f370391f3e1fe3d01fa85477cb5abc4179e1b974006dbeb6c9abfafc76c955ee16911d87524abcec2dc654d17ed135084d3f74e68e481eec4a0ca84db192dd8946011a5260af0260e974334ef1f70f44ea702fd7a3", 0xf80}, {&(0x7f0000000980)="4c64b0ddb30a9d6c3fdeaa3b255143ef8260036d4a8e5bfb291a9b5dc627519a486c6181b0a6ffc79a97c2fc7cb906b9335647e65d20b5ee113499", 0x3b}, {&(0x7f00000063c0)="7682123a1474c84ccc44ff06cb14b1ca914cc11c7379fce254bf8a8b32e9c3f72941cbfa4dba78d846aaebc2a7f9370eca59f9899036f7dff9434e41e41744317aeb4332d1133a6a1c537f76da8c8d9171461ced8ff3ded809c7742766e6407abcd92bcb368e187c8fc49069fe3782e9bdb9f947e666c59f9ac44628a6fb99bfa7614f90b90ed8c0f42a21f0c99f289c2d9d10fc34020e5057c7b52947280a9f05913a1300", 0xa5}], 0x5, &(0x7f0000006500)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x4}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x30}}], 0x4, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0, @ANYBLOB="c1015c005da91a0f8be5a3e11136b0c224ff05cf7ce6178a100d0230640fdbc12a39c8b13bfc6963399d208223ed5d13c52a39778cfe312d4ae9fcffe52cb9d56d40423516cb7368a2aae0514a821c438f13de6dcdfa50e42fcbe25a35d8fd40d18b2e7a78b776c8a71471da83fe428c1fffcf15b72468663334c65d6fb3235000a40db251dfd6408bbc5bf0a127c90091b483505ab59227858206deadae4aa3c6e47351f1d79123705f5ec97b093fb84263ecf3f511bae28b979a60990df108e0b52938a159c9c2c81f3fbaef2b1d5240a388083c883f8421c1c0a7bc73abf981da2d4065ed1638c72873789600"/248], 0x64) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000000703000000000000000000000000000900010073797a31"], 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006480)={0xfd85, 0x0, 0x7, 0x801}, 0x14}}, 0x0) 1m18.021183316s ago: executing program 2 (id=4218): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x4000084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x4000084) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x128) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7b}]}) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7b}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r4, 0x7, 0xaf1, 0x10}) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0x7fff, 0xffffffff, &(0x7f0000000300)=0x1}) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee3, &(0x7f00000003c0)=@attr_other={0x0, 0x7fff, 0xffffffff, &(0x7f0000000300)=0x1}) ioctl$RTC_IRQP_READ(r8, 0x8008700b, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x38c3000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x38c3000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1m17.690137918s ago: executing program 2 (id=4220): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m17.18834691s ago: executing program 2 (id=4222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xa0, 0x82}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="16000000246837f7", 0x8}], 0x1) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x31, 0x21, {0x21, 0x1, "832cf0d0c96cbccd855e4191044fed5e4c697cd613d48135d18274b4032679"}}, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4b, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0x79, "", {{{0x9, 0x5, 0x1, 0x2, 0x38, 0x3, 0x4, 0x9}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x5, 0xf7, 0x10, 0x2}, 0x117, &(0x7f0000000180)={0x5, 0xf, 0x117, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0x5, 0x8, 0x4, 0x4}, @generic={0xd8, 0x10, 0x3, "56a367a35f888504e61499ddce3a661ec14443ce162c8afc38bd91c72688279f9e22034010d61e9f1f1c95711ab025042051b0d9dc284955527b79803b45c86ab7d1f18d2f1db9ceb97949f3f6f34e608c742e25a2d5478523f1976f2dbafbddc4a32b6a38ebd56870b5870ddc5cbb971d85a71667bede37ec9ea23247cfb584a9cdce8582a3918fac441b6fbe3ec3e55dfb9df5d3a33bf7ed8b730ef2683b2c6fb176149cfdaa9825723fa2919e0fa449a08f3c3c6647b1b7cb5bbea2f758bd137f4eca77f59c70fc059e2f3e36b9925fab03408b"}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0xf, 0x8, [0xf, 0xff00c0, 0x30]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x38, "bd6b68216941bac1dc141ca5643b6521"}]}, 0x9, [{0x82, &(0x7f00000006c0)=ANY=[@ANYBLOB="820320b37fbade4c1030ec9daeb38abfe7b3f0fca25c1e4627047b9d069d224ce7068171b0a197e6f0e133a49f3ce137aa2c0ed664ebd038e71eb19e814fe554d0da0159f04478aabb6d2bd75b565c64b8c9dc44afea0c269ba3ffbcc2e9acea2bef81b32b3abb87c8225fe1ba9c344f7095988885512d796c3813470e269f43c8db6f79d40f5c914b722f50fa7f1a3269fccda9980724fc53b003c30733c120ef07c2cd7b7412d027f09e"]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x443}}, {0x68, &(0x7f0000000380)=@string={0x68, 0x3, "1080a8e90b9071e4e8296585df4508bdc0dd4cad0a19449f86b9c2059902eb1cbbb2fb0782516098c2224ac9bfef7db5305d2c7a9fa74a4be38a586a3bb897fcd2ba4fe3899f0cd253a6b6a15c48f5215e8d50631784a2da5b650e805b92dfcfa4f63e8f47b9"}}, {0x3d, &(0x7f0000000400)=@string={0x3d, 0x3, "b1b7673ae222ee7bcf0f9293cfb6d2cfa747a1ff720667e8b5094fa3f6476fc12a36dcbb6d488c8e87de0b623d70cd05c03ac111e7694189ef478e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0a}}, {0xa0, &(0x7f0000000480)=@string={0xa0, 0x3, "c05899d29ca961ff0da7d93d1f71e995e0b01ff910600d1bd51d50dc7ba80d3d94f22599026686a6d6e8c7267aba9d775a0c3a81e5b4047bbe16ad4146106374136be00da943c5e89af3c3b9341dff7a947d762dda41a9e2df3124eeb69627bf51c96ea9d187cb97cdaffb8d668eabd22fadabd34ccad531c4d7c6d17ab650f0da268d57854e9659bc282ba924e1d440169c51e37055cafbfcd9c83b4673"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x424}}]}) recvmmsg(r2, 0x0, 0x0, 0x2002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1m14.954323505s ago: executing program 2 (id=4231): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) 59.934016465s ago: executing program 32 (id=4231): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) 5.849452358s ago: executing program 4 (id=4604): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.724032213s ago: executing program 4 (id=4605): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r4, r3, 0x0, 0x7ffffffd) 5.070756662s ago: executing program 1 (id=4611): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xb) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x4}], 0x2, 0x60, 0x0) 4.750816574s ago: executing program 1 (id=4613): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0xf0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xac, 0x1, [@m_simple={0x7c, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r1}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.727845619s ago: executing program 1 (id=4615): r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0x10, &(0x7f0000000300)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "c04e5508a95b0aeb"}, 0x10}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "da35c136c3ff219f", "13bdf7744011ae73f8839d454c9b0d6c", "425892ce", "f349060c61422ccd"}, 0x28) ptrace(0x10, 0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xff, 'xfrm0\x00', 'tunl0\x00', {}, {}, 0x2e, 0x0, 0x20}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc7, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x18c40, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000640)={0x0}) r5 = socket$kcm(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000001c0)=0x8, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 3.722326165s ago: executing program 4 (id=4616): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x25a, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/0\x88r\xc1h\xc1\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 3.523527625s ago: executing program 4 (id=4618): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/225, 0xe1}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000001c0)=""/58, 0x3a}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) close(0x3) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0xb4, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x54}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7927}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff6}, @NL80211_ATTR_IE={0x79, 0x2a, [@dsss={0x3, 0x1, 0xa9}, @preq={0x82, 0x36, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xef, 0x1, 0x7, @broadcast, 0x5, @value, 0x6, 0x8, 0x2, [{{0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_b}]}}, @rann={0x7e, 0x15, {{0x1, 0x39}, 0x81, 0x2, @device_b, 0x9, 0x9521, 0x4}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb6}, @peer_mgmt={0x75, 0x8, {0x0, 0x5, @val=0xffff, @val=0x5, @void}}, @chsw_timing={0x68, 0x4, {0x81, 0x6}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x4040004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) 3.292093233s ago: executing program 0 (id=4621): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.247207887s ago: executing program 0 (id=4622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xb) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x4}], 0x2, 0x60, 0x0) 3.192917984s ago: executing program 0 (id=4623): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) getpid() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 3.031184627s ago: executing program 3 (id=4624): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002e80)=@delchain={0xf0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xbc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xac, 0x1, [@m_simple={0x7c, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r1}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x400000d, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.604291837s ago: executing program 4 (id=4625): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000400)={0x10000, 0x8, 0x3, 0x5, 0x100, 0xdbec103}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'c'}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc8}}, 0x0) r8 = accept4$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x80000) getsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="301b000000000000", @ANYRES32=0x0, @ANYBLOB="000000001900000008001c00", @ANYRES32, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x30}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r10, 0x0) 2.603811182s ago: executing program 0 (id=4626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r4, r3, 0x0, 0x7ffffffd) 1.795918874s ago: executing program 3 (id=4627): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x25a, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/0\x88r\xc1h\xc1\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 1.780536323s ago: executing program 1 (id=4628): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)}], 0x1) 1.707469095s ago: executing program 3 (id=4629): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.427953137s ago: executing program 1 (id=4630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, 0x0, 0x20000000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 1.427744753s ago: executing program 3 (id=4631): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.304476891s ago: executing program 3 (id=4632): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.107501344s ago: executing program 3 (id=4633): socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7f}, &(0x7f0000000280)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001000400000000000000ffffffff"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 1.091822887s ago: executing program 0 (id=4634): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$audion(0x0, 0xfffffffd, 0x80200) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x3d, 0x1, 0x1, 0x28f1}, {0x2}, {0x6}]}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc081) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000740)) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x1cb) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 704.717445ms ago: executing program 4 (id=4635): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/225, 0xe1}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000001c0)=""/58, 0x3a}], 0xa}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) close(0x3) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r4}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0xb4, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x54}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7927}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff6}, @NL80211_ATTR_IE={0x79, 0x2a, [@dsss={0x3, 0x1, 0xa9}, @preq={0x82, 0x36, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0xef, 0x1, 0x7, @broadcast, 0x5, @value, 0x6, 0x8, 0x2, [{{0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_b}]}}, @rann={0x7e, 0x15, {{0x1, 0x39}, 0x81, 0x2, @device_b, 0x9, 0x9521, 0x4}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xb6}, @peer_mgmt={0x75, 0x8, {0x0, 0x5, @val=0xffff, @val=0x5, @void}}, @chsw_timing={0x68, 0x4, {0x81, 0x6}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x4040004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) 512.057388ms ago: executing program 1 (id=4636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0xf2d0, 0x10100, 0x0, 0x392}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x1000}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4637): r0 = socket$unix(0x1, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xe2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x3, "7981b27ccde80dc8802bcb5c171a38daed39ec0ad31b841b130c606cecd516cc", 0x41414270}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) close(r0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000100)={@broadcast, @loopback, 0x0, "61fe85afad695dc2b260393f650abd115ad732155e875c1d69a87ed9a6cd687c", 0x101, 0x10, 0x5, 0x4}, 0x3c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) syz_usb_connect(0x5, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c520000000109022f0001000000000904000000ef040100052406000105240000000d240f0100518e34d2be"], 0x0) kernel console output (not intermixed with test programs): w high-speed USB device number 61 using dummy_hcd [ 1201.125153][T18331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1201.143911][T18331] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1201.153242][T18331] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1201.173559][T18331] usb 4-1: Product: syz [ 1201.192043][T18331] usb 4-1: Manufacturer: syz [ 1201.232327][T18331] cdc_wdm 4-1:1.0: skipping garbage [ 1201.250174][T18331] cdc_wdm 4-1:1.0: skipping garbage [ 1201.270640][T18331] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1201.276027][T11490] Bluetooth: hci3: command 0x0406 tx timeout [ 1201.280694][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1201.292845][T14743] usb 5-1: Using ep0 maxpacket: 8 [ 1201.302813][T18331] cdc_wdm 4-1:1.0: Unknown control protocol [ 1201.307982][T14743] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 1201.329210][T14743] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1201.353512][T20440] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1201.363674][T14743] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1201.389196][T14743] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1201.403070][T14743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.431284][T14743] usb 5-1: Product: syz [ 1201.439732][T20440] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1201.451207][T14743] usb 5-1: Manufacturer: à   [ 1201.457495][T14743] usb 5-1: SerialNumber: syz [ 1201.469362][T14743] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1201.480860][T14743] usb 5-1: no configuration chosen from 1 choice [ 1201.917060][T18329] usb 5-1: USB disconnect, device number 61 [ 1202.383117][T20452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1202.395352][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1202.410004][T20452] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3956'. [ 1202.456349][T14743] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1202.485885][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1202.665347][T18329] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1202.680915][T14743] usb 5-1: no configurations [ 1202.732614][T14743] usb 5-1: can't read configurations, error -22 [ 1202.838574][T18329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1202.848186][T18329] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1202.858181][T18329] usb 3-1: config 1 has no interface number 1 [ 1202.864350][T18329] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1202.905356][T14743] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1202.988106][T18329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1203.001129][T18329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.021184][T18329] usb 3-1: Product: syz [ 1203.028689][T18329] usb 3-1: Manufacturer: syz [ 1203.034687][T18329] usb 3-1: SerialNumber: syz [ 1203.076592][T14743] usb 5-1: no configurations [ 1203.081224][T14743] usb 5-1: can't read configurations, error -22 [ 1203.105913][T14743] usb usb5-port1: attempt power cycle [ 1203.117038][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 1203.117059][T11490] Bluetooth: hci5: command 0x0406 tx timeout [ 1203.296244][T20453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.340142][T18329] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 1203.355461][T18329] usb 3-1: found format II with max.bitrate = 26774, frame size=2 [ 1203.356175][T11490] Bluetooth: hci3: command 0x0406 tx timeout [ 1203.363458][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1203.396550][T18329] usb 3-1: failed to enable PITCH for EP 0x82 [ 1203.429253][T18329] usb 3-1: USB disconnect, device number 61 [ 