last executing test programs: 15.959503246s ago: executing program 2 (id=1908): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="435d61e778eb38a7b38869e147b2bb2d8ea5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8b8112944aeb64dbc7a6b781ab8a46acc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c359d609abd84ddbe5264f73200c67d8f9742d0fb8fe27a59cc395ba580c12f6e995da91c450460e96e5801993412ce48f7c3539cfa66dc31d13fd21e94d2c19485d62b70190b3cbf094053577ae87c77fbdce5e0910e1ef98a6a2645f30c1bd561f7d025f6c7410d24fc39053", 0xbf}, {&(0x7f0000000180)='\a', 0x1}, {&(0x7f0000000ac0)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f", 0xd7}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaebac1b657fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a180aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a460000000000000000", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="1fdefa76cc6f846bf5a6f3b74b191ce27bc5b145a480c604562b1bc28be721537013d7c772b5881f004b0951e7dc2a2653", 0x31}, {&(0x7f0000000780)="925f1604a8e44f732be04c9b3ba6e8e512ca21f2a68d2366d2f3679f622fd951bfd4abf2c4d375a3abe9b8c0e0424914f84c5e5e03d3f1d0eb1abe6160216a7874eb3e99cdc38aef3c109b347a1866813e107eed3a822035c26a06e625ea5d2791de4914862f3bc38c533b7baaf2ad14522badffd923cd385b4993b0537d05efc4c54197b6ea1c60cf8cdb68c44dab2feaa1de1fe7c24fe326095183850f9e6e13d5eccb9a61afa9c369b3", 0xab}, {&(0x7f00000019c0)="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", 0x127}, {&(0x7f0000000680)="672733c5976ca6c31adb6c24db79c83e9b45d13a8e1ea257366fb3bfa967046e07eece84a260fa004d3fc2b710bbd0b1421980ddc2dfed1b54290769b373e99fbfcdaaf00ddbab81d104994815c477e3cb64d14282eec0e67db26a5ef94dc7a9c740d7e24b53c4b889c8ae93b3fb971ed3a457b112ff61055569604c6232a3c6f9e064f57b9131499992d33412244750adf6e7a3e1bc4db5c02e1bddf4517245abcbb615f1d5ed6ba966ba86992a0a6d170ec160d68df28491389f9f292524216e", 0xc1}, {&(0x7f0000000580)="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", 0xfb}], 0x5}}], 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000013c0)) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000001300), 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r3, 0x0, 0x0) getpeername$inet6(r3, &(0x7f0000001340)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001380)=0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r3, 0x80}], 0x1, 0x800) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001980)) 15.799381167s ago: executing program 2 (id=1909): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x6040}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = dup(r1) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0xd}, 0x9, 0x0, &(0x7f0000000240)="848d49831df47a17dffbddbf255493851b3b031a3029ae492e7911e9da337595ef0ec7796b2408cc98549d66a251a1376be54f6b23d5a3f6b29998d865f9acfcbddf6d3f07cb47a228672d826e56700b60bc9a1ce530d1843747e87cfa8f0001ad99e4687b232c5657eebe145638adb03deebd3402fdefd14694adcfbe128d54976a07da3783045352583196f7c06a715dd04bffb6d6afc1d6486d471337bc8c352dbd117f42223fc84f08324c2bbac763671b", 0xb3, 0x5, 0x40, 0x70, 0x92, 0x5, &(0x7f0000000140)="444772923cb089a5b8ba8dae98b64728f15029a27562c1a4d8298000617f72c3a73aaf293a4b8a", [{0x400, 0x7fffffff, 0x7}, {0x8000, 0x4, 0xaa}, {0x1, 0x4, 0x2}, {0x101, 0x4, 0x80000001}, {0x7fffffff, 0xb9, 0x9}, {0x6, 0x8e86, 0x1ff}, {0x55, 0x80, 0x400}, {0x2, 0x1000, 0x101}, {0x10000, 0x0, 0x400}, {0x7fffffff, 0x1f, 0x10001}, {0x4, 0xf142, 0x5}, {0xff, 0x0, 0x8}, {0x80000001, 0xf6, 0x1}, {0x2, 0x0, 0x5}, {0x7, 0x200, 0x21}, {0x8000, 0x20, 0x8}, {0x8000, 0x20, 0x2}, {0x3, 0x10001}, {0x7fff, 0xfffffe00, 0x6}, {0x2, 0x800}, {0x5, 0x46}, {0x0, 0x6, 0x1}, {0x2, 0x80, 0x80000001}, {0x8, 0x2, 0xffffffff}, {0x10000, 0x9, 0x7f06}, {0x3, 0x3, 0x20}, {0x3f, 0x3d, 0x5}, {0x7, 0x0, 0x7f}, {0xfd, 0x8001, 0x5}, {0x0, 0x7, 0x2}, {0xcd, 0x7ff, 0x2}, {0x1000, 0x200, 0xfff}, {0xd8c, 0x5, 0x23}, {0x1, 0x7f, 0x10000}, {0xd3, 0x4, 0x9}, {0x1, 0x4, 0x2}, {0x1, 0x9, 0x80}, {0x6, 0x79, 0x1}, {0x4, 0xff, 0x3f}, {0x4, 0x400}, {0x8, 0x1, 0x8}, {0x7, 0xc, 0xfff}, {0x556, 0x8, 0x4}, {0x80000000, 0x3, 0x4}, {0xb25e, 0x7, 0xd4f6}, {0x27, 0xfff, 0x4}, {0x6c1f, 0x5, 0x81}, {0x1, 0x1, 0xa4}, {0x0, 0x7fff, 0x80a}, {0x4, 0x1, 0x3ff}, {0x6, 0x5, 0x40}, {0x2, 0x80, 0xffff8000}, {0x7fffffff, 0xf0b4, 0x81}, {0x0, 0x1f, 0xc3}, {0x2, 0x5373, 0x69}, {0x6, 0x8000}, {0xc343, 0x8, 0x6}, {0x9, 0x7, 0x6}, {0x4e3, 0x401, 0x9}, {0x1, 0x2b8f, 0x5}, {0xf8ee, 0x9, 0x53d4fee6}, {0x1000, 0x7d62, 0x9}, {0x8, 0x7}, {0xff, 0x38, 0x80000001}, {0x0, 0x8}, {0x8, 0x74, 0x9}, {0x6, 0x8, 0x4}, {0x34f3, 0x8, 0x9}, {0x1, 0x2, 0x400}, {0x4, 0x1, 0x6}, {0x800, 0x7, 0x4}, {0x80, 0x1ff, 0x7ff}, {0xb942, 0x10001, 0x1}, {0xffff, 0x3, 0xfffffff7}, {0x10000000, 0xffff, 0x101}, {0x7fff, 0x43}, {0x7, 0x9, 0x7}, {0x4, 0x76, 0x4}, {0x0, 0xff, 0x657}, {0x5, 0xff, 0x8}, {0x9, 0x4, 0xff}, {0x5e, 0x401, 0x44}, {0x0, 0x6d6, 0x7}, {0x6, 0x4, 0x1ff}, {0x1, 0x8, 0x200}, {0x2, 0x4, 0x2}, {0x100, 0xfb9, 0x6}, {0x2, 0x2, 0xe0}, {0x9, 0x5, 0x2}, {0x4, 0x9, 0x401}, {0x7ff, 0x5, 0x1}, {0x7fffffff, 0x200000, 0x24}, {0x2, 0x0, 0xfff}, {0x7, 0x6, 0x7}, {0x1, 0x40, 0x3}, {0xd09, 0xffffffff, 0xffff}, {0x7, 0x9, 0xffff7fff}, {0x7, 0xffff}, {0x800, 0x13, 0x7ff}, {0x7, 0x8}, {0xffffffcb, 0x1000, 0x7ff}, {0x4481, 0x0, 0x401}, {0x9000000, 0x8000, 0x5}, {0x2, 0xff, 0x2}, {0x0, 0x0, 0x3}, {0x3ff, 0x345, 0x9}, {0xa81, 0x8, 0x100}, {0x2, 0x0, 0x10000}, {0x400, 0xff, 0x8}, {0x7f, 0x80000000, 0x20}, {0x0, 0x9b93, 0x1}, {0x7ff, 0x6, 0x152}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$char_usb(r3, &(0x7f0000000180)=""/97, 0x61) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r4 = io_uring_setup(0x6d9b, &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$can_raw(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(r6, &(0x7f0000000080)=""/16, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) 13.914701531s ago: executing program 1 (id=1914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x4e8, 0x340, 0xc0, 0xc0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'nicvf0\x00', 'gretap0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pimreg0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [], @ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv6=@remote}}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x0, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000200000000000011240000000000ae282714803944"], 0x0, 0x54}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x2d0, 0x338, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x21, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000e03a0200000018000000000000000000000000000090cd58562a15002c000064a6693bad89000000000018000000000000"], 0x0}, 0x90) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESHEX=r7], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) unshare(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1e0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1c4, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x76, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd5285"}, {0xdd, 0xb4, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df31389"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1e0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7e5, 0x83ae, 0xb37, 0x244, 0xffffffffffffffff, 0x3f, '\x00', 0x0, r5, 0x3, 0x3, 0x0, 0x9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000a00)='syzkaller\x00'}, 0x90) 13.144745963s ago: executing program 2 (id=1920): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x270, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_POLICE={0x4c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x6}}, @TCA_POLICE_RATE64={0xc}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_MASK={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x184, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @random="e88c6b7abf48"}, @TCA_IFE_TYPE={0x6}]}, {0x8, 0x6, "93a14c4c"}, {0xc}, {0xc}}}, @m_mirred={0xf0, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x270}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 13.058034091s ago: executing program 0 (id=1921): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) r6 = dup(r3) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 13.050906198s ago: executing program 2 (id=1922): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) r6 = dup(r3) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 12.817243047s ago: executing program 1 (id=1924): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120101000000001058010001000000000001090224000100"], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x20000000) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x19, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0xc, 0x0, [{0x0, 0x2}, {0x0, 0x4, 'S='}]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfe68}}]}, 0x38}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.58091259s ago: executing program 2 (id=1925): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, '#'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, '\x00\x00'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') open(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.123866549s ago: executing program 0 (id=1927): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2aef1852caffdb8e, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="a9c76c5e4713a9acd14f0a5b9db03b45c94eefcdabf4c15f76177b35770024272db3bbad31336de9ed49b97ea86fc2b246b601637a267fde27732da496a799294d66d85378dcc886b38a8aa9cf55cb6ef920393bef4d82070337f2986bb019d5b8731d91561e8fe71b33404818441bb056572797b873539f4058bbdfaa4615269708e119a8", 0x85}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) 11.955783524s ago: executing program 0 (id=1928): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@remote, 0x1d}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r5, &(0x7f0000001200)=""/162, 0xa2) poll(0x0, 0x0, 0x216) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) getdents64(r5, &(0x7f0000000200)=""/4096, 0x1000) setns(r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000300)={@remote, r7}, 0x14) socket$packet(0x11, 0x3, 0x300) timer_create(0x3, 0x0, &(0x7f0000000100)) r8 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0xfffffffffffffff9, 0x0) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_procs(r9, 0x0, 0x2, 0x0) 11.338207583s ago: executing program 1 (id=1931): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="435d61e778eb38a7b38869e147b2bb2d8ea5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8b8112944aeb64dbc7a6b781ab8a46acc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c359d609abd84ddbe5264f73200c67d8f9742d0fb8fe27a59cc395ba580c12f6e995da91c450460e96e5801993412ce48f7c3539cfa66dc31d13fd21e94d2c19485d62b70190b3cbf094053577ae87c77fbdce5e0910e1ef98a6a2645f30c1bd561f7d025f6c7410d24fc39053", 0xbf}, {&(0x7f0000000180)='\a', 0x1}, {&(0x7f0000000ac0)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f", 0xd7}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaebac1b657fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a180aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a460000000000000000", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="1fdefa76cc6f846bf5a6f3b74b191ce27bc5b145a480c604562b1bc28be721537013d7c772b5881f004b0951e7dc2a2653", 0x31}, {&(0x7f0000000780)="925f1604a8e44f732be04c9b3ba6e8e512ca21f2a68d2366d2f3679f622fd951bfd4abf2c4d375a3abe9b8c0e0424914f84c5e5e03d3f1d0eb1abe6160216a7874eb3e99cdc38aef3c109b347a1866813e107eed3a822035c26a06e625ea5d2791de4914862f3bc38c533b7baaf2ad14522badffd923cd385b4993b0537d05efc4c54197b6ea1c60cf8cdb68c44dab2feaa1de1fe7c24fe326095183850f9e6e13d5eccb9a61afa9c369b3", 0xab}, {&(0x7f00000019c0)="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", 0x127}, {&(0x7f0000000680)="672733c5976ca6c31adb6c24db79c83e9b45d13a8e1ea257366fb3bfa967046e07eece84a260fa004d3fc2b710bbd0b1421980ddc2dfed1b54290769b373e99fbfcdaaf00ddbab81d104994815c477e3cb64d14282eec0e67db26a5ef94dc7a9c740d7e24b53c4b889c8ae93b3fb971ed3a457b112ff61055569604c6232a3c6f9e064f57b9131499992d33412244750adf6e7a3e1bc4db5c02e1bddf4517245abcbb615f1d5ed6ba966ba86992a0a6d170ec160d68df28491389f9f292524216e", 0xc1}, {&(0x7f0000000580)="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", 0xfb}], 0x5}}], 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000013c0)) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000001300), 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r3, 0x0, 0x0) getpeername$inet6(r3, &(0x7f0000001340)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001380)=0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r3, 0x80}], 0x1, 0x800) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000001980)) 11.295891251s ago: executing program 4 (id=1932): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x4) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) shmget$private(0x0, 0xc00000, 0x54000000, &(0x7f000024e000/0xc00000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) shmat(0x0, &(0x7f0000fa4000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f00003b7000/0x1000)=nil, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000010c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sync() r2 = socket$tipc(0x1e, 0x0, 0x0) connect$tipc(r2, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0xfffffffd, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="19b945e546666fbb38fe7c1eda23b0d251f2", 0x12}, {&(0x7f0000000740)="e87fd27cd2b9bdd0acf17660cebd02ac93f9c36f9ff08214ee4b5a78238cfb50e96b7f786af118946383fcfa1d33ab9fd8070f2127db254bb44cc2957a7e2b60eee6984aa26ef382c9e0936dda633f18d9e2dc90c639ef9bdb2fcaa843699a037eb65e28c42199961d", 0x69}], 0x2, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @rand_addr=0x64010102}}}], 0x58}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0xfce6907dbd3beb0c, {0x4e22}}, 0x10) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0xc8defd968bbb4874}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 11.232716559s ago: executing program 0 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32], 0x1c}}, 0x0) 11.081122877s ago: executing program 1 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xc, &(0x7f0000000240)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x1f}}]}}}]}, 0x60}}, 0x0) 11.011851137s ago: executing program 0 (id=1935): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r5, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) r6 = dup(r3) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 10.894968145s ago: executing program 1 (id=1936): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x4, 0xf0ff1f, 0x4) 10.739787046s ago: executing program 1 (id=1937): socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x68040200) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) syz_io_uring_setup(0x4a8, &(0x7f0000000300)={0x0, 0x4112, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) write$rfkill(r4, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 10.703192296s ago: executing program 4 (id=1938): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2aef1852caffdb8e, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="a9c76c5e4713a9acd14f0a5b9db03b45c94eefcdabf4c15f76177b35770024272db3bbad31336de9ed49b97ea86fc2b246b601637a267fde27732da496a799294d66d85378dcc886b38a8aa9cf55cb6ef920393bef4d82070337f2986bb019d5b8731d91561e8fe71b33404818441bb056572797b873539f4058bbdfaa4615269708e119a8", 0x85}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) 10.622008396s ago: executing program 0 (id=1939): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x9) write$nci(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='U\x00\x00\x00\x00\x00'], 0x6) lseek(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'ip6gretap0\x00', 0x1ff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000f50300030000000000000000003800000000000000000000000000200080"], 0x158) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 10.376388903s ago: executing program 2 (id=1940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x9) write$nci(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='U\x00\x00\x00\x00\x00'], 0x6) lseek(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'ip6gretap0\x00', 0x1ff}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000f50300030000000000000000003800000000000000000000000000200080"], 0x158) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 9.649605578s ago: executing program 4 (id=1941): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc001001b}]}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) fdatasync(r5) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x23, &(0x7f0000000040), 0x8) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r8, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_io_uring_setup(0x2eac, &(0x7f00000001c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000480)) 8.987734466s ago: executing program 4 (id=1942): memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120101000000001058010001000000000001090224000100"], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x20000000) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x19, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0xc, 0x0, [{0x0, 0x2}, {0x0, 0x4, 'S='}]}]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfe68}}]}, 0x38}}, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.625930567s ago: executing program 4 (id=1945): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32], 0x1c}}, 0x0) 7.527662298s ago: executing program 4 (id=1946): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x101281) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x10, &(0x7f0000000080)={0x0, 'team_slave_1\x00'}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x18}]}, 0x18}}, 0x0) r6 = epoll_create(0x1) fremovexattr(r6, &(0x7f0000000040)=@known='trusted.syz\x00') r7 = socket$inet6(0xa, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000008001600c053000018000180140002006e657464657673696d3000000000000008001700365e0000080015"], 0x44}}, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r7, 0x80080400) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c80)={'gre0\x00', 0x0, 0x7, 0x7800, 0x3f, 0x80000000, {{0x21, 0x4, 0x1, 0x17, 0x84, 0x66, 0x0, 0xfe, 0x29, 0x0, @empty, @broadcast, {[@end, @cipso={0x86, 0x50, 0x1, [{0xa9cadf677a0c5516, 0xf, "891b57132ace3307374b85a374"}, {0x0, 0x5, "c43858"}, {0x7, 0x5, "034c25"}, {0x5, 0xe, "417023df08ea22fb9dd6f194"}, {0x5, 0x11, "3205dc9af80a7217baf80d048339eb"}, {0x7, 0x12, "d7528200a46f68fdca9206bea8729795"}]}, @rr={0x7, 0x13, 0xf8, [@local, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @broadcast]}, @end, @generic={0x89, 0x7, "12486fd30f"}, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d80)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000dc0)=0xc) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000001340)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000000e00)={0x4c8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x2, 0x8, 0x5, 0x4}, {0x3, 0xb8, 0x8, 0x4}, {0x200, 0xb0, 0x6, 0x3}, {0xfffd, 0x20, 0x6, 0x80000000}, {0x7, 0xee, 0x7, 0x3}, {0x7, 0x2, 0x6, 0x8001}, {0x1, 0x8, 0x4, 0xe20b}, {0x0, 0xd1, 0x0, 0x7}, {0x2, 0x1f, 0x4, 0x8000}, {0x1, 0x3f, 0x2, 0x80000001}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd7fb}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0xc, 0x9, 0xc9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x4c8}}, 0x6800) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="0c3d633f972b5977251e84e84f7ae4f2c6796fbe8202a6ea385a257e", 0x1c}, {&(0x7f0000000400)="2088b83be479fa804f106c075a6b7eaac191455ebe8e253445e1e50000d706a118857b90a78a75cfe7162c0a6dda8224a52ca2366c7a58a2c7a901975c2e1cf725241c507f0004430e015cd8cff6f3a17f3957035171479c1846867501851a3c3d1128c3814610854a", 0x69}, {&(0x7f0000000480)="094590fbf268f28ee9cf3db0b479a7da01983fcbe4408d3b4c354bb06016d5a10e1bff852a9e88d6b75d90fc2888f839aef752ebfb9b210980c9a53c84922a4a932d4896a049fcacfa4bd20a2da76135963d7fac02fdbe48a19106f4f58ab040621e99378a5dd366e64dd6787db1d8ccaf06cca3a4076b496d", 0x79}, {&(0x7f00000009c0)="542d5bba7457f1cc96c5859a59fcb4f6655f98452a503354a6955ae14841c9a7e797b2cce6dea78aad55994e4b7c3ddff3d8318dc5dc412488e789963c7a8482e7d5dc17cd4c75f4d19fd6f73fde9ab4a42bde91959353f70ac8c08185f6b9d7ef6adfc754e8ac0350a0b994dce2f4c7a4da895238a622c3e7193a35176417caca5a48b1f85d134253bf9f03720a463846e501e289a6d1decaacfe293f3dffcde4d2e96ad2972b9dd6e6a3021876a938c2782f8f45", 0xb5}], 0x4, 0x3) r13 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r13, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}], 0x10}) getsockopt$inet_int(r10, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r14, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e8223cee2d6745ff65b450f8b0b46f900c910f852", 0x26}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0xfe3a}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xfec7}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342eaa16108a32d9d31fbfe8bf4d89784440c3ff3fef2f998aebc9634", 0x6d}, 0x80) close(r14) 7.219949124s ago: executing program 3 (id=1948): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) socket(0x22, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000340)={0x3, 0x7e}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x480000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5d549a, 0x0, [0x0, 0x5, 0x100000, 0x3]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/41, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x141000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x181000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) 5.476608796s ago: executing program 3 (id=1949): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r0, &(0x7f00000001c0), 0x4) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.392103944s ago: executing program 3 (id=1950): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, '#'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, '\x00\x00'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') open(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.526257334s ago: executing program 3 (id=1951): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2aef1852caffdb8e, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="a9c76c5e4713a9acd14f0a5b9db03b45c94eefcdabf4c15f76177b35770024272db3bbad31336de9ed49b97ea86fc2b246b601637a267fde27732da496a799294d66d85378dcc886b38a8aa9cf55cb6ef920393bef4d82070337f2986bb019d5b8731d91561e8fe71b33404818441bb056572797b873539f4058bbdfaa4615269708e119a8", 0x85}], 0x1}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) 3.144795981s ago: executing program 3 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, 0x0, 0x6a) splice(r2, 0x0, r5, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r5, 0x407, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x800, 0x0) write$binfmt_elf64(r3, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f000068b000/0x2000)=nil, 0x2000, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="9b43a409aa81", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_request}}}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) getsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) r8 = syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000a800dd086d0492082a6d0000000109a1e45bf3000000000904", @ANYBLOB="e1ad268de083e84faa44e77f7bfca79e65388f6f0aaa592f1f07835098c398cda3088cb73ebf47af0231b0b2d9688e87860bc3a20be89d37dd9cf2b1debf279adf9aa2015b2a5ad4bf24fd8ad02611ace19a5f60bc0d98c042521c71b06b9f9f7e66f1fa9266b208a4a2ee2810aa6ac91f02ebbfb96580201deb1f07c124e77e", @ANYRES8=r0, @ANYBLOB="eddac6134352cd9926a114f4381287b7db3688a4eab619ae1a2c04242388f1e2afad33607c5cc62f9eba42aa9a3ebd98bcd5dbf7d146ae36c6a6de8c39a1f576292683688fe6e17c5533f99a114d72426f663f21e33ab4b02a8d781ecd71ad094ddcf7f4dc4b923d078096581837bb1160241ca86ea6ce8d56fd7d27604b7f8fe091a941a8c1e100434518b864324038710bad5660122ed9ea89f571fa74"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000480)={0xfffffffffffffec4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x3) syz_usb_control_io(r8, 0x0, 0x0) 0s ago: executing program 3 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): le UDC or it's busy [ 429.957792][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 429.957825][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 429.978547][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 429.986651][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 429.999645][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.008178][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.019336][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.036357][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.047450][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.055689][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.064980][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.072519][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.080878][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.106121][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.115238][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.122736][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.136499][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.169431][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.192216][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.206126][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.214226][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.222107][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.232275][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.245079][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.253275][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.270094][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.293204][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.299392][T12454] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1605'. [ 430.312226][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.320255][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.328649][T12454] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1605'. [ 430.376171][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.407841][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.436027][ T5136] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 430.478849][ T5136] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 430.509238][ T5136] usb 5-1: USB disconnect, device number 38 [ 430.590464][T12473] program syz.2.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.613151][T12469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 430.633604][ T58] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 430.641586][T12473] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 430.845954][ T58] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.861079][ T58] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 430.875108][ T58] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.890560][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 430.912352][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 430.944084][ T58] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.956604][ T58] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.965055][ T58] usb 1-1: Product: syz [ 430.972993][ T58] usb 1-1: Manufacturer: syz [ 430.991047][T12454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 431.007774][ T58] cdc_wdm 1-1:1.0: skipping garbage [ 431.013178][ T58] cdc_wdm 1-1:1.0: skipping garbage [ 431.033193][ T58] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 431.043726][ T58] cdc_wdm 1-1:1.0: Unknown control protocol [ 431.220278][ C1] wdm_int_callback: 618 callbacks suppressed [ 431.220301][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.232895][ C1] wdm_int_callback: 618 callbacks suppressed [ 431.232912][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.245144][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.251827][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.258135][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.264748][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.271007][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.277584][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.283925][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.290538][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.296805][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.303397][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.309628][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.316211][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.322442][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.329029][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.335284][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.341887][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.348157][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 431.354750][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 431.396209][ T58] usb 1-1: USB disconnect, device number 52 [ 431.396266][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 431.622410][T12490] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 431.662499][T12490] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 431.828493][ T5087] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 432.063832][ T5087] usb 2-1: Using ep0 maxpacket: 16 [ 432.071341][ T5087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.111206][ T5087] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.138424][ T5087] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.153560][ T5087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.197529][ T5087] usb 2-1: config 0 descriptor?? [ 432.257165][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 432.763847][ T5364] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 432.817884][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.848886][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.870742][T12529] program syz.0.1625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.894909][T12529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 432.982395][ T5364] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=21.80 [ 433.021056][ T5364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.058117][ T5364] usb 4-1: Product: syz [ 433.073210][ T5364] usb 4-1: Manufacturer: syz [ 433.085782][ T5087] usbhid 2-1:0.0: can't add hid device: -71 [ 433.100572][ T5182] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 433.117489][ T5087] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 433.125910][ T5364] usb 4-1: SerialNumber: syz [ 433.140337][ T5364] usb 4-1: config 0 descriptor?? [ 433.153332][ T5087] usb 2-1: USB disconnect, device number 64 [ 433.313574][ T5182] usb 5-1: Using ep0 maxpacket: 16 [ 433.326060][ T5182] usb 5-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 433.340709][ T5182] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.359599][ T5182] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 433.423711][ T5182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.467054][ T5182] usb 5-1: config 0 descriptor?? [ 433.484637][ T5182] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 433.516179][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.529918][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.542780][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.558056][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.572591][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.629298][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.642977][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.650964][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.659103][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.668217][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.676724][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.695096][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.712186][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.726002][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.740797][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.755736][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.777196][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.801948][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.816010][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.829048][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.839415][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.861305][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.883139][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 433.892486][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.892524][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.892550][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.892574][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.892600][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.892624][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 433.993207][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 434.008474][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 434.019980][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 434.072322][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 434.102421][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 434.139472][ T58] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 434.167000][ T58] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.191111][ T5087] usb 4-1: USB disconnect, device number 56 [ 434.322280][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1634'. [ 434.479695][T12561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1632'. [ 434.498615][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.540915][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.145009][T12583] program syz.2.1638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.181241][T12583] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 435.343909][ T58] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 435.533617][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 435.564713][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.589382][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 435.620119][ T58] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 435.643848][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.667412][ T58] usb 4-1: config 0 descriptor?? [ 435.706691][T12590] netlink: 'syz.1.1642': attribute type 4 has an invalid length. [ 435.750822][ T5147] usb 5-1: USB disconnect, device number 39 [ 435.757074][ T5136] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 435.828449][T12590] netlink: 'syz.1.1642': attribute type 4 has an invalid length. [ 435.963889][ T5136] usb 1-1: Using ep0 maxpacket: 32 [ 435.986623][ T5136] usb 1-1: New USB device found, idVendor=4ac8, idProduct=0321, bcdDevice=6f.be [ 436.013716][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.036925][ T5136] usb 1-1: config 0 descriptor?? [ 436.239960][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'. [ 436.297474][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.333745][ T5182] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 436.334624][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.523861][ T5182] usb 5-1: Using ep0 maxpacket: 16 [ 436.542008][ T5182] usb 5-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 436.555169][ T5182] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.571362][ T5182] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 436.582926][ T5182] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.598882][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 436.621645][ T5182] usb 5-1: config 0 descriptor?? [ 436.623102][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 436.647684][ T58] usb 4-1: USB disconnect, device number 57 [ 436.889354][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'. [ 437.008591][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.035545][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.052504][T12607] futex_wake_op: syz.2.1646 tries to shift op by -1; fix this program [ 437.059719][ T5182] usb 5-1: string descriptor 0 read error: -71 [ 437.097590][ T5182] usb 5-1: USB disconnect, device number 40 [ 438.088330][T12641] program syz.4.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.130600][T12641] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.310400][T12647] program syz.1.1655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.322436][T12647] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 438.362257][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 438.823592][ T5147] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 439.046377][ T5147] usb 3-1: Using ep0 maxpacket: 8 [ 439.068574][ T5147] usb 3-1: too many endpoints for config 0 interface 0 altsetting 239: 182, using maximum allowed: 30 [ 439.100071][ T5147] usb 3-1: config 0 interface 0 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 439.144711][ T5147] usb 3-1: config 0 interface 0 has no altsetting 0 [ 439.162489][ T5147] usb 3-1: New USB device found, idVendor=c826, idProduct=dd01, bcdDevice=cb.d8 [ 439.184300][ T5147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.202636][ T5147] usb 3-1: Product: syz [ 439.220664][ T5147] usb 3-1: Manufacturer: syz [ 439.237056][ T5147] usb 3-1: SerialNumber: syz [ 439.255805][ T5147] usb 3-1: config 0 descriptor?? [ 439.353138][ T5087] usb 1-1: USB disconnect, device number 53 [ 439.833779][ T5087] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 440.046605][ T5087] usb 1-1: Using ep0 maxpacket: 16 [ 440.068264][ T5087] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.085895][ T5087] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 440.108081][ T5087] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 440.119866][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.162574][ T5087] usb 1-1: config 0 descriptor?? [ 440.299744][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.309065][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.523719][ T5136] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 440.715285][ T5136] usb 5-1: Using ep0 maxpacket: 32 [ 440.741684][ T5136] usb 5-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 440.774528][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.785163][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.802014][ T5136] usb 5-1: Product: syz [ 440.807812][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.837100][ T5136] usb 5-1: Manufacturer: syz [ 440.859467][ T5136] usb 5-1: SerialNumber: syz [ 440.898554][ T5136] r8152-cfgselector 5-1: Unknown version 0x0000 [ 440.914974][ T5136] r8152-cfgselector 5-1: config 0 descriptor?? [ 441.100821][ T5087] usbhid 1-1:0.0: can't add hid device: -71 [ 441.123280][ T5087] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 441.157881][ T5087] usb 1-1: USB disconnect, device number 54 [ 441.279175][T12681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.290553][T12681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.372967][ T5147] usb 3-1: USB disconnect, device number 50 [ 441.570445][T12704] program syz.2.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.603196][T12704] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 442.084954][T12717] netlink: 'syz.0.1671': attribute type 4 has an invalid length. [ 442.159625][T12718] netlink: 'syz.0.1671': attribute type 4 has an invalid length. [ 443.120815][ T58] r8152-cfgselector 5-1: USB disconnect, device number 41 [ 443.377721][T12742] netlink: 'syz.4.1679': attribute type 9 has an invalid length. [ 443.409695][T12742] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1679'. [ 443.493720][ T5147] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 443.562754][ T5136] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 443.667351][T12742] netlink: 'syz.4.1679': attribute type 9 has an invalid length. [ 443.681115][T12742] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1679'. [ 443.705773][ T5147] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 443.715236][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.734587][ T5147] usb 2-1: config 0 descriptor?? [ 443.754368][ T5147] usb 2-1: selecting invalid altsetting 3 [ 443.760189][ T5147] comedi comedi0: could not set alternate setting 3 in high speed [ 443.784025][ T5147] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 443.803665][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 443.811971][ T5147] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 443.834259][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.862273][ T5136] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.903827][ T5136] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.922251][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.933802][ T5364] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 443.959182][ T5136] usb 1-1: config 0 descriptor?? [ 444.103598][ T5364] usb 3-1: device descriptor read/64, error -71 [ 444.393713][ T5364] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 444.436542][T12757] program syz.4.1683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.464322][T12757] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 444.575276][ T5364] usb 3-1: device descriptor read/64, error -71 [ 444.578322][T12740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.604016][T12740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.714593][ T5364] usb usb3-port1: attempt power cycle [ 444.822482][ T5147] usb 2-1: USB disconnect, device number 65 [ 444.840078][ T5136] usbhid 1-1:0.0: can't add hid device: -71 [ 444.861356][ T5136] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 444.885822][ T5136] usb 1-1: USB disconnect, device number 55 [ 445.144782][ T5364] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 445.207990][ T5364] usb 3-1: device descriptor read/8, error -71 [ 445.480685][T12767] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1687'. [ 445.503872][ T5364] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 445.543917][T12767] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1687'. [ 445.585288][ T5364] usb 3-1: device descriptor read/8, error -71 [ 445.718737][ T5364] usb usb3-port1: unable to enumerate USB device [ 445.805629][ T1153] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 446.025628][ T1153] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.034506][ T1153] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 446.056473][ T1153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.066049][ T1153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 446.078291][ T1153] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 446.101805][ T1153] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.113325][ T1153] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.172300][ T1153] usb 5-1: Product: syz [ 446.187602][ T1153] usb 5-1: Manufacturer: syz [ 446.205900][T12769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.215801][ T1153] cdc_wdm 5-1:1.0: skipping garbage [ 446.221698][ T1153] cdc_wdm 5-1:1.0: skipping garbage [ 446.232713][ T1153] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 446.238758][ T1153] cdc_wdm 5-1:1.0: Unknown control protocol [ 446.426381][ C0] wdm_int_callback: 216 callbacks suppressed [ 446.426403][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 446.436198][ T5136] usb 5-1: USB disconnect, device number 42 [ 446.438986][ C0] wdm_int_callback: 216 callbacks suppressed [ 446.439004][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 446.439020][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 446.956309][T12800] program syz.3.1696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.979927][T12800] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 447.331258][ T5087] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 447.553642][ T5087] usb 3-1: Using ep0 maxpacket: 32 [ 447.585621][ T5087] usb 3-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 447.596935][ T5087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.621316][ T5087] usb 3-1: Product: syz [ 447.621528][ T5133] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 447.627045][ T5087] usb 3-1: Manufacturer: syz [ 447.655908][ T5087] usb 3-1: SerialNumber: syz [ 447.672234][ T5087] r8152-cfgselector 3-1: Unknown version 0x0000 [ 447.703153][ T5087] r8152-cfgselector 3-1: config 0 descriptor?? [ 447.816062][ T5133] usb 5-1: Using ep0 maxpacket: 16 [ 447.842163][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.855840][ T5133] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.869402][ T5133] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.878624][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.900740][ T5133] usb 5-1: config 0 descriptor?? [ 448.197123][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.215964][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.578119][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.599636][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.619058][T12824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1703'. [ 448.816697][ T5133] usbhid 5-1:0.0: can't add hid device: -71 [ 448.839372][ T5133] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 448.863907][ T5133] usb 5-1: USB disconnect, device number 43 [ 449.024657][ T5147] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 449.213656][ T5147] usb 4-1: Using ep0 maxpacket: 8 [ 449.233651][ T5147] usb 4-1: too many endpoints for config 0 interface 0 altsetting 239: 182, using maximum allowed: 30 [ 449.270630][ T5147] usb 4-1: config 0 interface 0 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 449.298549][ T5147] usb 4-1: config 0 interface 0 has no altsetting 0 [ 449.318575][ T5147] usb 4-1: New USB device found, idVendor=c826, idProduct=dd01, bcdDevice=cb.d8 [ 449.328606][ T5147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.341222][ T5147] usb 4-1: Product: syz [ 449.351127][ T5147] usb 4-1: Manufacturer: syz [ 449.373204][ T5147] usb 4-1: SerialNumber: syz [ 449.410054][ T5147] usb 4-1: config 0 descriptor?? [ 449.522870][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 449.522888][ T29] audit: type=1326 audit(1719847590.292:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 449.623650][ T29] audit: type=1326 audit(1719847590.292:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 449.708674][ T29] audit: type=1326 audit(1719847590.302:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 449.829686][ T29] audit: type=1326 audit(1719847590.302:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 449.899920][ T29] audit: type=1326 audit(1719847590.302:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 449.943260][T12844] program syz.4.1710 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.990748][T12844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 450.010967][ T1153] r8152-cfgselector 3-1: USB disconnect, device number 55 [ 450.012917][ T29] audit: type=1326 audit(1719847590.312:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 450.109987][ T29] audit: type=1326 audit(1719847590.312:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12835 comm="syz.4.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da7575b99 code=0x7ffc0000 [ 451.664954][ T5147] usb 4-1: USB disconnect, device number 58 [ 451.809393][T12871] veth1_macvtap: left promiscuous mode [ 451.835289][T12871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 451.869303][T12871] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1716'. [ 451.893900][T12871] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 452.417600][T12885] netlink: 'syz.0.1721': attribute type 11 has an invalid length. [ 452.428238][T12885] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.1721'. [ 452.445021][T12885] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 452.470754][T12885] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.478433][ T5364] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 452.499727][T12885] bond0: (slave team0): Enslaving as an active interface with an up link [ 452.565565][ T5087] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 452.673725][ T5364] usb 3-1: Using ep0 maxpacket: 16 [ 452.710922][T12888] program syz.0.1722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.730173][ T5364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.742862][T12888] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 452.747471][ T5364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.767322][ T5087] usb 5-1: Using ep0 maxpacket: 16 [ 452.779289][ T5087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 452.790835][ T5087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 452.801918][ T5364] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.842018][ T5087] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 452.852921][ T5364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.881433][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.891567][ T5364] usb 3-1: config 0 descriptor?? [ 452.919214][ T5087] usb 5-1: config 0 descriptor?? [ 453.382171][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.394575][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.441030][ T5087] hid (null): bogus close delimiter [ 453.495231][ T5087] hid (null): invalid report_count 58028 [ 453.519601][ T5087] hid (null): unknown global tag 0xd [ 453.526180][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.544062][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.546487][ T5087] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 453.562981][ T5087] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 453.582721][ T5087] hid-generic 0003:0158:0100.0022: bogus close delimiter [ 453.603050][ T5087] hid-generic 0003:0158:0100.0022: item 0 0 2 10 parsing failed [ 453.631295][ T5087] hid-generic 0003:0158:0100.0022: probe with driver hid-generic failed with error -22 [ 453.779587][ T5364] usbhid 3-1:0.0: can't add hid device: -71 [ 453.796352][ T5364] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 453.840103][ T5364] usb 3-1: USB disconnect, device number 56 [ 453.915262][ T5133] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 454.013281][T12883] tipc: Started in network mode [ 454.025944][T12883] tipc: Node identity ac14142a, cluster identity 4711 [ 454.040806][T12883] tipc: Enabled bearer , priority 10 [ 454.118836][ T5133] usb 1-1: Using ep0 maxpacket: 16 [ 454.141474][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 454.166141][ T5133] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 454.179546][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.209568][ T5133] usb 1-1: config 0 descriptor?? [ 454.317642][ T5147] usb 5-1: USB disconnect, device number 44 [ 454.429964][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 454.462795][ T29] audit: type=1326 audit(1719847595.232:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.563138][ T29] audit: type=1326 audit(1719847595.232:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.620952][ T29] audit: type=1326 audit(1719847595.232:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.676671][ T29] audit: type=1326 audit(1719847595.232:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.743233][ T29] audit: type=1326 audit(1719847595.232:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.788793][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.810793][ T29] audit: type=1326 audit(1719847595.232:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.813841][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.885176][ T29] audit: type=1326 audit(1719847595.232:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 454.916525][ T5133] usbhid 1-1:0.0: can't add hid device: -71 [ 454.922651][ T5133] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 454.952455][ T5133] usb 1-1: USB disconnect, device number 56 [ 454.969239][ T29] audit: type=1326 audit(1719847595.232:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 455.022712][ T29] audit: type=1326 audit(1719847595.232:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 455.066931][ T29] audit: type=1326 audit(1719847595.232:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 455.120684][ T29] audit: type=1326 audit(1719847595.232:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.2.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 455.156395][ T5147] tipc: Node number set to 2886997034 [ 455.243676][ T1153] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 455.423716][ T1153] usb 3-1: device descriptor read/64, error -71 [ 455.494538][T12925] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1731'. [ 455.517121][T12925] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1731'. [ 455.723881][ T1153] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 455.810967][T12936] program syz.4.1734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 455.823821][ T5364] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 455.834094][ T5131] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 455.843412][T12936] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 455.896679][ T1153] usb 3-1: device descriptor read/64, error -71 [ 456.013863][ T5131] usb 1-1: Using ep0 maxpacket: 16 [ 456.025539][ T5364] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.034388][ T1153] usb usb3-port1: attempt power cycle [ 456.035682][ T5131] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 456.050548][ T5364] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 456.080177][ T5364] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.102364][ T5364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 456.118983][ T5131] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.143630][ T5364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 456.161650][ T5131] usb 1-1: Product: syz [ 456.176490][ T5364] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.184015][ T5131] usb 1-1: Manufacturer: syz [ 456.200735][ T5364] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.203203][ T5131] usb 1-1: SerialNumber: syz [ 456.239639][ T5364] usb 4-1: Product: syz [ 456.240918][ T5131] usb 1-1: config 0 descriptor?? [ 456.259995][ T5364] usb 4-1: Manufacturer: syz [ 456.270136][ T5131] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 456.301147][T12929] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 456.314749][ T5364] cdc_wdm 4-1:1.0: skipping garbage [ 456.320331][ T5364] cdc_wdm 4-1:1.0: skipping garbage [ 456.337508][ T5364] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 456.346093][ T5364] cdc_wdm 4-1:1.0: Unknown control protocol [ 456.472955][T12931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.503222][ T1153] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 456.511332][T12931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.544523][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.551168][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.557451][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.564162][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.570498][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.577119][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.583460][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.590081][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.596362][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.602982][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.609287][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.615897][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.622158][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.628771][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.635051][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.641668][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.647937][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.654551][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.660821][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 456.667436][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 456.673055][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.682823][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.707770][ T1153] usb 3-1: device descriptor read/8, error -71 [ 456.731431][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 456.731432][ T5133] usb 4-1: USB disconnect, device number 59 [ 456.796027][ T5131] gp8psk: usb in 128 operation failed. [ 456.816442][ T5131] gp8psk: usb in 137 operation failed. [ 456.822343][ T5131] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 456.844762][ T5131] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 456.875396][ T5131] usb 1-1: media controller created [ 456.921978][ T5131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 456.954767][ T5131] gp8psk_fe: Frontend revision 1 attached [ 456.960558][ T5131] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 456.974134][ T5131] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 456.986393][ T1153] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 457.076313][ T1153] usb 3-1: device descriptor read/8, error -71 [ 457.084692][ T5131] gp8psk: usb in 138 operation failed. [ 457.101504][ T5131] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 457.122969][ T5131] gp8psk: found Genpix USB device pID = 201 (hex) [ 457.137086][ T5131] usb 1-1: USB disconnect, device number 57 [ 457.207717][ T1153] usb usb3-port1: unable to enumerate USB device [ 457.268174][ T5131] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 457.818844][ T5131] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 458.014557][ T5131] usb 1-1: Using ep0 maxpacket: 16 [ 458.038357][ T5131] usb 1-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 458.049605][ T5136] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 458.063330][ T5131] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.075141][T12955] netlink: 'syz.2.1740': attribute type 9 has an invalid length. [ 458.084596][ T5131] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 458.103446][T12955] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1740'. [ 458.105005][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.152901][ T5131] usb 1-1: config 0 descriptor?? [ 458.235497][T12958] netlink: 'syz.2.1740': attribute type 9 has an invalid length. [ 458.249466][T12958] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1740'. [ 458.269978][ T5136] usb 4-1: Using ep0 maxpacket: 16 [ 458.284507][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.310656][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 458.355891][ T5136] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 458.380044][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.395230][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 458.417215][ T5136] usb 4-1: config 0 descriptor?? [ 458.689711][ T5131] usb 1-1: string descriptor 0 read error: -71 [ 458.724469][ T5131] usb 1-1: USB disconnect, device number 58 [ 458.992171][T12966] netlink: 'syz.4.1741': attribute type 9 has an invalid length. [ 459.020945][T12966] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1741'. [ 459.052790][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.056782][T12968] netlink: 'syz.4.1741': attribute type 9 has an invalid length. [ 459.069535][T12968] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1741'. [ 459.080635][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.309562][ T5136] usbhid 4-1:0.0: can't add hid device: -71 [ 459.334360][ T5136] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 459.366581][ T5136] usb 4-1: USB disconnect, device number 60 [ 459.628793][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 459.628812][ T29] audit: type=1326 audit(1719847600.402:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 459.690148][ T29] audit: type=1326 audit(1719847600.402:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad63f75b99 code=0x7ffc0000 [ 459.872786][T12979] program syz.0.