1203.500034][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.506921][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.513437][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.520055][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.526968][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.533556][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.540024][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.546635][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.552922][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.559532][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.566212][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.572828][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.579296][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.585906][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.592159][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.598270][T14743] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1203.598744][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.613149][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.619741][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.626208][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1203.632822][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1203.654134][T18331] usb 4-1: USB disconnect, device number 75 [ 1203.660187][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1203.690071][T14743] usb 5-1: no configurations [ 1203.694677][T14743] usb 5-1: can't read configurations, error -22 [ 1203.748792][ T9862] udevd[9862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1203.926461][T14743] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1203.967235][T14743] usb 5-1: no configurations [ 1203.968513][T20469] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1203.971993][T14743] usb 5-1: can't read configurations, error -22 [ 1203.988492][T20469] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1204.010449][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1204.033935][T14743] usb usb5-port1: unable to enumerate USB device [ 1204.052117][T20469] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3961'. [ 1204.815902][ T5925] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1204.989524][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 1205.011590][ T5925] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1205.023387][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.038154][ T5925] usb 4-1: Product: syz [ 1205.042493][ T5925] usb 4-1: Manufacturer: syz [ 1205.050089][ T5925] usb 4-1: SerialNumber: syz [ 1205.073030][ T5925] usb 4-1: config 0 descriptor?? [ 1205.113496][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1205.171519][T14743] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1205.396688][T20489] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1205.459720][T14743] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1205.459763][T20489] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1205.469882][T14743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.516200][T14743] usb 2-1: config 0 descriptor?? [ 1205.523556][T14743] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1206.014360][T14743] gspca_spca508: reg_read err -32 [ 1206.251052][T14743] gspca_spca508: reg_read err -71 [ 1206.258218][T14743] gspca_spca508: reg_read err -71 [ 1206.263770][T14743] gspca_spca508: reg_read err -71 [ 1206.273452][T14743] gspca_spca508: reg write: error -71 [ 1206.282405][T14743] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 1206.356473][T14743] usb 2-1: USB disconnect, device number 99 [ 1206.523896][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.535728][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.816376][T20500] Cannot find set identified by id 0 to match [ 1207.001934][T20503] netlink: 'syz.1.3972': attribute type 5 has an invalid length. [ 1207.107061][T20507] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3973'. [ 1207.395451][T18329] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1207.596376][T18329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1207.631585][T18329] usb 1-1: not running at top speed; connect to a high speed hub [ 1207.640530][T18331] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1207.725935][T18329] usb 1-1: config 19 has an invalid interface number: 15 but max is 0 [ 1207.771306][T18329] usb 1-1: config 19 has no interface number 0 [ 1207.792658][T18332] usb 4-1: USB disconnect, device number 76 [ 1207.798756][T18331] usb 2-1: Using ep0 maxpacket: 16 [ 1207.829216][T18329] usb 1-1: config 19 interface 15 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 1207.847996][T18331] usb 2-1: config 7 has an invalid interface number: 148 but max is 0 [ 1207.882606][T18331] usb 2-1: config 7 has no interface number 0 [ 1207.889655][T18329] usb 1-1: config 19 interface 15 altsetting 3 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1207.904041][T18331] usb 2-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1207.932132][T18329] usb 1-1: config 19 interface 15 altsetting 3 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1207.955311][T18331] usb 2-1: config 7 interface 148 has no altsetting 0 [ 1207.980136][T18329] usb 1-1: config 19 interface 15 has no altsetting 0 [ 1208.007123][T18331] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61 [ 1208.025891][T18329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=c9.e6 [ 1208.041184][T18331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.054942][T18329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.069232][T18331] usb 2-1: Product: syz [ 1208.073447][T18331] usb 2-1: Manufacturer: syz [ 1208.079496][T18329] usb 1-1: Product: syz [ 1208.089629][T18329] usb 1-1: Manufacturer: syz [ 1208.094269][T18329] usb 1-1: SerialNumber: syz [ 1208.105068][T18331] usb 2-1: SerialNumber: syz [ 1208.344833][T18331] usb 2-1: probing VID:PID(0424:012C) [ 1208.361848][T18331] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 01 [ 1208.373894][T18329] usbtest 1-1:19.15: couldn't get endpoints, -22 [ 1208.388941][T18329] usbtest 1-1:19.15: probe with driver usbtest failed with error -22 [ 1208.406219][T18331] usb 2-1: vub300 ignoring EndPoint(0) 01 [ 1208.412166][T18331] usb 2-1: vub300 testing UNKNOWN EndPoint(1) 05 [ 1208.424844][T18331] usb 2-1: vub300 ignoring EndPoint(1) 05 [ 1208.441246][T18329] usb 1-1: USB disconnect, device number 86 [ 1208.450022][T18331] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 1208.487918][T18331] vub300 2-1:7.148: probe with driver vub300 failed with error -22 [ 1208.508480][T18331] usb 2-1: USB disconnect, device number 100 [ 1208.813266][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3983'. [ 1208.985992][T14743] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1209.101947][T20548] bridge_slave_0: left allmulticast mode [ 1209.326061][T14743] usb 5-1: Using ep0 maxpacket: 16 [ 1209.333492][T14743] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1209.342299][T14743] usb 5-1: config 0 has no interface number 0 [ 1209.359159][T14743] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1209.374913][T20548] bridge_slave_0: left promiscuous mode [ 1209.380725][T14743] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1209.380750][T14743] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1209.408631][T20553] binder: 20543:20553 ioctl c0306201 0 returned -14 [ 1210.010645][T14743] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1210.030364][T20548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.038990][T14743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.055835][T14743] usb 5-1: Product: syz [ 1210.060189][T14743] usb 5-1: Manufacturer: syz [ 1210.131747][T14743] usb 5-1: SerialNumber: syz [ 1210.192139][T20548] bridge_slave_1: left allmulticast mode [ 1210.200868][T14743] usb 5-1: config 0 descriptor?? [ 1210.207292][T20535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.214749][T20535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.216482][T20548] bridge_slave_1: left promiscuous mode [ 1210.261237][T20548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.354846][T20548] bond0: (slave bond_slave_0): Releasing backup interface [ 1210.413887][T20548] bond0: (slave bond_slave_1): Releasing backup interface [ 1210.449501][T20535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.475572][T20535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1210.494979][T20553] syz.0.3986 (20553): drop_caches: 1 [ 1210.522727][T20548] team0: Port device team_slave_0 removed [ 1210.551377][T20548] team0: Port device team_slave_1 removed [ 1210.572351][T20548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.591560][T20548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.604062][T20548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.618596][T20548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.933765][T14743] Error reading MAC address [ 1211.074378][T14743] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 1211.187422][T20557] could not allocate digest TFM handle xcbc(des3_ede) [ 1211.245015][T14743] usb 5-1: USB disconnect, device number 66 [ 1211.344517][T20572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3990'. [ 1211.364034][T20572] fuse: Bad value for 'group_id' [ 1211.372834][T20572] fuse: Bad value for 'group_id' [ 1212.834872][ T30] audit: type=1326 audit(1752974568.077:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.082842][ T30] audit: type=1326 audit(1752974568.077:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.167423][ T30] audit: type=1326 audit(1752974568.077:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.300109][ T30] audit: type=1326 audit(1752974568.087:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.375541][ T30] audit: type=1326 audit(1752974568.087:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.473725][ T30] audit: type=1326 audit(1752974568.087:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.585106][ T30] audit: type=1326 audit(1752974568.087:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.659900][ T30] audit: type=1326 audit(1752974568.087:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.728992][ T30] audit: type=1326 audit(1752974568.087:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1213.824802][T20608] netlink: 'syz.3.4001': attribute type 1 has an invalid length. [ 1213.839515][ T30] audit: type=1326 audit(1752974568.087:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20590 comm="syz.0.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x7ffc0000 [ 1214.048613][T20612] hsr0: entered promiscuous mode [ 1214.054327][T20612] macsec1: entered promiscuous mode [ 1214.104062][T20612] macsec1: entered allmulticast mode [ 1214.131514][T20612] hsr0: entered allmulticast mode [ 1214.137436][T20612] hsr_slave_0: entered allmulticast mode [ 1214.160580][T20612] hsr_slave_1: entered allmulticast mode [ 1214.192060][T20612] hsr0: left allmulticast mode [ 1214.210785][T20612] hsr_slave_0: left allmulticast mode [ 1214.226981][T20612] hsr_slave_1: left allmulticast mode [ 1214.735778][ T5925] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1214.888858][ T5925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.907973][ T5925] usb 5-1: config 0 has no interface number 0 [ 1214.914137][ T5925] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1214.978995][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.036695][ T5925] usb 5-1: config 0 descriptor?? [ 1215.081313][ T5925] usb 5-1: selecting invalid altsetting 1 [ 1215.129269][ T5925] dvb_ttusb_budget: ttusb_init_controller: error [ 1215.166679][ T5925] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1215.195724][T18332] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1215.367262][T18332] usb 3-1: Using ep0 maxpacket: 8 [ 1215.402009][T18332] usb 3-1: config 77 has an invalid interface number: 14 but max is 0 [ 1215.447201][T18332] usb 3-1: config 77 has no interface number 0 [ 1215.484617][T18332] usb 3-1: config 77 interface 14 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1215.505056][T18332] usb 3-1: config 77 interface 14 has no altsetting 0 [ 1215.520635][ T5925] DVB: Unable to find symbol ves1820_attach() [ 1215.544486][T18332] usb 3-1: New USB device found, idVendor=12d1, idProduct=1004, bcdDevice= 0.00 [ 1215.573595][T18332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.600442][T20649] input: syz0 as /devices/virtual/input/input99 [ 1215.615737][T18332] usb 3-1: Product: ⊄릆᷄啻㵿è½â®¤èŽµæ˜°â¨…ã±à¨Ÿîƒ¬å‘­å²­á´©á¾«á¤ºï»ˆä¸µâš¹å’“苨戛㖇痳賢ษ範ϸꃳ潱ìžãž¥î›¹î·é¦ªæ°³á‰› [ 1215.680661][ T5925] DVB: Unable to find symbol stv0297_attach() [ 1215.697022][ T5925] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1215.718307][T18332] usb 3-1: Manufacturer: ވ颇۴銜೸疖든厼졲䵤耤ê¶î¨½æŒ˜éœê‰‚昙暌è¥â®‘嫅껻翰ﺸ⟖鬬砡á¡é¿‹è–¥ê’¸ì¬‘篢䥟ᮨꀲᄊé“í¸äƒ‰çˆ‹ìš«í‚¸ê¦ˆä…¢á‹¨à´î«•蟺顅兩ì¡é¬–撚躮쪊꼷㙴 [ 1215.777097][ T5925] usb 5-1: USB disconnect, device number 67 [ 1215.784920][T18332] usb 3-1: SerialNumber: Ф [ 1216.096023][T18332] usb-storage 3-1:77.14: USB Mass Storage device detected [ 1216.171474][T18332] usb 3-1: USB disconnect, device number 62 [ 1216.226394][T15859] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1216.376377][T18328] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1216.395860][T15859] usb 1-1: Using ep0 maxpacket: 16 [ 1216.404917][T15859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1216.413286][T15859] usb 1-1: can't read configurations, error -61 [ 1216.535676][T18328] usb 2-1: Using ep0 maxpacket: 16 [ 1216.542793][T18328] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1216.554719][T18328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1216.565851][T15859] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1216.581624][T18328] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1216.591828][T18328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.611757][T18328] usb 2-1: Product: syz [ 1216.661693][T18328] usb 2-1: Manufacturer: syz [ 1216.671759][T18328] usb 2-1: SerialNumber: syz [ 1216.688295][T18328] usb 2-1: config 0 descriptor?? [ 1216.732405][T18328] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1216.741808][T15859] usb 1-1: Using ep0 maxpacket: 16 [ 1216.750401][T15859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1216.758555][T15859] usb 1-1: can't read configurations, error -61 [ 1216.764932][T18328] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1216.773097][T15859] usb usb1-port1: attempt power cycle [ 1217.118463][T15859] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1217.156728][T15859] usb 1-1: Using ep0 maxpacket: 16 [ 1217.164089][T15859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1217.176325][T15859] usb 1-1: can't read configurations, error -61 [ 1217.325697][T15859] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1217.360397][T15859] usb 1-1: Using ep0 maxpacket: 16 [ 1217.369383][T15859] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1217.377491][T18328] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1217.385854][T18328] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1217.392939][T15859] usb 1-1: can't read configurations, error -61 [ 1217.425599][T15859] usb usb1-port1: unable to enumerate USB device [ 1217.768412][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 1217.776052][T18329] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1217.785332][T18329] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1218.171874][T18332] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1218.495638][T18332] usb 3-1: device descriptor read/64, error -71 [ 1219.052578][T18328] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1219.053652][T18328] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1219.054255][T18328] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1219.054414][T18332] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1219.054712][T18328] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1219.055153][T18328] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1219.058276][T18328] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1219.204694][T18332] usb 3-1: device descriptor read/64, error -71 [ 1219.308654][T18332] usb usb3-port1: attempt power cycle [ 1219.543821][T20698] netlink: 548 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1219.645346][T18332] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1219.736632][T18332] usb 3-1: device descriptor read/8, error -71 [ 1219.824205][T20702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1219.838856][T18329] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1219.840966][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 1219.851610][T18329] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1219.865517][T18328] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1220.018667][T18328] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 1220.030471][T18328] usb 4-1: config 0 has no interface number 0 [ 1220.036868][T18332] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1220.053340][T18328] usb 4-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1220.115948][T18332] usb 3-1: device descriptor read/8, error -71 [ 1220.137488][T18328] usb 4-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 1220.189353][T18328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.240794][T18332] usb usb3-port1: unable to enumerate USB device [ 1220.256959][T18328] usb 4-1: config 0 descriptor?? [ 1220.283552][T20699] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1220.485731][T14743] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1220.637979][T14743] usb 1-1: config 0 has no interfaces? [ 1220.643777][T14743] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 1220.664837][T14743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.743241][T14743] usb 1-1: config 0 descriptor?? [ 1220.967586][ T5925] usb 1-1: USB disconnect, device number 91 [ 1221.024421][T20716] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1221.152480][T20716] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1221.499670][T18332] usb 2-1: USB disconnect, device number 101 [ 1221.782315][T20727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1221.802518][T20727] netlink: 'syz.1.4036': attribute type 3 has an invalid length. [ 1221.852155][T20730] netlink: 'syz.1.4036': attribute type 3 has an invalid length. [ 1221.996007][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 1222.031641][T18329] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1222.066603][T18329] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1222.524353][T18328] usb 4-1: string descriptor 0 read error: -71 [ 1222.531906][T18328] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 1222.584164][T18328] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 1222.667459][T18328] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 1222.732837][T18328] usb 4-1: USB disconnect, device number 77 [ 1222.936540][T20748] FAULT_INJECTION: forcing a failure. [ 1222.936540][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.950422][T20746] Cannot find set identified by id 0 to match [ 1222.974127][T20748] CPU: 0 UID: 0 PID: 20748 Comm: syz.0.4042 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1222.974152][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1222.974163][T20748] Call Trace: [ 1222.974171][T20748] [ 1222.974179][T20748] dump_stack_lvl+0x189/0x250 [ 1222.974203][T20748] ? __pfx____ratelimit+0x10/0x10 [ 1222.974223][T20748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1222.974243][T20748] ? __pfx__printk+0x10/0x10 [ 1222.974268][T20748] ? __pfx___might_resched+0x10/0x10 [ 1222.974288][T20748] ? fs_reclaim_acquire+0x7d/0x100 [ 1222.974318][T20748] should_fail_ex+0x414/0x560 [ 1222.974342][T20748] should_failslab+0xa8/0x100 [ 1222.974369][T20748] __kmalloc_noprof+0xcb/0x4f0 [ 1222.974391][T20748] ? tomoyo_encode+0x28b/0x550 [ 1222.974416][T20748] tomoyo_encode+0x28b/0x550 [ 1222.974442][T20748] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1222.974474][T20748] ? tomoyo_mount_permission+0x27a/0x970 [ 1222.974494][T20748] tomoyo_mount_permission+0x377/0x970 [ 1222.974517][T20748] ? tomoyo_mount_permission+0x27a/0x970 [ 1222.974536][T20748] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1222.974613][T20748] security_sb_mount+0xec/0x350 [ 1222.974637][T20748] path_mount+0xbc/0xfe0 [ 1222.974659][T20748] ? user_path_at+0x44/0x60 [ 1222.974676][T20748] ? kmem_cache_free+0x18f/0x400 [ 1222.974707][T20748] __se_sys_mount+0x317/0x410 [ 1222.974730][T20748] ? __pfx___se_sys_mount+0x10/0x10 [ 1222.974752][T20748] ? do_syscall_64+0xbe/0x3b0 [ 1222.974770][T20748] ? __x64_sys_mount+0x20/0xc0 [ 1222.974796][T20748] do_syscall_64+0xfa/0x3b0 [ 1222.974813][T20748] ? lockdep_hardirqs_on+0x9c/0x150 [ 1222.974832][T20748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.974849][T20748] ? clear_bhb_loop+0x60/0xb0 [ 1222.974869][T20748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.974886][T20748] RIP: 0033:0x7ff43fb9014a [ 1222.974902][T20748] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.974917][T20748] RSP: 002b:00007ff440a08e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1222.974935][T20748] RAX: ffffffffffffffda RBX: 00007ff440a08ef0 RCX: 00007ff43fb9014a [ 1222.974948][T20748] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 1222.974960][T20748] RBP: 0000200000000040 R08: 00007ff440a08ef0 R09: 0000000002211864 [ 1222.974972][T20748] R10: 0000000002211864 R11: 0000000000000246 R12: 0000200000000000 [ 1222.974984][T20748] R13: 00007ff440a08eb0 R14: 0000000000000000 R15: 00002000000000c0 [ 1222.975013][T20748] [ 1222.975033][T20748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1223.283148][T20752] FAULT_INJECTION: forcing a failure. [ 1223.283148][T20752] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.382035][T20752] CPU: 0 UID: 0 PID: 20752 Comm: syz.1.4044 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1223.382062][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1223.382073][T20752] Call Trace: [ 1223.382081][T20752] [ 1223.382089][T20752] dump_stack_lvl+0x189/0x250 [ 1223.382114][T20752] ? __pfx____ratelimit+0x10/0x10 [ 1223.382133][T20752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1223.382153][T20752] ? __pfx__printk+0x10/0x10 [ 1223.382177][T20752] ? __mutex_trylock_common+0x153/0x260 [ 1223.382209][T20752] should_fail_ex+0x414/0x560 [ 1223.382231][T20752] should_failslab+0xa8/0x100 [ 1223.382254][T20752] __kmalloc_cache_noprof+0x70/0x3d0 [ 1223.382276][T20752] ? __hw_addr_add_ex+0x1f4/0x770 [ 1223.382303][T20752] __hw_addr_add_ex+0x1f4/0x770 [ 1223.382320][T20752] dev_addr_init+0x14f/0x230 [ 1223.382340][T20752] ? __pfx_dev_addr_init+0x10/0x10 [ 1223.382352][T20752] ? alloc_netdev_mqs+0xa6/0x11e0 [ 1223.382370][T20752] alloc_netdev_mqs+0x2f3/0x11e0 [ 1223.382379][T20752] ? __pfx_br_dev_setup+0x10/0x10 [ 1223.382396][T20752] rtnl_create_link+0x31f/0xd10 [ 1223.382410][T20752] rtnl_newlink_create+0x25c/0xb00 [ 1223.382427][T20752] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1223.382440][T20752] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1223.382451][T20752] ? rtnl_newlink+0x8db/0x1c70 [ 1223.382464][T20752] ? __pfx___mutex_lock+0x10/0x10 [ 1223.382488][T20752] ? ns_capable+0x8a/0xf0 [ 1223.382501][T20752] rtnl_newlink+0x16d6/0x1c70 [ 1223.382513][T20752] ? netlink_sendmsg+0x805/0xb30 [ 1223.382533][T20752] ? __pfx_rtnl_newlink+0x10/0x10 [ 1223.382560][T20752] ? kasan_quarantine_put+0xdd/0x220 [ 1223.382572][T20752] ? lockdep_hardirqs_on+0x9c/0x150 [ 1223.382586][T20752] ? nlmon_xmit+0xb0/0x100 [ 1223.382601][T20752] ? kmem_cache_free+0x18f/0x400 [ 1223.382622][T20752] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1223.382633][T20752] ? lockdep_hardirqs_on+0x9c/0x150 [ 1223.382643][T20752] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1223.382654][T20752] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1223.382666][T20752] ? __dev_queue_xmit+0x27e/0x3a70 [ 1223.382683][T20752] ? __lock_acquire+0xab9/0xd20 [ 1223.382707][T20752] ? __pfx_rtnl_newlink+0x10/0x10 [ 1223.382718][T20752] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1223.382732][T20752] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1223.382743][T20752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1223.382757][T20752] ? ref_tracker_free+0x63a/0x7d0 [ 1223.382767][T20752] ? __copy_skb_header+0xa7/0x550 [ 1223.382778][T20752] ? __pfx_ref_tracker_free+0x10/0x10 [ 1223.382794][T20752] netlink_rcv_skb+0x205/0x470 [ 1223.382808][T20752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1223.382820][T20752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1223.382839][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 1223.382851][T20752] ? netlink_deliver_tap+0x2e/0x1b0 [ 1223.382873][T20752] netlink_unicast+0x759/0x8e0 [ 1223.382892][T20752] netlink_sendmsg+0x805/0xb30 [ 1223.382909][T20752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.382924][T20752] ? aa_sock_msg_perm+0x94/0x160 [ 1223.382934][T20752] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1223.382945][T20752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.382957][T20752] __sock_sendmsg+0x219/0x270 [ 1223.382971][T20752] ____sys_sendmsg+0x505/0x830 [ 1223.382987][T20752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1223.383011][T20752] ? import_iovec+0x74/0xa0 [ 1223.383026][T20752] ___sys_sendmsg+0x21f/0x2a0 [ 1223.383041][T20752] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.383074][T20752] ? __fget_files+0x2a/0x420 [ 1223.383082][T20752] ? __fget_files+0x3a0/0x420 [ 1223.383097][T20752] __x64_sys_sendmsg+0x19b/0x260 [ 1223.383112][T20752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1223.383134][T20752] ? __pfx_ksys_write+0x10/0x10 [ 1223.383145][T20752] ? rcu_is_watching+0x15/0xb0 [ 1223.383159][T20752] ? do_syscall_64+0xbe/0x3b0 [ 1223.383172][T20752] do_syscall_64+0xfa/0x3b0 [ 1223.383182][T20752] ? lockdep_hardirqs_on+0x9c/0x150 [ 1223.383192][T20752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.383201][T20752] ? clear_bhb_loop+0x60/0xb0 [ 1223.383212][T20752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.383222][T20752] RIP: 0033:0x7f22cd58e9a9 [ 1223.383232][T20752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.383241][T20752] RSP: 002b:00007f22ce310038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.383252][T20752] RAX: ffffffffffffffda RBX: 00007f22cd7b5fa0 RCX: 00007f22cd58e9a9 [ 1223.383264][T20752] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1223.383270][T20752] RBP: 00007f22ce310090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.383279][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.383285][T20752] R13: 0000000000000000 R14: 00007f22cd7b5fa0 R15: 00007f22cd8dfa28 [ 1223.383305][T20752] [ 1224.156569][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 1224.197387][T18329] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1224.215219][T18329] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1224.255687][ T5925] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1224.321653][T20764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1224.457345][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.468882][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.499560][T14743] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1224.537710][T14743] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1224.559472][ T5925] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1224.604479][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.643779][ T5925] usb 1-1: config 0 descriptor?? [ 1225.087544][ T5925] hid-thrustmaster 0003:044F:B65D.0028: unknown main item tag 0x0 [ 1225.124622][ T5925] hid-thrustmaster 0003:044F:B65D.0028: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1225.279266][ T5925] hid-thrustmaster 0003:044F:B65D.0028: Wrong number of endpoints? [ 1225.306029][ C0] hid-thrustmaster 0003:044F:B65D.0028: URB to get model id failed with error -71 [ 1225.348043][ T5925] usb 1-1: USB disconnect, device number 92 [ 1225.722993][T20786] fido_id[20786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1225.745744][ T5925] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1225.749623][T18328] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1225.916761][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 1225.930037][T18328] usb 5-1: Using ep0 maxpacket: 16 [ 1225.931108][ T5925] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 1225.980425][T18328] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1226.022996][T18328] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1226.033768][ T5925] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.074727][T18328] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.136564][T18328] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1226.167055][ T5925] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1226.176268][T18328] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1226.196277][T18328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.224652][T18328] usb 5-1: Product: syz [ 1226.227508][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1226.235278][T18328] usb 5-1: Manufacturer: syz [ 1226.255226][T18328] usb 5-1: SerialNumber: syz [ 1226.258939][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.318578][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 1226.324671][T18329] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1226.335965][ T5925] usb 1-1: Product: syz [ 1226.350395][T18329] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1226.378745][ T5925] usb 1-1: Manufacturer: à   [ 1226.408030][ T5925] usb 1-1: SerialNumber: syz [ 1226.480042][ T5925] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1226.574417][T18323] IPVS: starting estimator thread 0... [ 1226.625806][ T5925] usb 1-1: no configuration chosen from 1 choice [ 1226.666260][T20796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4057'. [ 1226.685727][T20797] IPVS: using max 32 ests per chain, 76800 per kthread [ 1227.036010][T18331] usb 1-1: USB disconnect, device number 93 [ 1227.036120][ T5925] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1227.252084][ T5925] usb 2-1: not running at top speed; connect to a high speed hub [ 1227.577678][ T5925] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1227.635800][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1227.645002][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.669240][ T5925] usb 2-1: Product: ꒇ蔤孯â™é¾¾ê®¬æ§ é£§ê³â€·ï”‚ᎎ웦﨔溙錧熌å€ç¼à»¼â£¶ì¬‘î–귛ê¾Ë›á˜‘ã¯å—¼â„¦ê‘¨í€­ë’Ÿî§˜èŒƒã¶¸é´‘瀑ï¢íœ¿ã •훊Îî¢—ìžæŒŒé–‡ç¡Ý¢ãžµê¬ä™§ï¯€è˜›ë´”宨囨ꄆ㪉缀ꜹ☩⒅í¹ë–¿ç°’꠵ࢬ닱î‘蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖á¾ì¨µã«™ê±¤ãˆ¥ëœ»È«åŠ—é­Œä•€ê˜±é‚¡ê¸ºäŒà²¶ë…ªî”œê‡£î³Ÿê±­ë‘—蟡醭ä€ïƒ†à·ƒë«ï ¬è¸–㚤í’ᜋ [ 1228.155924][ T5925] usb 2-1: Manufacturer: 嘋䶟å眆⴫㗖馷瀒ç¨à¸´ç¸ƒì‚±åŒ¦ä¦·é£‹Ñ”ç•å• è§ê¬¦ì¾ã‚·ê›¨æ€®ä£²ë‘¾ï²±ã²å§¾ï‰˜à¤åºŒéµƒç‡‹ï‘¢è†¸å¨„é £ò¿¢¨í†–쑇գ੄饬䓱é‹Ó¾ê·æ™‚궼䓡︸嵞喙⟷ì…瑯褾鱊軖ëŸä·†è°—ë¹ì¯œä•¿ê£µí”­ä®µçŒ±æ‹®ì¿œæƒªî·ˆêˆ»è®½í…´ãªç§î¶šæºå¬ƒæ¶¨íœ¥â—§è‹­ê†³è®„é»ë³‹í‡‹å£·ãŠ¼ä‰¨é ®æ±†ïˆá·¯à¤žâ¤­á†°ì—º [ 1228.325749][ T5925] usb 2-1: SerialNumber: 꾨á¯ã„㿪鎠怰⊑å£äŠ„â¤¢tඬ㴛é»è¥³ç°³éŒ—켟ꓡè·åœ©ã‰ç’햠댚ꈶ渨嗱䨂è•á¤è£‰ì·»ã‘¶ä¥…袨ä±à¼¯æ¢¹ï´‘áŠë°ªá‹¸â”™æ»†ã™±ç¶’î¿¥æ­ë­¨ãºµç¤Œé—µâ„˜é„¬ã»žî¹„㔲ã–⠿쀋à²ë›°ìž—ä³îª´æƒ³ï¯µá“‡ë¸œÑˆî¯½ä½§ãµºì‘®á‘¬æ¢ºé›¬æ·½Ú‘玒à¦ä «äƒ™å´çºé–¾ë‰¶âƒ” [ 1228.706430][ T5925] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1228.800389][T18328] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1228.841476][T18328] usb 5-1: USB disconnect, device number 68 [ 1228.876548][ T5925] usb 2-1: USB disconnect, device number 102 [ 1228.962779][ T5925] usblp0: removed [ 1229.002624][T20813] lo: entered promiscuous mode [ 1229.019679][T20813] tunl0: entered promiscuous mode [ 1229.027719][T20813] gre0: entered promiscuous mode [ 1229.033999][T20813] gretap0: entered promiscuous mode [ 1229.067547][T20816] fuse: Unknown parameter '¸;x|þh\_ÿ•2×Ç^ THùyZ„Üqþ^àÿ!I¨ìKñ6çþ ¤·ªö¤ljsy]vß?vûuïuI%ò}ðôö¿äö½0x0000000000000006' [ 1229.090670][T20813] erspan0: entered promiscuous mode [ 1229.158250][T20813] ip_vti0: entered promiscuous mode [ 1229.206795][T20813] ip6_vti0: entered promiscuous mode [ 1229.213035][T20813] sit0: entered promiscuous mode [ 1229.327030][T20813] ip6tnl0: entered promiscuous mode [ 1229.333133][T20813] ip6gre0: entered promiscuous mode [ 1229.427422][T20826] netlink: 'syz.1.4068': attribute type 10 has an invalid length. [ 1229.458063][T20813] syz_tun: entered promiscuous mode [ 1229.464298][T20813] ip6gretap0: entered promiscuous mode [ 1229.535700][T20824] fuse: Bad value for 'group_id' [ 1229.540733][T20824] fuse: Bad value for 'group_id' [ 1229.576867][T20813] bridge0: entered promiscuous mode [ 1229.582261][T20813] bridge0: left allmulticast mode [ 1229.614385][T20813] vcan0: entered promiscuous mode [ 1229.668543][T20813] bond0: entered promiscuous mode [ 1229.689230][T20813] bond_slave_0: entered promiscuous mode [ 1229.715762][T20813] bond_slave_1: entered promiscuous mode [ 1229.723681][T20813] team0: entered promiscuous mode [ 1229.763672][T20813] team_slave_0: entered promiscuous mode [ 1229.838345][T20813] team_slave_1: entered promiscuous mode [ 1229.887387][T20813] dummy0: entered promiscuous mode [ 1229.923668][T20813] nlmon0: entered promiscuous mode [ 1230.011177][T20813] caif0: entered promiscuous mode [ 1230.112577][T20813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1230.794677][T20853] binder: 20851:20853 ioctl 4018620d 0 returned -22 [ 1231.486197][T18328] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1231.675617][T18328] usb 4-1: Using ep0 maxpacket: 32 [ 1231.684250][T18328] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 1231.693872][T18328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.702705][T18328] usb 4-1: Product: syz [ 1231.708214][T18328] usb 4-1: Manufacturer: syz [ 1231.712902][T18328] usb 4-1: SerialNumber: syz [ 1231.722314][T18328] usb 4-1: config 0 descriptor?? [ 1231.747739][T20834] delete_channel: no stack [ 1232.011167][T18328] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1232.099647][T18328] usb 4-1: USB disconnect, device number 78 [ 1232.135974][T14743] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1232.262326][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1232.262345][ T30] audit: type=1326 audit(1752974587.557:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ead8e9a9 code=0x7ffc0000 [ 