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.891287][T12979] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 459.946529][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.958074][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.967569][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.979153][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.987679][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 459.998624][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.018715][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.026156][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.034093][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.045218][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.070588][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 460.089471][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.319678][ T2390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.344310][ T1153] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 460.469030][ T2390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.586184][ T2390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.603809][ T1153] usb 5-1: Using ep0 maxpacket: 16 [ 460.625592][ T1153] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 460.669263][ T1153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.702450][ T1153] usb 5-1: Product: syz [ 460.720390][ T1153] usb 5-1: Manufacturer: syz [ 460.733734][ T1153] usb 5-1: SerialNumber: syz [ 460.773011][ T1153] usb 5-1: config 0 descriptor?? [ 460.789192][ T1153] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 460.826071][ T2390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.846463][T13005] netlink: 'syz.0.1752': attribute type 9 has an invalid length. [ 460.860209][T13005] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1752'. [ 461.000697][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.021407][T13011] netlink: 'syz.0.1752': attribute type 9 has an invalid length. [ 461.031866][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.062972][T13011] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1752'. [ 461.065382][T12989] chnl_net:caif_netlink_parms(): no params data found [ 461.092402][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.103166][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.137076][ T1153] gp8psk: usb in 128 operation failed. [ 461.151072][ T1153] gp8psk: usb in 137 operation failed. [ 461.163672][ T1153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 461.185045][ T1153] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 461.195569][ T1153] usb 5-1: media controller created [ 461.238198][ T1153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.263867][ T5182] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 461.312171][ T1153] gp8psk_fe: Frontend revision 1 attached [ 461.319699][ T1153] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 461.332061][ T1153] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 461.365362][T13022] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1757'. [ 461.387084][T13022] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1757'. [ 461.398628][ T1153] gp8psk: usb in 138 operation failed. [ 461.407060][ T1153] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 461.425896][ T1153] gp8psk: found Genpix USB device pID = 201 (hex) [ 461.438309][T12989] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.442863][ T1153] usb 5-1: USB disconnect, device number 45 [ 461.459722][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.467863][T12989] bridge_slave_0: entered allmulticast mode [ 461.484038][ T5182] usb 3-1: Using ep0 maxpacket: 16 [ 461.486359][T12989] bridge_slave_0: entered promiscuous mode [ 461.496696][ T5182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.505715][ T2390] gretap0: left allmulticast mode [ 461.519470][ T2390] gretap0: left promiscuous mode [ 461.530710][ T5182] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.535093][ T2390] bridge0: port 3(gretap0) entered disabled state [ 461.570532][ T5182] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.582040][ T5182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.595096][ T2390] bridge_slave_1: left allmulticast mode [ 461.600863][ T2390] bridge_slave_1: left promiscuous mode [ 461.621885][ T2390] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.630095][ T5182] usb 3-1: config 0 descriptor?? [ 461.659387][ T1153] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 461.672210][ T2390] bridge_slave_0: left allmulticast mode [ 461.694578][ T5136] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 461.703142][ T2390] bridge_slave_0: left promiscuous mode [ 461.740614][ T2390] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.780446][ T2390] gretap1: left allmulticast mode [ 461.792303][ T2390] gretap1: left promiscuous mode [ 461.804260][ T2390] bridge1: port 1(gretap1) entered disabled state [ 461.922806][ T5136] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.948299][ T5136] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 461.959807][ T5136] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.995447][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 462.007201][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 462.040249][ T5136] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 462.073173][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 462.114123][ T5136] usb 4-1: Product: syz [ 462.119201][ T5136] usb 4-1: Manufacturer: syz [ 462.134931][ T5091] Bluetooth: hci1: command tx timeout [ 462.154009][T13022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 462.165956][ T5136] cdc_wdm 4-1:1.0: skipping garbage [ 462.171209][ T5136] cdc_wdm 4-1:1.0: skipping garbage [ 462.202210][ T5136] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 462.232083][ T5136] cdc_wdm 4-1:1.0: Unknown control protocol [ 462.271430][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.284239][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.410205][ C1] wdm_int_callback: 304 callbacks suppressed [ 462.410221][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.422793][ C1] wdm_int_callback: 304 callbacks suppressed [ 462.422809][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.435028][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.441632][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.447914][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.454529][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.460817][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.467444][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.473741][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.480375][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.486755][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.493366][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.499657][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.506279][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.512589][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.514238][ T5182] usbhid 3-1:0.0: can't add hid device: -71 [ 462.519181][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.519398][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.537771][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.544072][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 462.550619][ T5182] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.550666][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 462.591790][ T5182] usb 3-1: USB disconnect, device number 61 [ 462.601405][ T5136] usb 4-1: USB disconnect, device number 61 [ 462.607342][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 462.778661][ T2390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.789433][ T2390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.801366][ T2390] bond0 (unregistering): (slave team0): Releasing backup interface [ 462.811784][ T2390] bond0 (unregistering): Released all slaves [ 462.828289][ T2390] bond1 (unregistering): Released all slaves [ 462.845225][ T2390] bond2 (unregistering): Released all slaves [ 462.869523][ T2390] bond3 (unregistering): Released all slaves [ 462.902725][ T2390] bond4 (unregistering): Released all slaves [ 462.918109][ T2390] bond5 (unregistering): Released all slaves [ 462.932176][ T2390] bond6 (unregistering): Released all slaves [ 462.951518][ T2390] bond7 (unregistering): Released all slaves [ 462.969581][ T2390] bond8 (unregistering): Released all slaves [ 462.981544][T12989] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.991149][T12989] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.999131][T12989] bridge_slave_1: entered allmulticast mode [ 463.008451][T12989] bridge_slave_1: entered promiscuous mode [ 463.046707][T13034] netlink: 'syz.4.1759': attribute type 4 has an invalid length. [ 463.073242][T13040] netlink: 'syz.4.1759': attribute type 4 has an invalid length. [ 463.200461][T13055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.222698][T12989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.281720][T13055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.340649][T13057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.390903][T13061] program syz.2.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 463.401618][T13061] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 463.428397][T12989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.456628][T13057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1763'. [ 463.469839][T13057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.544154][T12989] team0: Port device team_slave_0 added [ 463.553979][ T1153] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 463.589828][T12989] team0: Port device team_slave_1 added [ 463.651742][ T2390] hsr_slave_0: left promiscuous mode [ 463.678092][ T2390] hsr_slave_1: left promiscuous mode [ 463.714360][ T2390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.734904][ T1153] usb 5-1: device descriptor read/64, error -71 [ 463.736764][ T2390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.752954][ T2390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.778956][ T2390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.842711][ T2390] veth1_macvtap: left promiscuous mode [ 463.863865][ T2390] veth0_macvtap: left promiscuous mode [ 463.890350][ T2390] veth1_vlan: left promiscuous mode [ 463.901827][ T2390] veth0_vlan: left promiscuous mode [ 464.023687][ T1153] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 464.158640][T13077] netlink: 'syz.2.1767': attribute type 9 has an invalid length. [ 464.184151][T13077] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1767'. [ 464.214249][ T1153] usb 5-1: device descriptor read/64, error -71 [ 464.220875][ T5091] Bluetooth: hci1: command tx timeout [ 464.234468][ T5133] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 464.367908][ T1153] usb usb5-port1: attempt power cycle [ 464.438610][ T5133] usb 1-1: Using ep0 maxpacket: 16 [ 464.468988][ T5133] usb 1-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 464.492042][ T5133] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.508516][ T5133] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 464.518287][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.530394][ T5133] usb 1-1: config 0 descriptor?? [ 464.541900][ T5133] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 464.785295][ T2390] team0 (unregistering): Port device team_slave_1 removed [ 464.794995][ T1153] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 464.839968][ T2390] team0 (unregistering): Port device team_slave_0 removed [ 464.844367][ T1153] usb 5-1: device descriptor read/8, error -71 [ 465.115721][ T1153] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 465.156916][ T1153] usb 5-1: device descriptor read/8, error -71 [ 465.277014][ T1153] usb usb5-port1: unable to enumerate USB device [ 465.336519][T13091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.349113][T13091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.413321][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 465.499503][T12989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.521872][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.548588][T12989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.562211][T12989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.569506][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.597185][T12989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.624042][T13080] netlink: 'syz.2.1767': attribute type 9 has an invalid length. [ 465.635037][T13080] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1767'. [ 465.688422][T12989] hsr_slave_0: entered promiscuous mode [ 465.696537][T12989] hsr_slave_1: entered promiscuous mode [ 465.702678][T12989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.712527][T12989] Cannot create hsr debugfs directory [ 466.065148][T13102] netlink: 'syz.3.1771': attribute type 4 has an invalid length. [ 466.098797][T13106] netlink: 'syz.3.1771': attribute type 4 has an invalid length. [ 466.236057][ T5364] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 466.294748][ T5091] Bluetooth: hci1: command tx timeout [ 466.463614][ T5364] usb 3-1: Using ep0 maxpacket: 16 [ 466.488945][ T5364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.518680][ T5364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 466.553680][ T5364] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 466.563111][ T5364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.584533][ T5364] usb 3-1: config 0 descriptor?? [ 466.786049][T12989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.802257][T12989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.836391][T12989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.858845][T12989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.012476][ T5182] usb 1-1: USB disconnect, device number 59 [ 467.184342][T13129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.205916][T12989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.222080][T13099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.240619][T13099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.246501][T12989] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.261704][T13129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1775'. [ 