1232.316050][T14743] usb 1-1: Using ep0 maxpacket: 32 [ 1232.396989][T14743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.415644][ T30] audit: type=1326 audit(1752974587.557:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ead8e9a9 code=0x7ffc0000 [ 1232.448457][T14743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.492319][T14743] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1232.535880][T14743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.553377][ T30] audit: type=1326 audit(1752974587.597:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff7ead8e9a9 code=0x7ffc0000 [ 1232.626934][T14743] usb 1-1: config 0 descriptor?? [ 1232.634795][ T30] audit: type=1326 audit(1752974587.597:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ead8e9a9 code=0x7ffc0000 [ 1232.755282][ T30] audit: type=1326 audit(1752974587.597:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ead8e9a9 code=0x7ffc0000 [ 1232.861865][ T30] audit: type=1326 audit(1752974587.597:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff7ead8e9a9 code=0x7ffc0000 [ 1232.985259][ T30] audit: type=1326 audit(1752974587.597:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7ead2ab89 code=0x7ffc0000 [ 1233.063383][T14743] smartjoyplus 0003:0925:8866.0029: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 1233.102441][ T30] audit: type=1326 audit(1752974587.607:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7ead2ab89 code=0x7ffc0000 [ 1233.138794][T14743] smartjoyplus 0003:0925:8866.0029: Force feedback for SmartJoy PLUS PS2/USB adapter [ 1233.306153][T20876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.350532][T20876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.455355][ T30] audit: type=1326 audit(1752974587.607:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7ead2ab89 code=0x7ffc0000 [ 1233.497309][ T30] audit: type=1326 audit(1752974587.607:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7ead2ab89 code=0x7ffc0000 [ 1234.099231][T20887] FAULT_INJECTION: forcing a failure. [ 1234.099231][T20887] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.146715][T20887] CPU: 1 UID: 0 PID: 20887 Comm: syz.3.4084 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1234.146742][T20887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1234.146753][T20887] Call Trace: [ 1234.146760][T20887] [ 1234.146769][T20887] dump_stack_lvl+0x189/0x250 [ 1234.146794][T20887] ? __pfx____ratelimit+0x10/0x10 [ 1234.146814][T20887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.146834][T20887] ? __pfx__printk+0x10/0x10 [ 1234.146862][T20887] ? __pfx___might_resched+0x10/0x10 [ 1234.146880][T20887] ? fs_reclaim_acquire+0x7d/0x100 [ 1234.146902][T20887] should_fail_ex+0x414/0x560 [ 1234.146926][T20887] should_failslab+0xa8/0x100 [ 1234.146951][T20887] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1234.146973][T20887] ? alloc_empty_file+0x55/0x1d0 [ 1234.146996][T20887] alloc_empty_file+0x55/0x1d0 [ 1234.147015][T20887] path_openat+0x107/0x3830 [ 1234.147034][T20887] ? arch_stack_walk+0xfc/0x150 [ 1234.147075][T20887] ? irqentry_exit+0x74/0x90 [ 1234.147098][T20887] ? kasan_save_track+0x4f/0x80 [ 1234.147117][T20887] ? kasan_save_track+0x3e/0x80 [ 1234.147136][T20887] ? __kasan_slab_alloc+0x6c/0x80 [ 1234.147156][T20887] ? getname_flags+0xb8/0x540 [ 1234.147173][T20887] ? __pfx_path_openat+0x10/0x10 [ 1234.147189][T20887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.147226][T20887] do_filp_open+0x1fa/0x410 [ 1234.147244][T20887] ? __lock_acquire+0xab9/0xd20 [ 1234.147263][T20887] ? __pfx_do_filp_open+0x10/0x10 [ 1234.147305][T20887] ? _raw_spin_unlock+0x28/0x50 [ 1234.147320][T20887] ? alloc_fd+0x64c/0x6c0 [ 1234.147354][T20887] do_sys_openat2+0x121/0x1c0 [ 1234.147376][T20887] ? __pfx_do_sys_openat2+0x10/0x10 [ 1234.147395][T20887] ? ksys_write+0x22a/0x250 [ 1234.147419][T20887] ? __pfx_ksys_write+0x10/0x10 [ 1234.147444][T20887] ? rcu_is_watching+0x15/0xb0 [ 1234.147469][T20887] __x64_sys_open+0x11e/0x150 [ 1234.147491][T20887] do_syscall_64+0xfa/0x3b0 [ 1234.147509][T20887] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.147527][T20887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.147544][T20887] ? clear_bhb_loop+0x60/0xb0 [ 1234.147564][T20887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.147580][T20887] RIP: 0033:0x7fcefe18e9a9 [ 1234.147596][T20887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.147611][T20887] RSP: 002b:00007fceff048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1234.147629][T20887] RAX: ffffffffffffffda RBX: 00007fcefe3b5fa0 RCX: 00007fcefe18e9a9 [ 1234.147643][T20887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1234.147654][T20887] RBP: 00007fceff048090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.147665][T20887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.147679][T20887] R13: 0000000000000000 R14: 00007fcefe3b5fa0 R15: 00007fcefe4dfa28 [ 1234.147707][T20887] [ 1234.926138][T20891] ptrace attach of "./syz-executor exec"[16513] was attempted by "./syz-executor exec"[20891] [ 1234.947640][T20891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1235.303428][T18331] usb 1-1: USB disconnect, device number 94 [ 1235.554267][T20901] xt_SECMARK: invalid mode: 2 [ 1235.627232][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4081'. [ 1235.643113][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4081'. [ 1235.684331][T20905] FAULT_INJECTION: forcing a failure. [ 1235.684331][T20905] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.753375][T20905] CPU: 0 UID: 0 PID: 20905 Comm: syz.0.4088 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1235.753401][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1235.753412][T20905] Call Trace: [ 1235.753420][T20905] [ 1235.753428][T20905] dump_stack_lvl+0x189/0x250 [ 1235.753453][T20905] ? __pfx____ratelimit+0x10/0x10 [ 1235.753473][T20905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.753493][T20905] ? __pfx__printk+0x10/0x10 [ 1235.753522][T20905] ? __pfx___might_resched+0x10/0x10 [ 1235.753540][T20905] ? fs_reclaim_acquire+0x7d/0x100 [ 1235.753563][T20905] should_fail_ex+0x414/0x560 [ 1235.753586][T20905] should_failslab+0xa8/0x100 [ 1235.753613][T20905] __kmalloc_cache_noprof+0x70/0x3d0 [ 1235.753635][T20905] ? vhost_task_create+0xf6/0x290 [ 1235.753660][T20905] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1235.753679][T20905] vhost_task_create+0xf6/0x290 [ 1235.753701][T20905] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1235.753721][T20905] ? __pfx_vhost_task_create+0x10/0x10 [ 1235.753752][T20905] ? __pfx_vhost_task_fn+0x10/0x10 [ 1235.753785][T20905] ? kasan_save_track+0x4f/0x80 [ 1235.753804][T20905] ? kasan_save_track+0x3e/0x80 [ 1235.753830][T20905] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1235.753854][T20905] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1235.753885][T20905] ? __mutex_trylock_common+0x153/0x260 [ 1235.753910][T20905] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1235.753937][T20905] ? rcu_is_watching+0x15/0xb0 [ 1235.753956][T20905] ? look_up_lock_class+0x74/0x170 [ 1235.753977][T20905] ? register_lock_class+0x51/0x320 [ 1235.754001][T20905] ? __lock_acquire+0xab9/0xd20 [ 1235.754055][T20905] kvm_vcpu_ioctl+0x95c/0xe90 [ 1235.754085][T20905] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1235.754104][T20905] ? __lock_acquire+0xab9/0xd20 [ 1235.754142][T20905] ? __fget_files+0x2a/0x420 [ 1235.754163][T20905] ? __fget_files+0x2a/0x420 [ 1235.754176][T20905] ? __fget_files+0x3a0/0x420 [ 1235.754190][T20905] ? __fget_files+0x2a/0x420 [ 1235.754210][T20905] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1235.754230][T20905] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1235.754251][T20905] __se_sys_ioctl+0xf9/0x170 [ 1235.754275][T20905] do_syscall_64+0xfa/0x3b0 [ 1235.754293][T20905] ? lockdep_hardirqs_on+0x9c/0x150 [ 1235.754311][T20905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.754328][T20905] ? clear_bhb_loop+0x60/0xb0 [ 1235.754348][T20905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.754363][T20905] RIP: 0033:0x7ff43fb8e9a9 [ 1235.754378][T20905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.754391][T20905] RSP: 002b:00007ff440a09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.754412][T20905] RAX: ffffffffffffffda RBX: 00007ff43fdb5fa0 RCX: 00007ff43fb8e9a9 [ 1235.754423][T20905] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1235.754433][T20905] RBP: 00007ff440a09090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.754442][T20905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.754452][T20905] R13: 0000000000000000 R14: 00007ff43fdb5fa0 R15: 00007ff43fedfa28 [ 1235.754478][T20905] [ 1236.475602][T14743] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1236.720093][T14743] usb 4-1: Using ep0 maxpacket: 8 [ 1236.750974][T14743] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1236.767149][T14743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.840394][T14743] usb 4-1: Product: syz [ 1236.849292][T14743] usb 4-1: Manufacturer: syz [ 1236.853914][T14743] usb 4-1: SerialNumber: syz [ 1237.073847][T14743] usb 4-1: config 0 descriptor?? [ 1237.134919][T14743] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1237.715779][ T5925] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1237.906408][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 1237.931075][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.967463][T20928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1238.175788][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.304620][ T5925] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1238.365611][T20910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.375640][T20910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.419807][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.580478][ T5925] usb 1-1: config 0 descriptor?? [ 1238.652925][ T5925] hub 1-1:0.0: USB hub found [ 1238.755477][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.761869][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.877117][ T5925] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1239.189005][T20921] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1239.412085][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 1239.436511][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1239.506526][ T5925] usb 1-1: USB disconnect, device number 95 [ 1239.663762][T18331] usb 4-1: USB disconnect, device number 79 [ 1240.177901][T18331] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1240.185872][ T5925] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1240.295761][T14743] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1240.345683][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 1240.352797][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1240.364641][ T5925] usb 3-1: config 2 has an invalid interface number: 22 but max is 0 [ 1240.374602][ T5925] usb 3-1: config 2 has no interface number 0 [ 1240.381505][ T5925] usb 3-1: config 2 interface 22 has no altsetting 0 [ 1240.385500][T18331] usb 4-1: Using ep0 maxpacket: 32 [ 1240.390659][ T5925] usb 3-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 1240.401159][T18331] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1240.403618][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.419531][T18331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.420775][ T5925] usb 3-1: Product: ä¶¢èŒèž­ê¬¤äª„젠騧㘺掸￲뜑﯄ë°íŒ™å„¥êŠ©é´â–œæª¢î¾“ï¤ëˆ³ç’™á³—á°®å¦è„†à«²Éã†è¥šá´Ší›‰á•‰ï»¡ã¿ì‚¦î²‹æ‰‘æœæ˜¤â¯ªä‡”಑㜲Ȏ留蔿呻律爺헚뽾ᨄ妀댄罧éᾟ鯇ጅ訃☨릎腉ﵖ [ 1240.436835][T18331] usb 4-1: config 0 descriptor?? [ 1240.462174][ T5925] usb 3-1: Manufacturer: 먼殃莗釩㓎㹈褼ê…ࠤ怓脨çŒé¬«ã¾–奶䕣达ꋣꥫéŒì•³ï¬¶å–®ï»ã†ç‡§ï‘¹îµ¯ï­ìˆ–噈ͭꒅåªåµ¤í‚¡îª‚梂á­â©‡íŸ£î„œä´¿Ã¤å¤¶åº—ä”è½Œì‚¹ì§“é›¾ä¤¾ìŠœç¾“ì•—î›¯ç‚¯ì¬–ä¢æ±©ìžµí•몢⋉﷪滋bíˆî¬é¶Ÿå´ˆåŠã­²éª³ï²‚狰빨砻晱㘲ì‰ç”—ìž˜åµæ‰Ÿë“”퓼څ쩉쳴쿹 [ 1240.494582][T14743] usb 1-1: Using ep0 maxpacket: 8 [ 1240.511574][ T5925] usb 3-1: SerialNumber: à § [ 1240.517533][T14743] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 1240.526210][T14743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.539038][T14743] usb 1-1: config 0 has no interface number 0 [ 1240.551545][T14743] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1240.564037][T14743] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1240.578965][T14743] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1240.587742][T14743] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1240.597600][T14743] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1240.606383][T14743] usb 1-1: Manufacturer: syz [ 1240.621430][T14743] usb 1-1: config 0 descriptor?? [ 1240.663263][T18331] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1240.673971][T18331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1240.691529][T18331] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1240.699162][T18331] usb 4-1: media controller created [ 1240.737240][T18331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1240.755088][ T5925] usb-storage 3-1:2.22: USB Mass Storage device detected [ 1240.781192][ T5925] usb-storage 3-1:2.22: Quirks match for vid 0451 pid 5416: 2 [ 1240.833266][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.855457][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.866874][T20961] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1240.887655][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.890946][ T5925] usb 3-1: USB disconnect, device number 67 [ 1240.912921][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.926135][T18331] az6027: usb out operation failed. (-71) [ 1240.942549][T18331] az6027: usb out operation failed. (-71) [ 1240.953091][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.963428][T18331] stb0899_attach: Driver disabled by Kconfig [ 1240.970991][T18331] az6027: no front-end attached [ 1240.970991][T18331] [ 1240.980100][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.988403][T18331] az6027: usb out operation failed. (-71) [ 1240.994175][T18331] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1241.002669][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.013597][T18331] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input100 [ 1241.026053][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.038565][T20972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.048798][T18331] dvb-usb: schedule remote query interval to 400 msecs. [ 1241.061440][T18331] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1241.073144][T20972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.098388][T18331] usb 4-1: USB disconnect, device number 80 [ 1241.140522][T14743] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input101 [ 1241.170242][T20972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1241.208286][T20980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1241.289941][T18331] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1241.336558][T18329] usb 1-1: USB disconnect, device number 96 [ 1241.337148][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1241.432154][T20987] loop2: detected capacity change from 0 to 7 [ 1241.450859][T18768] Dev loop2: unable to read RDB block 7 [ 1241.477487][T18768] loop2: AHDI p1 p2 p3 [ 1241.489689][T18768] loop2: partition table partially beyond EOD, truncated [ 1241.508961][T18768] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1241.521504][T18768] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1241.535139][T20987] Dev loop2: unable to read RDB block 7 [ 1241.551846][T20987] loop2: AHDI p1 p2 p3 [ 1241.560534][T20987] loop2: partition table partially beyond EOD, truncated [ 1241.568980][T20987] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1241.578634][T20987] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1241.597412][ T5217] Dev loop2: unable to read RDB block 7 [ 1241.603201][ T5217] loop2: AHDI p1 p2 p3 [ 1241.608169][ T5217] loop2: partition table partially beyond EOD, truncated [ 1241.616210][ T5217] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1241.623008][ T5217] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1241.638315][T20991] Cannot find set identified by id 0 to match [ 1241.750771][T20995] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1242.976296][ T5925] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1243.151401][ T5925] usb 5-1: config 0 has no interfaces? [ 1243.496063][ T5925] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1243.521947][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.615974][ T5925] usb 5-1: Product: syz [ 1243.640748][ T5925] usb 5-1: Manufacturer: syz [ 1243.662509][ T5925] usb 5-1: SerialNumber: syz [ 1243.707287][ T5925] usb 5-1: config 0 descriptor?? [ 1243.948697][T21019] program syz.4.4116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1244.050859][T21037] xt_hashlimit: max too large, truncated to 1048576 [ 1244.061397][T21037] No such timeout policy "syz1" [ 1244.140726][T21034] netlink: 'syz.2.4121': attribute type 1 has an invalid length. [ 1244.209414][T21034] bond1: entered promiscuous mode [ 1244.232033][T21034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1244.355727][ T5925] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1244.515672][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1244.555078][ T5925] usb 4-1: config 2 has an invalid interface number: 32 but max is 3 [ 1244.570450][ T5925] usb 4-1: config 2 has an invalid interface number: 55 but max is 3 [ 1244.583662][ T5925] usb 4-1: config 2 has an invalid interface number: 196 but max is 3 [ 1244.609630][T21035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1244.634372][ T5925] usb 4-1: config 2 has no interface number 1 [ 1244.651883][ T5925] usb 4-1: config 2 has no interface number 2 [ 1244.668943][T21035] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1244.671956][T21045] fuse: Unknown parameter '' [ 1244.690309][ T5925] usb 4-1: config 2 has no interface number 3 [ 1244.701897][ T5925] usb 4-1: config 2 interface 32 has no altsetting 0 [ 1244.802646][T21035] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1244.813608][ T5925] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1244.852033][ T5925] usb 4-1: config 2 interface 55 has no altsetting 0 [ 1244.868428][ T5925] usb 4-1: config 2 interface 196 has no altsetting 0 [ 1244.889530][ T5925] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 1244.895580][T21035] bond1: (slave ip6gre1): making interface the new active one [ 1244.914594][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.934242][T21035] ip6gre1: entered promiscuous mode [ 1244.949189][ T5925] usb 4-1: Product: syz [ 1244.953347][ T5925] usb 4-1: Manufacturer: syz [ 1244.988136][T21035] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1245.093820][ T5925] usb 4-1: SerialNumber: syz [ 1245.518957][T21057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1245.607014][T10386] usb 5-1: USB disconnect, device number 69 [ 1245.658564][T21057] program syz.2.4130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1245.678722][T21057] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1245.718220][ T5925] usb 4-1: USB disconnect, device number 81 [ 1245.884476][T10076] udevd[10076]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1246.186521][T10386] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1246.218985][T21073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.321331][T21062] udevd[21062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.55/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1246.351294][T21067] udevd[21067]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.196/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1246.391481][T10386] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.410715][T10386] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1246.482226][T10386] usb 2-1: config 1 has no interface number 0 [ 1246.535311][T10386] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.581390][T10386] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.598163][T10386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.608794][T10386] usb 2-1: Product: syz [ 1246.612998][T10386] usb 2-1: Manufacturer: syz [ 1246.623069][T10386] usb 2-1: SerialNumber: syz [ 1246.738930][T10386] usb 2-1: selecting invalid altsetting 1 [ 1246.924532][T18331] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1246.984333][T21060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.998498][T21060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.075331][T18331] usb 1-1: device descriptor read/64, error -71 [ 1247.182013][T10386] cdc_ncm 2-1:1.1: bind() failure [ 1247.273487][T10386] usb 2-1: USB disconnect, device number 103 [ 1247.356964][T18331] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1247.509493][T18331] usb 1-1: device descriptor read/64, error -71 [ 1247.527942][T21099] ptrace attach of "./syz-executor exec"[16513] was attempted by "./syz-executor exec"[21099] [ 1247.540543][T21099] xt_cgroup: invalid path, errno=-2 [ 1247.629497][T21101] IPVS: length: 228 != 24 [ 1247.678799][T18331] usb usb1-port1: attempt power cycle [ 1248.032881][T21107] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1248.055657][T18331] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1248.055701][T10386] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1248.087773][T18331] usb 1-1: device descriptor read/8, error -71 [ 1248.286382][T10386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.297098][T10386] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1248.312998][T10386] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1248.336284][T18331] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1248.356757][ T5925] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1248.372132][T10386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.380104][T21112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1248.380692][T18331] usb 1-1: device descriptor read/8, error -71 [ 1248.455242][T10386] usb 2-1: Product: syz [ 1248.461678][T10386] usb 2-1: Manufacturer: syz [ 1248.479946][T10386] usb 2-1: SerialNumber: syz [ 1248.504828][T10386] usb 2-1: config 0 descriptor?? [ 1248.531653][T10386] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1248.535819][T18331] usb usb1-port1: unable to enumerate USB device [ 1248.542230][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.583177][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.593800][T10386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1248.609817][T10386] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1248.620500][T10386] usb 2-1: media controller created [ 1248.630149][ T5925] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1248.640134][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1248.657562][ T5925] usb 3-1: SerialNumber: syz [ 1248.696031][T10386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1248.863067][T10386] DVB: Unable to find symbol tda10046_attach() [ 1248.877998][T10386] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1248.888286][T10386] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1248.932793][ T5925] usb 3-1: 0:2 : does not exist [ 1248.949899][T10386] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1249.041007][T10386] usb 2-1: USB disconnect, device number 104 [ 1249.076018][ T5925] usb 3-1: USB disconnect, device number 68 [ 1249.193649][T21063] udevd[21063]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1249.581364][T21140] fuse: Unknown parameter 'userÿo.HÄœO&Øí²@(EÙñƒ6jÙâÌRMÛZLÊ;½ê°ŠRÝ»¯1 eM” áa‚š‰a£¢CgÀ–xÄD—¯ëu7p‡ [ 1249.581364][T21140] ×PhÒ]Ñ0ü‰õ] ÅË-`¢«•Ø ·f'2|X*N4N>˽ªæê¸Á}. f˜úã @ªÑÅFnÞÏŸ‹í5ÝÍ€ä5³c™êæíÅþ„içy›pé' [ 1250.269871][T21154] ptrace attach of "./syz-executor exec"[17434] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/cec# 8   \x09   èð   !  þ?  I\x0b    /dev/media#  ( ‹ %     [ 1252.295771][T18323] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1252.654436][T21183] gretap0: entered promiscuous mode [ 1252.726277][T21183] vlan2: entered promiscuous mode [ 1252.918949][T18323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.932499][T18323] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1252.944579][T18323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.027641][T18323] usb 3-1: config 0 descriptor?? [ 1253.074214][T18323] usb 3-1: bad CDC descriptors [ 1253.389672][ T5918] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1253.592989][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 1253.620108][ T5918] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1253.822314][ T5918] usb 4-1: config 0 has no interface number 0 [ 1254.048009][ T5918] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1254.174389][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.185886][ T5918] usb 4-1: Product: syz [ 1254.192498][ T5918] usb 4-1: Manufacturer: syz [ 1254.215681][ T5918] usb 4-1: SerialNumber: syz [ 1254.290979][ T5918] usb 4-1: config 0 descriptor?? [ 1254.501790][T21195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.511536][T21195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.555349][ T5918] radio-si470x 4-1:0.35: this is not a si470x device. [ 1254.713182][ T5925] usb 3-1: USB disconnect, device number 69 [ 1254.768795][ T5918] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1254.865653][ T5918] usb 4-1: USB disconnect, device number 82 [ 1255.016625][T10386] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 1255.111926][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4173'. [ 1255.159230][T21216] loop2: detected capacity change from 0 to 7 [ 1255.173373][T21216] Dev loop2: unable to read RDB block 7 [ 1255.181511][T21216] loop2: AHDI p1 p2 p3 [ 1255.189705][T10386] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 1255.207253][T10386] usb 2-1: config 150 has no interface number 0 [ 1255.223821][T10386] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1255.231083][T21216] loop2: partition table partially beyond EOD, truncated [ 1255.295470][T21216] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1255.323026][T10386] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1255.342984][T10386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.362410][T21216] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1255.409334][T10386] usb 2-1: Product: syz [ 1255.463143][T10386] usb 2-1: Manufacturer: syz [ 1255.484852][T10386] usb 2-1: SerialNumber: syz [ 1256.155709][ T5932] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1256.236685][ T5918] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1256.316122][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 1256.324354][ T5932] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1256.334543][ T5932] usb 4-1: config 0 has no interface number 0 [ 1256.347450][ T5932] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1256.358855][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.367263][ T5918] usb 3-1: device descriptor read/64, error -71 [ 1256.421274][ T5932] usb 4-1: Product: syz [ 1256.430579][ T5932] usb 4-1: Manufacturer: syz [ 1256.437976][ T5932] usb 4-1: SerialNumber: syz [ 1256.463013][ T5932] usb 4-1: config 0 descriptor?? [ 1256.484781][ T5932] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1256.625859][ T5918] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1256.704948][ T5932] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1256.796325][ T5918] usb 3-1: device descriptor read/64, error -71 [ 1256.842506][ T5932] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1256.917182][ T5918] usb usb3-port1: attempt power cycle [ 1256.958537][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1257.019091][ T5932] usb 4-1: USB disconnect, device number 83 [ 1257.123977][ T5925] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1257.144036][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1257.201383][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1257.253690][ T5932] quatech2 4-1:0.51: device disconnected [ 1257.289728][ T5925] usb 1-1: config 0 has no interfaces? [ 1257.296806][ T5918] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1257.340683][ T5925] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1257.355821][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.369424][ T5918] usb 3-1: device descriptor read/8, error -71 [ 1257.402629][ T5925] usb 1-1: Product: syz [ 1257.418655][ T5925] usb 1-1: Manufacturer: syz [ 1257.434639][ T5925] usb 1-1: SerialNumber: syz [ 1257.467148][ T5925] usb 1-1: config 0 descriptor?? [ 1257.635601][ T5918] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1257.660990][ T5918] usb 3-1: device descriptor read/8, error -71 [ 1257.763347][T21246] loop6: detected capacity change from 0 to 63 [ 1257.787821][ T5918] usb usb3-port1: unable to enumerate USB device [ 1257.871546][T21063] buffer_io_error: 18 callbacks suppressed [ 1257.871559][T21063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1258.016789][T21063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1258.025596][T21063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1258.039465][T21063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1258.051167][T21063] Buffer I/O error on dev loop6, logical block 0, async page read [ 1258.165945][T10386] usb 2-1: USB disconnect, device number 105 [ 1258.186144][ T5918] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1258.336400][ T5918] usb 5-1: device descriptor read/64, error -71 [ 1258.576185][ T5918] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1258.705387][ T5918] usb 5-1: device descriptor read/64, error -71 [ 1258.816257][ T5918] usb usb5-port1: attempt power cycle [ 1259.156319][ T5918] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1259.178110][ T5918] usb 5-1: device descriptor read/8, error -71 [ 1259.208257][ T30] kauditd_printk_skb: 1183 callbacks suppressed [ 1259.208275][ T30] audit: type=1326 audit(1752974614.507:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21263 comm="syz.2.4188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7ead8e9a9 code=0x0 [ 1259.416587][ T5918] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1259.446501][ T5918] usb 5-1: device descriptor read/8, error -71 [ 1259.556150][ T5918] usb usb5-port1: unable to enumerate USB device [ 1259.586621][ T5932] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1260.196339][ T5918] usb 1-1: USB disconnect, device number 101 [ 1261.265090][T21291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4199'. [ 1262.338949][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1262.360031][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1262.375752][ T5932] usb 2-1: can't read configurations, error -71 [ 1262.787475][T18323] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1263.001908][T18323] usb 3-1: Using ep0 maxpacket: 8 [ 1263.051188][T18323] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1263.076731][T18323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.103811][T18323] usb 3-1: Product: syz [ 1263.130861][T18323] usb 3-1: Manufacturer: syz [ 1263.144018][T18323] usb 3-1: SerialNumber: syz [ 1263.153326][T18323] usb 3-1: config 0 descriptor?? [ 1263.177894][T18323] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1263.630723][T21322] netlink: 'syz.3.4208': attribute type 61 has an invalid length. [ 1263.640937][T21322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.860437][T21325] trusted_key: encrypted_key: master key parameter '' is invalid [ 1264.224204][T21303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.233275][T21303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.328698][T18331] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1264.602851][T21339] Invalid logical block size (-2) [ 1264.820342][T21341] input: syz1 as /devices/virtual/input/input102 [ 1265.026698][T18331] usb 1-1: device descriptor read/64, error -71 [ 1265.330238][T18329] usb 3-1: USB disconnect, device number 74 [ 1265.395421][T18331] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1265.588897][T18331] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1265.666086][T18331] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1265.735383][T18331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1265.784534][T18331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1265.862905][T18331] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1265.943616][T18331] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1265.953235][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4220'. [ 1265.968413][T18331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.996447][T18331] usb 1-1: Product: syz [ 1266.000661][T18331] usb 1-1: Manufacturer: syz [ 1266.015054][T21352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.024019][T18331] usb 1-1: SerialNumber: syz [ 1266.266410][T18331] usb 1-1: config 0 descriptor?? [ 1266.380429][T18331] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input103 [ 1266.611775][T18323] usb 1-1: USB disconnect, device number 103 [ 1266.725721][T18331] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1266.775445][T18329] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1266.888872][T18331] usb 4-1: Using ep0 maxpacket: 32 [ 1266.914375][T18331] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1266.936884][T18331] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1266.956802][T18329] usb 3-1: Using ep0 maxpacket: 16 [ 1266.969012][T18331] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1266.983513][T18329] usb 3-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.026844][T18331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1267.045219][T18329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1267.063835][T18331] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1267.073693][T18329] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1267.106961][T18329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.115133][T18331] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1267.142814][T18329] usb 3-1: config 0 descriptor?? [ 1267.152470][T18331] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1267.161942][T18331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.179352][T18331] usb 4-1: config 0 descriptor?? [ 1267.667385][T18329] logitech 0003:046D:C219.002A: unknown main item tag 0x2 [ 1267.683048][T18329] logitech 0003:046D:C219.002A: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.2-1/input0 [ 1267.708134][T18329] logitech 0003:046D:C219.002A: no inputs found [ 1268.044114][T18331] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1268.424533][T18331] usb 3-1: USB disconnect, device number 75 [ 1270.221338][ T5918] usb 4-1: USB disconnect, device number 84 [ 1270.238940][ T5918] usblp0: removed [ 1270.650146][T21413] netlink: 'syz.0.4234': attribute type 10 has an invalid length. [ 1270.660202][T21413] batman_adv: batadv0: Adding interface: team0 [ 1270.666467][T21413] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.691568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1270.698910][T21413] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1270.716486][T21414] netlink: 'syz.0.4234': attribute type 10 has an invalid length. [ 1270.724370][T21414] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4234'. [ 1270.733967][T21414] team0: entered promiscuous mode [ 1270.739525][T21414] team_slave_0: entered promiscuous mode [ 1270.746196][T21414] team_slave_1: entered promiscuous mode [ 1270.756394][T21414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.763703][T21414] batman_adv: batadv0: Interface activated: team0 [ 1270.770905][T21414] batman_adv: batadv0: Interface deactivated: team0 [ 1270.778056][T21414] batman_adv: batadv0: Removing interface: team0 [ 1270.946948][T21414] bridge0: port 3(team0) entered blocking state [ 1270.960825][T21414] bridge0: port 3(team0) entered disabled state [ 1271.055048][T21414] team0: entered allmulticast mode [ 1271.061056][T21414] team_slave_0: entered allmulticast mode [ 1271.069549][T21414] team_slave_1: entered allmulticast mode [ 1271.832806][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1273.960175][T21465] syz.1.4252 (21465): drop_caches: 2 [ 1274.359799][T21469] input: syz0 as /devices/virtual/input/input104 [ 1275.085404][ T5918] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1275.265737][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 1275.273398][ T5918] usb 1-1: config 162 has an invalid interface number: 246 but max is 1 [ 1275.329117][ T5918] usb 1-1: config 162 has an invalid interface number: 245 but max is 1 [ 1275.351715][ T5918] usb 1-1: config 162 has no interface number 0 [ 1275.389854][ T5918] usb 1-1: config 162 has no interface number 1 [ 1275.432955][ T5918] usb 1-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1275.453604][T21470] openvswitch: netlink: Tunnel attr 4104 out of range max 16 [ 1275.460705][ T5918] usb 1-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1275.490568][ T5918] usb 1-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1275.507664][ T5918] usb 1-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1275.523380][ T5918] usb 1-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1275.536317][ T5918] usb 1-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1275.551333][ T5918] usb 1-1: config 162 interface 246 has no altsetting 0 [ 1275.564216][ T5918] usb 1-1: config 162 interface 245 has no altsetting 0 [ 1275.582770][ T5918] usb 1-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1275.592821][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.601318][ T5918] usb 1-1: Product: syz [ 1275.606110][ T5918] usb 1-1: Manufacturer: syz [ 1275.610885][ T5918] usb 1-1: SerialNumber: syz [ 1275.875545][T18329] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1276.026638][T10386] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1276.052921][T18329] usb 4-1: Using ep0 maxpacket: 8 [ 1276.061781][T18329] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1276.081719][T18329] usb 4-1: config 0 has no interface number 0 [ 1276.115407][T18329] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.126953][T18329] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1276.136112][T18329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.148610][T18329] usb 4-1: config 0 descriptor?? [ 1276.186863][T10386] usb 2-1: Using ep0 maxpacket: 16 [ 1276.190284][T18329] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1276.206348][T10386] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1276.229266][T10386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.252810][T10386] usb 2-1: Product: syz [ 1276.264742][T10386] usb 2-1: Manufacturer: syz [ 1276.275091][T10386] usb 2-1: SerialNumber: syz [ 1276.298316][T10386] usb 2-1: config 0 descriptor?? [ 1276.309766][T10386] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1276.334721][T10386] usb 2-1: Detected FT232H [ 1276.401083][T18329] usb 4-1: USB disconnect, device number 85 [ 1276.597425][T10386] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1276.606505][T10386] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1276.622684][T10386] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1276.639039][T10386] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1276.657374][T10386] usb 2-1: USB disconnect, device number 108 [ 1276.678042][T10386] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1276.699875][T10386] ftdi_sio 2-1:0.0: device disconnected [ 1277.431708][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1277.662648][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4276'. [ 1277.918635][ T5918] Bluetooth: failed to set interface 0, alt 0 -22 [ 1277.952264][ T5918] btusb 1-1:162.245: probe with driver btusb failed with error -22 [ 1277.977500][ T5918] usb 1-1: USB disconnect, device number 104 [ 1278.142303][T21536] netlink: 'syz.4.4282': attribute type 1 has an invalid length. [ 1278.260537][T21539] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1278.321198][T20217] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1278.339649][T21536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1278.366472][T21540] input: syz0 as /devices/virtual/input/input105 [ 1278.586196][ T3004] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1278.619830][T21536] veth5: entered promiscuous mode [ 1278.630189][T21536] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 1278.660520][T21539] batman_adv: batadv0: Interface deactivated: dummy0 [ 1278.691648][T21539] batman_adv: batadv0: Removing interface: dummy0 [ 1278.769799][T21539] bridge_slave_0: left allmulticast mode [ 1278.776979][T21539] bridge_slave_0: left promiscuous mode [ 1278.782753][T21539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.797572][T21539] bridge_slave_1: left allmulticast mode [ 1278.804381][T21539] bridge_slave_1: left promiscuous mode [ 1278.812252][T21539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.829854][T21539] bond0: (slave bond_slave_0): Releasing backup interface [ 1278.842277][T21539] bond0: (slave bond_slave_1): Releasing backup interface [ 1278.879636][T21539] team0: Port device team_slave_0 removed [ 1278.894712][T21539] team0: Port device team_slave_1 removed [ 1278.911487][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.920067][T21539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.325015][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.334258][T21539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.351254][T21539] bond1: (slave ip6gretap1): Removing an active aggregator [ 1279.364934][T21539] bond1: (slave ip6gretap1): Releasing backup interface [ 1279.415294][T21539] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 76:17:e9:56:26:62 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1279.493179][T21539] bond1: (slave veth5): Releasing backup interface [ 1280.705861][ T5918] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1280.825265][T18329] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1280.881237][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 1280.910983][ T5918] usb 2-1: config 0 has no interfaces? [ 1280.917595][ T5918] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1280.942561][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.957342][ T5918] usb 2-1: config 0 descriptor?? [ 1281.017546][T18329] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1281.030018][T18329] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1281.040618][T18329] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1281.055203][T18329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.068105][T21562] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1281.088181][T18329] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1281.155463][T18331] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1281.282800][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.305944][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.319110][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.327338][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.339289][T18331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.341878][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.360973][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.373856][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.374849][T18331] usb 5-1: config 0 has no interfaces? [ 1281.391455][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.404392][T21556] netlink: 'syz.1.4286': attribute type 3 has an invalid length. [ 1281.407447][T18331] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1281.464146][T18331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.476004][T18331] usb 5-1: Product: syz [ 1281.495197][T18331] usb 5-1: Manufacturer: syz [ 1281.506074][T18331] usb 5-1: SerialNumber: syz [ 1281.512279][ T5918] usb 4-1: USB disconnect, device number 86 [ 1281.531833][T18331] usb 5-1: config 0 descriptor?? [ 1281.759868][T18331] usb 5-1: USB disconnect, device number 74 [ 1282.525411][T18331] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1282.695757][T18331] usb 4-1: Using ep0 maxpacket: 32 [ 1282.722167][T18331] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 1282.730823][T18331] usb 4-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 1282.745947][T18331] usb 4-1: config 0 has no interface number 0 [ 1282.759287][T18331] usb 4-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1282.773479][T21599] ptrace attach of "./syz-executor exec"[17242] was attempted by "./syz-executor exec"[21599] [ 1282.791822][T18331] usb 4-1: config 0 interface 169 has no altsetting 0 [ 1282.803567][T18331] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1282.821375][T18331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.829897][T18331] usb 4-1: Product: syz [ 1282.834154][T18331] usb 4-1: Manufacturer: syz [ 1282.839666][T18331] usb 4-1: SerialNumber: syz [ 1282.851424][T18331] usb 4-1: config 0 descriptor?? [ 1282.868495][T18331] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1283.168154][T21587] validate_nla: 41 callbacks suppressed [ 1283.168171][T21587] netlink: 'syz.3.4299': attribute type 21 has an invalid length. [ 1283.204462][T21587] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1283.225767][T14743] usb 2-1: USB disconnect, device number 109 [ 1283.252403][T18331] snd-usb-audio 4-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 1283.265108][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1283.357904][T21063] udevd[21063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.424470][T14743] usb 4-1: USB disconnect, device number 87 [ 1283.828164][ T5918] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 1283.925605][T10386] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1284.012630][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1284.024062][ T5918] usb 5-1: config 0 has no interface number 0 [ 1284.040496][ T5918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1284.085780][T10386] usb 1-1: Using ep0 maxpacket: 32 [ 1284.089560][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4310'. [ 1284.091058][ T5918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1284.109053][T21617] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 1284.114933][T10386] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1284.194227][T21617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1284.207063][T10386] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1284.224895][T10386] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1284.244656][ T5918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1284.265836][T10386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1284.284258][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.321248][T10386] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1284.347453][ T5918] usb 5-1: config 0 descriptor?? [ 1284.500058][T10386] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1284.580066][T21609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1284.591459][T10386] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1284.676329][ T5918] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1284.696757][T10386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.895017][T10386] usb 1-1: config 0 descriptor?? [ 1285.230363][T10386] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 105 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1285.389081][T10386] usb 1-1: USB disconnect, device number 105 [ 1285.420893][T10386] usblp1: removed [ 1285.796459][T10386] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1285.956156][T10386] usb 1-1: Using ep0 maxpacket: 32 [ 1285.963365][T10386] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1285.992461][T10386] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1286.063342][T10386] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1286.133455][T10386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1286.257781][T10386] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1286.371952][T10386] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1286.418546][T10386] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1286.464188][T10386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.518390][T10386] usb 1-1: config 0 descriptor?? [ 1286.743402][ T5918] usb 5-1: USB disconnect, device number 75 [ 1286.750666][T10386] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 106 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1286.801788][T10386] usb 1-1: USB disconnect, device number 106 [ 1286.924621][T10386] usblp1: removed [ 1288.186844][T21661] netlink: 'syz.0.4322': attribute type 6 has an invalid length. [ 1289.820989][T21690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4329'. [ 1290.004760][T21689] input: syz0 as /devices/virtual/input/input106 [ 1292.064569][ T30] audit: type=1326 audit(1752974647.357:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21723 comm="syz.1.4343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22cd58e9a9 code=0x0 [ 1292.099791][T21726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1292.195241][T18331] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1292.213160][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4343'. [ 1292.222269][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4343'. [ 1292.237627][T21728] dummy0: entered promiscuous mode [ 1292.506468][T21728] team0: entered promiscuous mode [ 1292.517220][T18331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.528738][T18331] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1292.537404][T21728] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1292.542671][T18331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1292.573785][T18331] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1292.592537][T21731] tipc: Enabling of bearer rejected, failed to enable media [ 1292.601464][T18331] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1292.621402][T18331] usb 4-1: Product: syz [ 1292.627131][T18331] usb 4-1: Manufacturer: syz [ 1292.632236][T18331] usb 4-1: SerialNumber: syz [ 1292.666412][T18331] usb 4-1: config 0 descriptor?? [ 1292.739181][T18331] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1292.908554][T21063] udevd[21063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.988516][T10386] usb 4-1: USB disconnect, device number 88 [ 1294.488337][T21751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1294.957649][T21759] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1294.973966][T21759] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1295.002852][T21759] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1295.080752][T21761] netlink: 'syz.3.4356': attribute type 4 has an invalid length. [ 1295.708158][T21767] bond0: (slave bridge0): Error: Device can not be enslaved while up [ 1296.615501][ T5918] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1296.672658][T21784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4362'. [ 1296.805022][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 1296.913264][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1296.992888][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1297.074143][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1297.103363][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1297.118078][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1297.138061][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.404796][ T5918] usb 4-1: GET_CAPABILITIES returned 0 [ 1297.431067][ T5918] usbtmc 4-1:16.0: can't read capabilities [ 1297.474441][T21792] netlink: 'syz.1.4366': attribute type 9 has an invalid length. [ 1297.492555][T21792] netlink: 'syz.1.4366': attribute type 9 has an invalid length. [ 