467.272366][T13129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.335912][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.343162][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.392113][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.399423][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.466353][ T5364] usbhid 3-1:0.0: can't add hid device: -71 [ 467.472398][ T5364] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 467.546513][ T5364] usb 3-1: USB disconnect, device number 62 [ 467.687946][T13136] program syz.4.1776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.701278][T13136] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 467.742581][T12989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.913017][T12989] veth0_vlan: entered promiscuous mode [ 467.938532][T12989] veth1_vlan: entered promiscuous mode [ 468.005334][T12989] veth0_macvtap: entered promiscuous mode [ 468.027937][T12989] veth1_macvtap: entered promiscuous mode [ 468.069045][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.069066][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.069073][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.069082][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.069089][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.069096][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.069103][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.069111][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.070303][T12989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.085295][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.085313][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.085320][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.085329][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.085336][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.085344][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.085350][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.085358][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.086324][T12989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.098274][T12989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.098312][T12989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.098339][T12989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.098366][T12989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.152980][T13156] netlink: 'syz.3.1779': attribute type 9 has an invalid length. [ 468.153006][T13156] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1779'. [ 468.364180][ T5091] Bluetooth: hci1: command tx timeout [ 468.380617][T13160] netlink: 'syz.3.1779': attribute type 9 has an invalid length. [ 468.380645][T13160] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1779'. [ 468.474819][ T2390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.474850][ T2390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.813830][ T5087] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 468.839067][ T2826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.839093][ T2826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.003599][ T5087] usb 5-1: Using ep0 maxpacket: 16 [ 469.007924][ T5087] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 469.007957][ T5087] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.007977][ T5087] usb 5-1: Product: syz [ 469.007992][ T5087] usb 5-1: Manufacturer: syz [ 469.008008][ T5087] usb 5-1: SerialNumber: syz [ 469.010372][ T5087] usb 5-1: config 0 descriptor?? [ 469.015023][ T5087] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 469.124305][T13188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1744'. [ 469.150314][T13183] netlink: 'syz.1.1744': attribute type 3 has an invalid length. [ 469.224574][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.224984][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.232431][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.234797][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.270170][ T5087] gp8psk: usb in 128 operation failed. [ 469.270600][ T5087] gp8psk: usb in 137 operation failed. [ 469.270617][ T5087] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.271410][ T5087] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 469.271460][ T5087] usb 5-1: media controller created [ 469.323018][ T5087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.393527][ T5087] gp8psk_fe: Frontend revision 1 attached [ 469.393580][ T5087] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 469.393741][ T5087] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 469.582409][ T5087] gp8psk: usb in 138 operation failed. [ 469.582431][ T5087] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 469.582447][ T5087] gp8psk: found Genpix USB device pID = 201 (hex) [ 469.585943][ T5087] usb 5-1: USB disconnect, device number 50 [ 469.773418][ T5087] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 470.516983][T13228] program syz.0.1790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.538103][T13228] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 470.551301][T13230] netlink: 'syz.1.1791': attribute type 9 has an invalid length. [ 470.601879][T13230] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1791'. [ 470.680256][ T5136] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 470.863995][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 470.887086][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.931935][ T5136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.940810][T13231] netlink: 'syz.1.1791': attribute type 9 has an invalid length. [ 470.966975][T13231] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1791'. [ 471.001563][ T5136] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.039483][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.082432][ T5136] usb 3-1: config 0 descriptor?? [ 471.722908][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.757104][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.971147][T13269] netlink: 'syz.4.1798': attribute type 4 has an invalid length. [ 471.986966][ T5136] usbhid 3-1:0.0: can't add hid device: -71 [ 472.011933][ T5136] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 472.051989][ T5136] usb 3-1: USB disconnect, device number 63 [ 472.057708][T13269] netlink: 'syz.4.1798': attribute type 4 has an invalid length. [ 473.145761][T13310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1808'. [ 473.184182][ T5136] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 473.392384][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.421959][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.452560][ T5136] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.476287][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.526073][ T5136] usb 1-1: config 0 descriptor?? [ 473.760105][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.794152][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.883258][T13304] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 474.250619][ T5132] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 474.385916][ T5136] usb 1-1: language id specifier not provided by device, defaulting to English [ 474.413596][ T1153] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 474.443629][ T5132] usb 5-1: Using ep0 maxpacket: 16 [ 474.459711][ T5132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.473647][ T5132] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.487630][ T5132] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 474.497908][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.514582][ T5132] usb 5-1: config 0 descriptor?? [ 474.574334][ T5133] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 474.598308][ T1153] usb 2-1: config 0 has no interfaces? [ 474.611828][ T1153] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 474.621970][ T1153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.645238][ T1153] usb 2-1: config 0 descriptor?? [ 474.681522][T13336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1819'. [ 474.694536][T13336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.766405][ T5133] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 474.786372][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.802219][ T5133] usb 4-1: config 0 descriptor?? [ 474.820337][ T5136] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #100: -71 [ 474.847802][ T5136] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 474.861843][ T5136] uclogic 0003:256C:006D.0023: failed probing pen v1 parameters: -71 [ 474.872363][ T5136] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 474.880881][ T5136] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 474.901263][ T5136] usb 1-1: USB disconnect, device number 60 [ 475.132586][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.142526][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.228165][ T5133] [drm:udl_init] *ERROR* Selecting channel failed [ 475.264364][ T5133] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 475.272350][ T5133] [drm] Initialized udl on minor 2 [ 475.287800][ T5133] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 475.301913][ T5133] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 475.319264][ T5136] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 475.330591][ T5133] usb 4-1: USB disconnect, device number 62 [ 475.355103][ T5136] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 475.383425][ T5132] usbhid 5-1:0.0: can't add hid device: -71 [ 475.414234][ T5132] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 475.441217][ T5132] usb 5-1: USB disconnect, device number 51 [ 475.803811][ T1153] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 475.932430][T13356] netlink: 'syz.2.1824': attribute type 4 has an invalid length. [ 475.962612][T13356] netlink: 'syz.2.1824': attribute type 4 has an invalid length. [ 476.013585][ T1153] usb 1-1: Using ep0 maxpacket: 16 [ 476.021868][ T1153] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 476.050648][ T1153] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.060259][ T1153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 476.073098][ T1153] usb 1-1: SerialNumber: syz [ 476.153775][ T5132] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 476.195471][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1825'. [ 476.308034][ T1153] usb 1-1: USB disconnect, device number 61 [ 476.375810][ T5132] usb 4-1: not running at top speed; connect to a high speed hub [ 476.392953][ T5132] usb 4-1: config 1 interface 0 altsetting 129 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 476.409585][ T5132] usb 4-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.423117][ T5132] usb 4-1: config 1 interface 0 has no altsetting 0 [ 476.440424][ T5132] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 476.450498][ T5132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.459967][ T5132] usb 4-1: Product: ш [ 476.471231][ T5132] usb 4-1: Manufacturer: ࠁ [ 476.477948][ T5132] usb 4-1: SerialNumber: К [ 476.497350][T13353] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 476.508923][T13353] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 476.534108][ T5133] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 476.726457][ T5133] usb 3-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 476.745101][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.767663][ T5133] usb 3-1: config 0 descriptor?? [ 476.777943][ T5132] usb 4-1: USB disconnect, device number 63 [ 476.810209][ T5133] usb 3-1: selecting invalid altsetting 3 [ 476.816933][ T5133] comedi comedi0: could not set alternate setting 3 in high speed [ 476.837057][ T5133] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 476.867213][ T5133] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 477.150419][ T5132] usb 2-1: USB disconnect, device number 66 [ 477.168911][ T5133] usb 3-1: USB disconnect, device number 64 [ 477.546929][T13385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1833'. [ 477.668473][ T58] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 477.904220][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 477.924811][ T58] usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 477.960048][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.976740][ T58] usb 1-1: Product: syz [ 477.987829][T13394] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 478.002942][ T58] usb 1-1: Manufacturer: syz [ 478.021073][ T58] usb 1-1: SerialNumber: syz [ 478.029499][ T5133] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 478.065837][ T58] r8152-cfgselector 1-1: Unknown version 0x0000 [ 478.087603][ T58] r8152-cfgselector 1-1: config 0 descriptor?? [ 478.263715][ T5133] usb 4-1: Using ep0 maxpacket: 16 [ 478.334619][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.369889][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.395718][ T5133] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.418542][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.471388][ T5133] usb 4-1: config 0 descriptor?? [ 478.635551][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.651498][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.724228][ T5132] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 478.943541][ T5132] usb 2-1: Using ep0 maxpacket: 8 [ 478.958115][ T5132] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 478.967518][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 478.992955][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 479.033164][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 479.058047][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 479.081682][ T5132] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 479.090934][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 479.109837][T13389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.133290][T13389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.141661][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 479.178812][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 479.197789][ T5132] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 479.205903][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 479.219952][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 479.232799][ T5132] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 479.253590][ T5132] usb 2-1: string descriptor 0 read error: -22 [ 479.262141][ T5132] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 479.274064][ T5132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.336122][ T5132] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 479.379803][ T5133] usbhid 4-1:0.0: can't add hid device: -71 [ 479.403358][ T5133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 479.429877][ T5133] usb 4-1: USB disconnect, device number 64 [ 479.808568][ T5133] usb 2-1: USB disconnect, device number 67 [ 479.934622][T13423] netlink: 'syz.2.1844': attribute type 9 has an invalid length. [ 479.961689][T13423] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1844'. [ 479.987406][T13425] netlink: 'syz.3.1845': attribute type 14 has an invalid length. [ 480.154987][T13426] netlink: 'syz.2.1844': attribute type 9 has an invalid length. [ 480.178245][ T58] r8152-cfgselector 1-1: USB disconnect, device number 62 [ 480.213672][T13426] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1844'. [ 480.454188][ T5132] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 480.666078][ T5132] usb 4-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 480.695694][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.745852][ T5132] usb 4-1: config 0 descriptor?? [ 480.763797][ T58] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 480.778201][ T5132] usb 4-1: selecting invalid altsetting 3 [ 480.791658][ T5132] comedi comedi0: could not set alternate setting 3 in high speed [ 480.810809][ T5132] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 480.842321][ T5132] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 480.944832][ T58] usb 2-1: no configurations [ 480.949478][ T58] usb 2-1: can't read configurations, error -22 [ 481.124102][ T58] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 481.223105][ T5132] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 481.314206][ T5133] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 481.324389][ T58] usb 2-1: no configurations [ 481.336205][ T58] usb 2-1: can't read configurations, error -22 [ 481.356657][ T58] usb usb2-port1: attempt power cycle [ 481.424127][ T5132] usb 3-1: Using ep0 maxpacket: 32 [ 481.456750][ T5132] usb 3-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 481.484155][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.512788][ T5132] usb 3-1: Product: syz [ 481.523985][ T5133] usb 5-1: Using ep0 maxpacket: 16 [ 481.531133][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.541266][ T5132] usb 3-1: Manufacturer: syz [ 481.547821][ T5132] usb 3-1: SerialNumber: syz [ 481.567846][ T5133] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.590247][ T5132] r8152-cfgselector 3-1: Unknown version 0x0000 [ 481.601554][ T5132] r8152-cfgselector 3-1: config 0 descriptor?? [ 481.629516][ T5133] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.659439][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.706834][ T5133] usb 5-1: config 0 descriptor?? [ 481.793954][ T58] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 481.835591][ T58] usb 2-1: no configurations [ 481.840981][ T58] usb 2-1: can't read configurations, error -22 [ 481.893708][ T1153] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 481.970089][ T5136] usb 4-1: USB disconnect, device number 65 [ 482.011061][ T58] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 482.054889][ T58] usb 2-1: no configurations [ 482.059528][ T58] usb 2-1: can't read configurations, error -22 [ 482.077763][ T58] usb usb2-port1: unable to enumerate USB device [ 482.099846][ T1153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 482.113367][ T1153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 482.129827][ T1153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.152763][ T1153] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.162944][ T1153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.192993][T13451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.207602][ T1153] usb 1-1: config 0 descriptor?? [ 482.224971][T13451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.346176][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.356654][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.578033][ T5133] usbhid 5-1:0.0: can't add hid device: -71 [ 482.586556][ T5133] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 482.604178][ T5133] usb 5-1: USB disconnect, device number 52 [ 482.638379][ T1153] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 482.660560][ T1153] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 483.537631][ T1153] usb 1-1: USB disconnect, device number 63 [ 483.665811][T13464] netlink: 'syz.0.1860': attribute type 4 has an invalid length. [ 483.714820][ T5133] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 483.731826][T13467] netlink: 'syz.0.1860': attribute type 4 has an invalid length. [ 483.828071][ T7204] r8152-cfgselector 3-1: USB disconnect, device number 65 [ 483.874608][T13469] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1861'. [ 483.925147][ T5133] usb 5-1: Using ep0 maxpacket: 32 [ 483.952506][ T5133] usb 5-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 483.970949][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.993264][ T5133] usb 5-1: Product: syz [ 483.998114][ T5133] usb 5-1: Manufacturer: syz [ 484.002745][ T5133] usb 5-1: SerialNumber: syz [ 484.009137][ T29] audit: type=1326 audit(1719847624.772:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.047337][ T5133] r8152-cfgselector 5-1: Unknown version 0x0000 [ 484.058625][ T5133] r8152-cfgselector 5-1: config 0 descriptor?? [ 484.066727][ T29] audit: type=1326 audit(1719847624.772:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.110057][T13474] netlink: 'syz.2.1862': attribute type 9 has an invalid length. [ 484.129002][ T29] audit: type=1326 audit(1719847624.772:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.148603][T13474] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1862'. [ 484.158902][ T29] audit: type=1326 audit(1719847624.772:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.184744][ T58] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 484.249491][ T29] audit: type=1326 audit(1719847624.782:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.309636][ T29] audit: type=1326 audit(1719847624.812:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c071745d0 code=0x7ffc0000 [ 484.384041][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 484.395630][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 484.417769][ T29] audit: type=1326 audit(1719847624.812:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.425934][T13475] netlink: 'syz.2.1862': attribute type 9 has an invalid length. [ 484.444052][ T58] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 487 [ 484.479181][ T58] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 484.499321][ T29] audit: type=1326 audit(1719847624.812:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.517544][T13475] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1862'. [ 484.544552][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.554425][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.562459][ T58] usb 2-1: Product: syz [ 484.591426][ T29] audit: type=1326 audit(1719847624.832:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.619254][ T58] usb 2-1: Manufacturer: syz [ 484.628277][ T58] usb 2-1: SerialNumber: syz [ 484.709953][ T29] audit: type=1326 audit(1719847624.832:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13472 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 484.860345][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.872057][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.918865][ T58] cdc_ncm 2-1:1.0: bind() failure [ 484.992936][ T58] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 485.034825][ T58] cdc_ncm 2-1:1.1: bind() failure [ 485.084593][ T58] usb 2-1: USB disconnect, device number 72 [ 485.139733][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.162671][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.423709][ T5364] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 485.644626][ T5364] usb 3-1: Using ep0 maxpacket: 16 [ 485.672612][ T5364] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 485.702288][ T5364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.736870][ T5364] usb 3-1: Product: syz [ 485.747974][ T5364] usb 3-1: Manufacturer: syz [ 485.758965][ T5364] usb 3-1: SerialNumber: syz [ 485.792382][ T5364] usb 3-1: config 0 descriptor?? [ 485.817968][ T5364] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 485.863635][ T5133] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 486.043740][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.054750][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.094802][ T5133] usb 4-1: Using ep0 maxpacket: 16 [ 486.108743][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.120296][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.137414][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.151367][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.189865][ T5133] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.204404][ T5364] gp8psk: usb in 128 operation failed. [ 486.223913][ T5364] gp8psk: usb in 137 operation failed. [ 486.232058][ T5364] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 486.232742][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.254701][ T5364] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 486.270065][ T5364] usb 3-1: media controller created [ 486.315001][ T5133] usb 4-1: config 0 descriptor?? [ 486.365066][ T7204] r8152-cfgselector 5-1: USB disconnect, device number 53 [ 486.372013][ T5364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.489779][ T5364] gp8psk_fe: Frontend revision 1 attached [ 486.505219][ T5364] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 486.513447][ T5364] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 486.634909][ T5364] gp8psk: usb in 138 operation failed. [ 486.647059][ T5364] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 486.667538][ T5364] gp8psk: found Genpix USB device pID = 201 (hex) [ 486.730140][ T5364] usb 3-1: USB disconnect, device number 66 [ 486.936589][T13492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.960378][ T5364] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 486.976037][T13492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.054404][T13514] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1874'. [ 487.092309][T13514] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1874'. [ 487.208245][ T5133] usbhid 4-1:0.0: can't add hid device: -71 [ 487.228742][ T5133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 487.266333][T13520] program syz.1.1876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.284455][ T5133] usb 4-1: USB disconnect, device number 66 [ 487.328268][T13520] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 487.404342][ T5136] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 487.433738][ T5132] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 487.593874][ T5136] usb 5-1: Using ep0 maxpacket: 32 [ 487.610114][ T5136] usb 5-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 487.624532][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.636247][ T5136] usb 5-1: Product: syz [ 487.649980][ T5136] usb 5-1: Manufacturer: syz [ 487.666414][ T5136] usb 5-1: SerialNumber: syz [ 487.668416][ T5132] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 487.686981][ T5136] r8152-cfgselector 5-1: Unknown version 0x0000 [ 487.700081][ T5136] r8152-cfgselector 5-1: config 0 descriptor?? [ 487.704709][ T5132] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 487.819872][ T5132] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 487.846537][ T5132] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 487.895812][ T5132] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 487.958743][ T5132] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 487.999516][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 488.087761][ T5132] usb 1-1: Product: syz [ 488.093863][ T5132] usb 1-1: Manufacturer: syz [ 488.102797][T13508] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 488.125470][ T5132] cdc_wdm 1-1:1.0: skipping garbage [ 488.130807][ T5132] cdc_wdm 1-1:1.0: skipping garbage [ 488.147689][ T5132] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 488.163569][ T5132] cdc_wdm 1-1:1.0: Unknown control protocol [ 488.344368][ C0] wdm_int_callback: 214 callbacks suppressed [ 488.344392][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.357013][ C0] wdm_int_callback: 214 callbacks suppressed [ 488.357031][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.369167][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.370290][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.375311][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.375333][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.375528][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.375552][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.375763][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.384844][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.390496][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.429767][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.435872][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.442482][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.448643][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.454753][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.461392][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.467782][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.474400][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.480713][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.487341][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.493661][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.500315][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.506598][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 488.513217][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 488.550358][ T5136] usb 1-1: USB disconnect, device number 64 [ 488.550395][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 488.668868][T13534] warning: `syz.1.1881' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 489.035708][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 489.136315][T13546] netlink: 'syz.1.1882': attribute type 3 has an invalid length. [ 489.365466][T13552] netlink: 'syz.3.1883': attribute type 9 has an invalid length. [ 489.404356][T13552] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1883'. [ 489.528074][T13554] netlink: 'syz.3.1883': attribute type 9 has an invalid length. [ 489.582395][T13554] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1883'. [ 489.637068][ T5136] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 490.153979][ T5136] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 490.274044][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 490.274065][ T29] audit: type=1326 audit(1719847631.042:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.323991][ T7204] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 490.359611][ T29] audit: type=1326 audit(1719847631.042:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.363643][ T5136] usb 5-1: Using ep0 maxpacket: 16 [ 490.414783][ T29] audit: type=1326 audit(1719847631.102:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.446335][ T5136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.468291][T13579] fuse: Unknown parameter '00000000000000000006' [ 490.478192][ T5136] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 490.505015][ T29] audit: type=1326 audit(1719847631.102:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.524081][ T7204] usb 2-1: Using ep0 maxpacket: 8 [ 490.537708][ T5136] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 490.549661][ T29] audit: type=1326 audit(1719847631.102:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.565545][ T7204] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 490.577452][ T29] audit: type=1326 audit(1719847631.102:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea6f745d0 code=0x7ffc0000 [ 490.601464][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.619245][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 490.640424][ T5136] usb 5-1: config 0 descriptor?? [ 490.666623][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 490.668374][ T29] audit: type=1326 audit(1719847631.102:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.694072][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 490.745967][ T7204] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 490.763406][ T29] audit: type=1326 audit(1719847631.102:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.774081][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 490.831566][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 490.854007][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 490.861281][ T29] audit: type=1326 audit(1719847631.102:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.885641][ T7204] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 490.906982][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 490.919304][ T58] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 490.944046][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 490.960040][ T29] audit: type=1326 audit(1719847631.102:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.3.