1297.667847][T21800] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1297.684111][T21800] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1297.702365][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.712438][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.750059][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1297.761679][T21780] usbtmc 4-1:16.0: Unable to send data, error -71 [ 1297.770340][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1297.780023][T21780] usbtmc 4-1:16.0: Unable to send data, error -71 [ 1298.002046][ T5918] usb 4-1: USB disconnect, device number 89 [ 1298.159525][T21811] sctp: [Deprecated]: syz.1.4373 (pid 21811) Use of int in max_burst socket option. [ 1298.159525][T21811] Use struct sctp_assoc_value instead [ 1299.412693][T21836] input: syz0 as /devices/virtual/input/input107 [ 1300.106544][T21861] cgroup: fork rejected by pids controller in /syz3 [ 1300.169432][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.176312][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.446334][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 1302.764076][T22674] QAT: Device 253 not found [ 1303.617020][T22681] loop6: detected capacity change from 0 to 2560 [ 1303.692133][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.726737][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.765360][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.784526][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.813586][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.836005][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.844947][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.860392][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.893014][T22681] ldm_validate_partition_table(): Disk read failed. [ 1303.904261][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.934281][T22681] Buffer I/O error on dev loop6, logical block 0, async page read [ 1303.965084][T22681] Dev loop6: unable to read RDB block 0 [ 1303.985653][T22681] loop6: unable to read partition table [ 1304.012265][T22681] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1304.058762][ T5217] ldm_validate_partition_table(): Disk read failed. [ 1304.068620][ T5217] Dev loop6: unable to read RDB block 0 [ 1304.074443][ T5217] loop6: unable to read partition table [ 1304.767375][T22707] netlink: 12824 bytes leftover after parsing attributes in process `syz.4.4417'. [ 1305.076493][ T30] audit: type=1326 audit(1752974660.367:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1305.166070][ T30] audit: type=1326 audit(1752974660.367:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1305.190494][ T30] audit: type=1326 audit(1752974660.367:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcefe12ab89 code=0x7ffc0000 [ 1305.213716][ T30] audit: type=1326 audit(1752974660.367:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1305.268674][ T30] audit: type=1326 audit(1752974660.367:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcefe12ab89 code=0x7ffc0000 [ 1305.541352][ T30] audit: type=1326 audit(1752974660.367:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcefe12ab89 code=0x7ffc0000 [ 1305.619611][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c291400: rx timeout, send abort [ 1305.631684][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c291400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1305.792646][ T30] audit: type=1326 audit(1752974660.367:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1305.897753][ T30] audit: type=1326 audit(1752974660.367:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1305.940861][ T30] audit: type=1326 audit(1752974660.367:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcefe12ab89 code=0x7ffc0000 [ 1305.965834][ T30] audit: type=1326 audit(1752974660.367:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22676 comm="syz.3.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1306.610081][T22731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1306.619550][T22731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4425'. [ 1307.274196][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1307.294059][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1307.833355][T22762] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1308.910845][T22801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4452'. [ 1308.920255][T22801] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1311.055289][T18328] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1311.347046][T18328] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1311.347079][T18328] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1311.347116][T18328] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1311.347137][T18328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.383693][T22828] tipc: Started in network mode [ 1311.383721][T22828] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1311.383911][T22828] tipc: Enabled bearer , priority 0 [ 1311.872895][T18328] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1311.884533][T18328] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input108 [ 1311.909346][T18328] input: failed to attach handler kbd to device input108, error: -5 [ 1311.974861][T18328] usb 5-1: USB disconnect, device number 76 [ 1312.385982][T18328] tipc: Node number set to 11578026 [ 1312.997201][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1312.997217][ T30] audit: type=1326 audit(1752974668.297:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22851 comm="syz.1.4469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22cd58e9a9 code=0x0 [ 1314.792040][ T30] audit: type=1326 audit(1752974670.087:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.4.4479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f6278e9a9 code=0x0 [ 1315.565713][ T5918] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1315.825985][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1315.881260][ T30] audit: type=1326 audit(1752974671.107:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcefe12ab89 code=0x7ffc0000 [ 1315.903594][ C0] vkms_vblank_simulate: vblank timer overrun [ 1315.917238][ T30] audit: type=1326 audit(1752974671.107:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1315.952721][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.969244][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.015899][ T30] audit: type=1326 audit(1752974671.107:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1316.038315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.044873][ T5918] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1316.061296][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.093614][ T5918] usb 1-1: config 0 descriptor?? [ 1316.134945][ T30] audit: type=1326 audit(1752974671.107:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1316.185096][ T30] audit: type=1326 audit(1752974671.107:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1316.271544][ T30] audit: type=1326 audit(1752974671.107:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1316.296141][ T30] audit: type=1326 audit(1752974671.107:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1316.318552][ C0] vkms_vblank_simulate: vblank timer overrun [ 1316.338881][ T30] audit: type=1326 audit(1752974671.157:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22893 comm="syz.3.4487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefe18e9a9 code=0x7ffc0000 [ 1316.636720][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 1316.642837][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1316.749190][ T5918] usb 1-1: USB disconnect, device number 107 [ 1317.386574][T22914] bridge_slave_0: left allmulticast mode [ 1317.392345][T22914] bridge_slave_0: left promiscuous mode [ 1317.398534][T22914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.457258][T22914] bridge_slave_1: left allmulticast mode [ 1317.462969][T22914] bridge_slave_1: left promiscuous mode [ 1317.470291][T22917] netlink: 'syz.3.4494': attribute type 10 has an invalid length. [ 1317.500083][T22914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.522697][T22914] bond0: (slave bond_slave_0): Releasing backup interface [ 1317.535506][T22914] bond_slave_0: left promiscuous mode [ 1317.543780][T22914] bond0: (slave bond_slave_1): Releasing backup interface [ 1317.555562][T22914] bond_slave_1: left promiscuous mode [ 1317.556084][T22920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4494'. [ 1317.568076][T22914] team_slave_0: left promiscuous mode [ 1317.597876][T22914] team0: Port device team_slave_0 removed [ 1317.606176][T22914] team_slave_1: left promiscuous mode [ 1317.641648][T22914] team0: Port device team_slave_1 removed [ 1317.649018][T22914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.656568][T22914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.664958][T22914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.673705][T22914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.693450][T22917] bond0: left promiscuous mode [ 1317.699854][T22917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.712003][T22917] bond0: entered promiscuous mode [ 1317.757387][T22917] team0: Port device bond0 added [ 1317.813183][T20205] tipc: Resetting bearer [ 1317.826563][T22920] tipc: Resetting bearer [ 1317.960819][T22920] tipc: Disabling bearer [ 1317.967265][T22920] bond0: left promiscuous mode [ 1317.980343][T22920] team0 (unregistering): Port device bond0 removed [ 1318.545458][T18323] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1318.696653][T18323] usb 1-1: Using ep0 maxpacket: 16 [ 1318.722981][T18323] usb 1-1: config 0 has no interfaces? [ 1318.738075][T18323] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1318.747813][T18323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.760261][T18323] usb 1-1: config 0 descriptor?? [ 1319.785367][T18323] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1319.957204][T18323] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.967573][T18323] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1319.986948][T18323] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1320.027227][T18323] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1320.036940][T18323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.063685][T18323] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1320.088042][T18323] usb 4-1: invalid MIDI out EP 0 [ 1320.240241][T22971] netlink: 'syz.4.4517': attribute type 1 has an invalid length. [ 1320.373759][T18323] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1320.388223][T22971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1320.408272][T22973] bond2: (slave wlan0): Opening slave failed [ 1320.462656][T18323] usb 4-1: USB disconnect, device number 90 [ 1320.916231][ T5918] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1321.091381][ T5918] usb 5-1: config 0 has no interfaces? [ 1321.123983][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1321.144929][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.180808][ T5918] usb 5-1: Product: syz [ 1321.196553][ T5918] usb 5-1: Manufacturer: syz [ 1321.236625][T18323] usb 1-1: USB disconnect, device number 108 [ 1321.286031][ T5918] usb 5-1: SerialNumber: syz [ 1321.300782][ T5918] usb 5-1: config 0 descriptor?? [ 1322.106468][T22998] fuse: Unknown parameter '0x00000000000000040000000000000000000000000000000000000000' [ 1323.230697][T23009] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 1323.561635][ T5925] usb 5-1: USB disconnect, device number 77 [ 1324.355208][T18329] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1324.535484][T18329] usb 5-1: Using ep0 maxpacket: 32 [ 1324.550454][T18329] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1324.564126][T18329] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1324.580984][T18329] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1324.604167][T18329] usb 5-1: Product: syz [ 1324.661145][T18329] usb 5-1: Manufacturer: syz [ 1324.680066][T18329] usb 5-1: SerialNumber: syz [ 1324.713353][T18329] usb 5-1: config 0 descriptor?? [ 1324.733943][T23024] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1324.773386][T18329] hub 5-1:0.0: bad descriptor, ignoring hub [ 1324.805466][T18329] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1325.615082][T23034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.627067][T23034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.076575][ T5918] raw-gadget.0 gadget.4: failed to queue suspend event [ 1326.145880][T23024] raw-gadget.0 gadget.4: failed to queue resume event [ 1326.166836][ T5918] raw-gadget.0 gadget.4: failed to queue suspend event [ 1326.219500][T23034] raw-gadget.0 gadget.4: failed to queue disconnect event [ 1326.450624][T23064] netlink: 'syz.0.4548': attribute type 25 has an invalid length. [ 1326.473701][T23064] netlink: 'syz.0.4548': attribute type 3 has an invalid length. [ 1327.116689][T23085] netlink: 548 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1327.145536][T23085] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 1327.155021][T23085] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 1328.514687][T23089] syzkaller1: entered promiscuous mode [ 1328.524760][T23089] syzkaller1: entered allmulticast mode [ 1329.470265][ T5918] usb 5-1: USB disconnect, device number 78 [ 1332.846341][T23175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1335.676702][ T5918] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1335.847564][ T5918] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 1335.916011][ T5918] usb 2-1: config 0 has no interface number 0 [ 1335.922209][ T5918] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 1335.945566][T18320] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1335.986276][T23214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1336.035792][ T5918] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1336.047718][ T5918] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1336.076529][ T5918] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1336.105717][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.113747][ T5918] usb 2-1: Product: syz [ 1336.118999][ T5918] usb 2-1: Manufacturer: syz [ 1336.123621][ T5918] usb 2-1: SerialNumber: syz [ 1336.143712][ T5918] usb 2-1: config 0 descriptor?? [ 1336.151301][T18320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.163907][T23187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1336.179694][T18320] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1336.189291][T18320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.201104][T18320] usb 1-1: config 0 descriptor?? [ 1336.209293][T23187] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1336.261699][T23218] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4596'. [ 1336.425271][T18328] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1336.509415][ T5918] qmi_wwan 2-1:0.197: probe with driver qmi_wwan failed with error -71 [ 1336.650135][T18328] usb 4-1: Using ep0 maxpacket: 8 [ 1336.663495][ T5918] usb 2-1: USB disconnect, device number 110 [ 1336.670199][T18328] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1336.683974][T18328] usb 4-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 1336.704326][T18328] usb 4-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 1336.718313][T18320] logitech 0003:046D:C50C.002B: unbalanced collection at end of report description [ 1336.719118][T18320] logitech 0003:046D:C50C.002B: parse failed [ 1336.719214][T18320] logitech 0003:046D:C50C.002B: probe with driver logitech failed with error -22 [ 1336.760975][T18328] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1336.773355][T18328] usb 4-1: string descriptor 0 read error: -22 [ 1336.783587][T18328] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1336.797559][T18328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.864151][T18328] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1336.880156][T18328] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1336.916322][T18328] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1336.933297][T18329] usb 1-1: USB disconnect, device number 109 [ 1336.955317][T18328] usb 4-1: media controller created [ 1337.007175][T18328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.095746][T23214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.105770][T23214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.177575][T18328] zl10353_read_register: readreg error (reg=127, ret==0) [ 1337.376917][T18328] usb 4-1: USB disconnect, device number 91 [ 1338.909273][T23263] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1339.116376][T23263] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1339.728562][T18320] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1339.907222][T18320] usb 4-1: Using ep0 maxpacket: 16 [ 1339.953018][T18320] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1339.977508][T18320] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1340.013123][T18320] usb 4-1: can't read configurations, error -71 [ 1340.431716][T23290] ptrace attach of "./syz-executor exec"[17579] was attempted by "./syz-executor exec"[23290] [ 1340.448876][T23290] xt_cgroup: invalid path, errno=-2 [ 1342.532922][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1342.532938][ T30] audit: type=1326 audit(1752974697.827:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23319 comm="syz.0.4634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff43fb8e9a9 code=0x0 [ 1342.589347][T23322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1342.598603][T23322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1342.612271][T23322] dummy0: entered promiscuous mode [ 1342.619830][T23322] dummy0: left promiscuous mode [ 1344.326457][T18323] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1344.597482][T18323] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.611291][T18323] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1344.620418][T18323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.682446][T18323] usb 1-1: config 0 descriptor?? [ 1344.702601][T18323] usb 1-1: bad CDC descriptors [ 1346.591550][T18323] usb 1-1: USB disconnect, device number 110 [ 1361.600273][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.607339][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1420.476124][ T31] INFO: task kworker/0:6:5932 blocked for more than 143 seconds. [ 1420.483917][ T31] Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 [ 1420.493569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1420.502567][ T31] task:kworker/0:6 state:D stack:20792 pid:5932 tgid:5932 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1420.514608][ T31] Workqueue: events rfkill_sync_work [ 1420.520045][ T31] Call Trace: [ 1420.523331][ T31] [ 1420.527553][ T31] __schedule+0x16f5/0x4d00 [ 1420.532085][ T31] ? schedule+0x165/0x360 [ 1420.536484][ T31] ? __pfx___schedule+0x10/0x10 [ 1420.541347][ T31] ? schedule+0x91/0x360 [ 1420.545639][ T31] schedule+0x165/0x360 [ 1420.549809][ T31] schedule_preempt_disabled+0x13/0x30 [ 1420.555537][ T31] __mutex_lock+0x724/0xe80 [ 1420.560308][ T31] ? __lock_acquire+0xab9/0xd20 [ 1420.566329][ T31] ? __mutex_lock+0x51b/0xe80 [ 1420.571044][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1420.576439][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1420.581476][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1420.586721][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1420.592616][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1420.599063][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1420.604805][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1420.611059][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1420.616855][ T31] rfkill_set_block+0x1cf/0x440 [ 1420.621729][ T31] rfkill_sync_work+0x114/0x200 [ 1420.626663][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1420.632390][ T31] process_scheduled_works+0xae1/0x17b0 [ 1420.638080][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1420.644074][ T31] worker_thread+0x8a0/0xda0 [ 1420.649633][ T31] kthread+0x70e/0x8a0 [ 1420.653701][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1420.658858][ T31] ? __pfx_kthread+0x10/0x10 [ 1420.663465][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1420.668698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1420.673901][ T31] ? __pfx_kthread+0x10/0x10 [ 1420.678567][ T31] ret_from_fork+0x3fc/0x770 [ 1420.683166][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1420.689442][ T31] ? __switch_to_asm+0x39/0x70 [ 1420.694219][ T31] ? __switch_to_asm+0x33/0x70 [ 1420.699030][ T31] ? __pfx_kthread+0x10/0x10 [ 1420.703626][ T31] ret_from_fork_asm+0x1a/0x30 [ 1420.708482][ T31] [ 1420.711556][ T31] INFO: task kworker/1:13:18332 blocked for more than 143 seconds. [ 1420.719616][ T31] Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 [ 1420.728213][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1420.736962][ T31] task:kworker/1:13 state:D stack:20200 pid:18332 tgid:18332 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1420.749514][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1420.756258][ T31] Call Trace: [ 1420.759536][ T31] [ 1420.762452][ T31] __schedule+0x16f5/0x4d00 [ 1420.768142][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1420.773531][ T31] ? schedule+0x165/0x360 [ 1420.777914][ T31] ? __pfx___schedule+0x10/0x10 [ 1420.782775][ T31] ? schedule+0x91/0x360 [ 1420.787093][ T31] schedule+0x165/0x360 [ 1420.791252][ T31] schedule_preempt_disabled+0x13/0x30 [ 1420.796847][ T31] __mutex_lock+0x724/0xe80 [ 1420.801377][ T31] ? look_up_lock_class+0x74/0x170 [ 1420.807662][ T31] ? __mutex_lock+0x51b/0xe80 [ 1420.812355][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1420.818681][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1420.823722][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1420.829488][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1420.835272][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1420.841358][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1420.848429][ T31] process_scheduled_works+0xae1/0x17b0 [ 1420.854033][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1420.860073][ T31] worker_thread+0x8a0/0xda0 [ 1420.864767][ T31] kthread+0x70e/0x8a0 [ 1420.868912][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1420.874031][ T31] ? __pfx_kthread+0x10/0x10 [ 1420.879004][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1420.884355][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1420.890751][ T31] ? __pfx_kthread+0x10/0x10 [ 1420.895425][ T31] ret_from_fork+0x3fc/0x770 [ 1420.900040][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1420.905246][ T31] ? __switch_to_asm+0x39/0x70 [ 1420.910035][ T31] ? __switch_to_asm+0x33/0x70 [ 1420.914803][ T31] ? __pfx_kthread+0x10/0x10 [ 1420.919449][ T31] ret_from_fork_asm+0x1a/0x30 [ 1420.924232][ T31] [ 1420.928485][ T31] INFO: task syz.2.4231:21391 blocked for more than 143 seconds. [ 1420.936434][ T31] Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 [ 1420.944061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1420.952765][ T31] task:syz.2.4231 state:D stack:26760 pid:21391 tgid:21390 ppid:18768 task_flags:0x400040 flags:0x00004004 [ 1420.964787][ T31] Call Trace: [ 1420.969416][ T31] [ 1420.972371][ T31] __schedule+0x16f5/0x4d00 [ 1420.976975][ T31] ? schedule+0x165/0x360 [ 1420.981316][ T31] ? __pfx___schedule+0x10/0x10 [ 1420.986440][ T31] ? schedule+0x91/0x360 [ 1420.990705][ T31] schedule+0x165/0x360 [ 1420.994874][ T31] schedule_timeout+0x9a/0x270 [ 1420.999705][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1421.005134][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1421.010349][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.016776][ T31] ? wait_for_completion+0x267/0x5d0 [ 1421.022135][ T31] wait_for_completion+0x2bf/0x5d0 [ 1421.027348][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1421.032994][ T31] ? __flush_work+0xd2/0xbc0 [ 1421.037818][ T31] ? __flush_work+0xd2/0xbc0 [ 1421.042431][ T31] __flush_work+0x9b9/0xbc0 [ 1421.047022][ T31] ? __flush_work+0xd2/0xbc0 [ 1421.051646][ T31] ? __pfx___flush_work+0x10/0x10 [ 1421.057417][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1421.062713][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1421.067863][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1421.073543][ T31] __cancel_work_sync+0xbe/0x110 [ 1421.078547][ T31] rfkill_unregister+0x92/0x220 [ 1421.083407][ T31] nfc_unregister_device+0x96/0x2a0 [ 1421.088666][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1421.094398][ T31] virtual_ncidev_close+0x56/0x90 [ 1421.100588][ T31] __fput+0x44c/0xa70 [ 1421.104604][ T31] fput_close_sync+0x119/0x200 [ 1421.109460][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1421.114804][ T31] __x64_sys_close+0x7f/0x110 [ 1421.120437][ T31] do_syscall_64+0xfa/0x3b0 [ 1421.124992][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.130798][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.137438][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1421.142127][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.148692][ T31] RIP: 0033:0x7ff7ead8e9a9 [ 1421.153154][ T31] RSP: 002b:00007ff7ebccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1421.162180][ T31] RAX: ffffffffffffffda RBX: 00007ff7eafb5fa0 RCX: 00007ff7ead8e9a9 [ 1421.170439][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1421.179090][ T31] RBP: 00007ff7eae10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1421.187130][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1421.195254][ T31] R13: 0000000000000000 R14: 00007ff7eafb5fa0 R15: 00007ff7eb0dfa28 [ 1421.203245][ T31] [ 1421.206354][ T31] [ 1421.206354][ T31] Showing all locks held in the system: [ 1421.214068][ T31] 1 lock held by khungtaskd/31: [ 1421.220060][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1421.230004][ T31] 2 locks held by getty/5609: [ 1421.234676][ T31] #0: ffff8880351420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1421.244604][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1421.254760][ T31] 4 locks held by kworker/0:6/5932: [ 1421.260988][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1421.272226][ T31] #1: ffffc9000454fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1421.284981][ T31] #2: ffffffff8f7f7568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1421.296438][ T31] #3: ffff88804c17e100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1421.306247][ T31] 3 locks held by kworker/1:12/18331: [ 1421.311618][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1421.322687][ T31] #1: ffffc9000dc47bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1421.333790][ T31] #2: ffffffff8f7f7568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 1421.344460][ T31] 3 locks held by kworker/1:13/18332: [ 1421.349891][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1421.361065][ T31] #1: ffffc9000dc57bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1421.374604][ T31] #2: ffffffff8f7f7568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1421.387029][ T31] 2 locks held by kworker/u8:16/20217: [ 1421.392488][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1421.402511][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x314/0x6d0 [ 1421.413962][ T31] 1 lock held by syz.2.4231/21391: [ 1421.419112][ T31] #0: ffff88804c17e100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1421.430024][ T31] 2 locks held by syz-executor/21611: [ 1421.435505][ T31] #0: ffff8880217b9918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1421.445600][ T31] #1: ffffffff8f7f7568 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1421.455603][ T31] [ 1421.457943][ T31] ============================================= [ 1421.457943][ T31] [ 1421.467731][ T31] NMI backtrace for cpu 1 [ 1421.467745][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1421.467772][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1421.467782][ T31] Call Trace: [ 1421.467790][ T31] [ 1421.467798][ T31] dump_stack_lvl+0x189/0x250 [ 1421.467819][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1421.467844][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1421.467864][ T31] ? __pfx__printk+0x10/0x10 [ 1421.467898][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1421.467926][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1421.467947][ T31] ? _printk+0xcf/0x120 [ 1421.467973][ T31] ? __pfx__printk+0x10/0x10 [ 1421.467998][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1421.468016][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1421.468043][ T31] watchdog+0xfee/0x1030 [ 1421.468061][ T31] ? watchdog+0x1de/0x1030 [ 1421.468085][ T31] kthread+0x70e/0x8a0 [ 1421.468111][ T31] ? __pfx_watchdog+0x10/0x10 [ 1421.468126][ T31] ? __pfx_kthread+0x10/0x10 [ 1421.468150][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1421.468168][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.468184][ T31] ? __pfx_kthread+0x10/0x10 [ 1421.468207][ T31] ret_from_fork+0x3fc/0x770 [ 1421.468229][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1421.468253][ T31] ? __switch_to_asm+0x39/0x70 [ 1421.468273][ T31] ? __switch_to_asm+0x33/0x70 [ 1421.468293][ T31] ? __pfx_kthread+0x10/0x10 [ 1421.468316][ T31] ret_from_fork_asm+0x1a/0x30 [ 1421.468353][ T31] [ 1421.468359][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1421.626333][ C0] NMI backtrace for cpu 0 [ 1421.626350][ C0] CPU: 0 UID: 0 PID: 20205 Comm: kworker/u8:5 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1421.626370][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1421.626381][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1421.626403][ C0] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 1421.626426][ C0] Code: 08 65 8b 05 f6 1d 32 07 65 8b 0d eb 1d 32 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d cb 1d 32 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 [ 1421.626440][ C0] RSP: 0018:ffffc9000bce73d8 EFLAGS: 00000046 [ 1421.626453][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 94bc16dbffa8cc00 [ 1421.626464][ C0] RDX: 0000000000000004 RSI: ffffffff8db83fd2 RDI: ffffffff8be28d40 [ 1421.626476][ C0] RBP: ffff88801ffc0b90 R08: ffffc9000bce7670 R09: 0000000000000000 [ 1421.626488][ C0] R10: ffffc9000bce7598 R11: fffff5200179ceb5 R12: 0000000000000004 [ 1421.626500][ C0] R13: 0000000000000004 R14: ffffffff8e13f0e0 R15: ffff88801ffc0000 [ 1421.626512][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 1421.626525][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1421.626537][ C0] CR2: 00005613bd6ed168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1421.626551][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1421.626561][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1421.626572][ C0] Call Trace: [ 1421.626579][ C0] [ 1421.626586][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1421.626606][ C0] lock_release+0x27a/0x3e0 [ 1421.626623][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1421.626641][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1421.626658][ C0] unwind_next_frame+0x19a9/0x2390 [ 1421.626678][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1421.626695][ C0] ? stack_trace_save+0x9c/0xe0 [ 1421.626717][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1421.626739][ C0] arch_stack_walk+0x11c/0x150 [ 1421.626760][ C0] ? kasan_save_track+0x3e/0x80 [ 1421.626781][ C0] stack_trace_save+0x9c/0xe0 [ 1421.626801][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1421.626825][ C0] kasan_save_track+0x3e/0x80 [ 1421.626863][ C0] ? __alloc_skb+0x112/0x2d0 [ 1421.626885][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1421.626906][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1421.626928][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1421.626949][ C0] ? __alloc_skb+0x112/0x2d0 [ 1421.626970][ C0] __alloc_skb+0x112/0x2d0 [ 1421.626998][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 1421.627021][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1421.627039][ C0] process_scheduled_works+0xae1/0x17b0 [ 1421.627068][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1421.627092][ C0] worker_thread+0x8a0/0xda0 [ 1421.627119][ C0] kthread+0x70e/0x8a0 [ 1421.627141][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1421.627158][ C0] ? __pfx_kthread+0x10/0x10 [ 1421.627180][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1421.627194][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.627210][ C0] ? __pfx_kthread+0x10/0x10 [ 1421.627231][ C0] ret_from_fork+0x3fc/0x770 [ 1421.627248][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1421.627266][ C0] ? __switch_to_asm+0x39/0x70 [ 1421.627286][ C0] ? __switch_to_asm+0x33/0x70 [ 1421.627305][ C0] ? __pfx_kthread+0x10/0x10 [ 1421.627325][ C0] ret_from_fork_asm+0x1a/0x30 [ 1421.627352][ C0] [ 1421.628502][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1421.967253][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 1421.979036][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1421.989075][ T31] Call Trace: [ 1421.992335][ T31] [ 1421.995251][ T31] dump_stack_lvl+0x99/0x250 [ 1421.999823][ T31] ? __asan_memcpy+0x40/0x70 [ 1422.004392][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1422.009571][ T31] ? __pfx__printk+0x10/0x10 [ 1422.014145][ T31] panic+0x2db/0x790 [ 1422.018021][ T31] ? __pfx_panic+0x10/0x10 [ 1422.022415][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1422.028206][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1422.033564][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1422.039703][ T31] watchdog+0x102d/0x1030 [ 1422.044010][ T31] ? watchdog+0x1de/0x1030 [ 1422.048424][ T31] kthread+0x70e/0x8a0 [ 1422.052494][ T31] ? __pfx_watchdog+0x10/0x10 [ 1422.057158][ T31] ? __pfx_kthread+0x10/0x10 [ 1422.061736][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1422.066913][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1422.072088][ T31] ? __pfx_kthread+0x10/0x10 [ 1422.076667][ T31] ret_from_fork+0x3fc/0x770 [ 1422.081242][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1422.086334][ T31] ? __switch_to_asm+0x39/0x70 [ 1422.091077][ T31] ? __switch_to_asm+0x33/0x70 [ 1422.095821][ T31] ? __pfx_kthread+0x10/0x10 [ 1422.100403][ T31] ret_from_fork_asm+0x1a/0x30 [ 1422.105171][ T31] [ 1422.108421][ T31] Kernel Offset: disabled [ 1422.112731][ T31] Rebooting in 86400 seconds..