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 490.966048][ T7204] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 491.039030][ T7204] usb 2-1: string descriptor 0 read error: -22 [ 491.046235][ T7204] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 491.065188][ T7204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.104424][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 491.116352][ T58] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 491.133560][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.142381][ T7204] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 491.162230][ T58] usb 3-1: Product: syz [ 491.182984][ T58] usb 3-1: Manufacturer: syz [ 491.201340][ T58] usb 3-1: SerialNumber: syz [ 491.215462][ T58] usb 3-1: config 0 descriptor?? [ 491.299377][T13564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.318705][T13564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.546416][ T5136] usbhid 5-1:0.0: can't add hid device: -71 [ 491.552719][ T5136] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 491.584603][ T5136] usb 5-1: USB disconnect, device number 55 [ 491.691449][T13586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1894'. [ 491.816970][T13591] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1895'. [ 491.833753][T13591] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.1895'. [ 492.051217][ T1153] usb 2-1: USB disconnect, device number 73 [ 492.128049][T13596] netlink: 'syz.3.1896': attribute type 10 has an invalid length. [ 492.138817][ T5132] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 492.155047][T13596] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.162991][T13596] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.209259][T13596] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.216652][T13596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.224440][T13596] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.231598][T13596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.250149][T13596] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 492.324964][ T58] rtl8150 3-1:0.0: couldn't reset the device [ 492.342036][ T58] rtl8150 3-1:0.0: probe with driver rtl8150 failed with error -5 [ 492.357281][ T5132] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.374615][ T5132] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 492.398699][ T5132] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.414304][ T5132] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 492.428982][ T5132] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 492.448833][ T5132] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.461475][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.479069][ T5132] usb 1-1: Product: syz [ 492.483797][ T5132] usb 1-1: Manufacturer: syz [ 492.505404][T13591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.535135][ T5132] cdc_wdm 1-1:1.0: skipping garbage [ 492.546544][ T5132] cdc_wdm 1-1:1.0: skipping garbage [ 492.560874][ T5132] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 492.577100][ T5132] cdc_wdm 1-1:1.0: Unknown control protocol [ 492.738481][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 492.748820][ T5136] usb 1-1: USB disconnect, device number 65 [ 492.984650][ T58] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 493.024278][T13615] netlink: 'syz.3.1902': attribute type 4 has an invalid length. [ 493.071977][T13615] netlink: 'syz.3.1902': attribute type 4 has an invalid length. [ 493.214063][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 493.233276][ T58] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 493.264587][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.282558][ T58] usb 2-1: Product: syz [ 493.303957][ T58] usb 2-1: Manufacturer: syz [ 493.307391][ T5364] usb 3-1: USB disconnect, device number 67 [ 493.312074][ T58] usb 2-1: SerialNumber: syz [ 493.348874][ T58] r8152-cfgselector 2-1: Unknown version 0x0000 [ 493.362375][ T58] r8152-cfgselector 2-1: config 0 descriptor?? [ 493.444023][ T5131] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 493.654103][ T5131] usb 4-1: Using ep0 maxpacket: 16 [ 493.697914][ T5131] usb 4-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 493.718207][ T5131] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 493.749822][ T5131] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 493.763140][ T5131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.775159][ T5131] usb 4-1: config 0 descriptor?? [ 493.866041][T13625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1906'. [ 493.987016][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 494.014405][ T5136] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 494.125781][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.170979][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.204645][ T5136] usb 1-1: Using ep0 maxpacket: 16 [ 494.218699][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.234473][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.247464][ T5136] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 494.253707][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.268338][ T5132] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 494.268685][ T5136] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 494.311668][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.401802][ T5136] usb 1-1: config 0 descriptor?? [ 494.533567][ T5132] usb 3-1: Using ep0 maxpacket: 8 [ 494.549527][ T5132] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 494.568255][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.612720][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 494.650979][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 494.694586][ T5132] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 494.716837][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.761326][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 494.801275][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 494.866678][ T5132] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 494.897797][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.911794][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 494.930492][ T5132] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 494.997618][ T5132] usb 3-1: string descriptor 0 read error: -22 [ 495.012019][ T5132] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 495.026022][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.045601][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.064385][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.070131][ T5131] usb 4-1: string descriptor 0 read error: -71 [ 495.112273][ T5131] usb 4-1: USB disconnect, device number 67 [ 495.152699][ T5132] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 495.301934][ T5136] usbhid 1-1:0.0: can't add hid device: -71 [ 495.325709][ T5136] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 495.388139][ T5136] usb 1-1: USB disconnect, device number 66 [ 495.589378][ T5364] r8152-cfgselector 2-1: USB disconnect, device number 74 [ 495.919884][T13650] netlink: 'syz.3.1913': attribute type 4 has an invalid length. [ 495.985269][T13650] netlink: 'syz.3.1913': attribute type 4 has an invalid length. [ 496.074164][T13648] netlink: 'syz.1.1914': attribute type 9 has an invalid length. [ 496.081947][T13648] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1914'. [ 496.102859][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 496.102876][ T29] audit: type=1326 audit(1719847636.862:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.199264][ T29] audit: type=1326 audit(1719847636.872:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.294216][ T29] audit: type=1326 audit(1719847636.912:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.365321][ T1153] usb 3-1: USB disconnect, device number 68 [ 496.412562][ T29] audit: type=1326 audit(1719847636.912:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.459783][T13648] netlink: 'syz.1.1914': attribute type 9 has an invalid length. [ 496.471781][T13648] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1914'. [ 496.482883][ T29] audit: type=1326 audit(1719847636.912:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.507579][ T29] audit: type=1326 audit(1719847636.912:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c071745d0 code=0x7ffc0000 [ 496.591908][ T29] audit: type=1326 audit(1719847636.912:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.629077][ T29] audit: type=1326 audit(1719847636.912:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.728541][ T29] audit: type=1326 audit(1719847636.912:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 496.892736][ T29] audit: type=1326 audit(1719847636.912:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.0.1915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c07175b99 code=0x7ffc0000 [ 497.293594][ T5132] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 497.473767][ T5132] usb 2-1: Using ep0 maxpacket: 16 [ 497.476351][ T1153] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 497.486986][ T5132] usb 2-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 497.487012][ T5132] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.487050][ T5132] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 497.487072][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.488775][ T5132] usb 2-1: config 0 descriptor?? [ 497.658630][ T1153] usb 3-1: Using ep0 maxpacket: 16 [ 497.662993][ T1153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.663077][ T1153] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.663120][ T1153] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 497.663145][ T1153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.666045][ T1153] usb 3-1: config 0 descriptor?? [ 497.727263][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 497.801383][ T5132] usb 2-1: string descriptor 0 read error: -71 [ 497.802895][ T5132] usb 2-1: USB disconnect, device number 75 [ 498.028118][T13703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.145308][T13703] netlink: 'syz.4.1929': attribute type 3 has an invalid length. [ 498.145336][T13703] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1929'. [ 498.423356][T13691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.463895][T13691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.694876][ T1153] usbhid 3-1:0.0: can't add hid device: -71 [ 498.720261][ T1153] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 498.789851][ T1153] usb 3-1: USB disconnect, device number 69 [ 498.843831][ T5132] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 499.055173][ T5132] usb 4-1: Using ep0 maxpacket: 8 [ 499.084721][ T5132] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 499.113717][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 499.140533][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 499.162156][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 499.199590][ T5132] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 499.213924][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 499.243544][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 499.271024][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 499.306352][ T5132] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 499.333622][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 499.364388][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 499.404544][ T5132] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 499.427628][ T5132] usb 4-1: string descriptor 0 read error: -22 [ 499.450754][ T5132] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 499.473628][ T5132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.497002][T13735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 499.521603][ T5132] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 500.470461][T13752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.481059][T13752] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 501.033629][ T5132] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 501.224625][ T5132] usb 5-1: Using ep0 maxpacket: 16 [ 501.231942][ T5132] usb 5-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 501.247623][ T5132] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.256846][ T5132] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 501.272976][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.284338][ T5132] usb 5-1: config 0 descriptor?? [ 501.400414][ T1153] usb 4-1: USB disconnect, device number 68 [ 501.495277][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 501.527862][ T5132] usb 5-1: string descriptor 0 read error: -71 [ 501.547383][ T5132] usb 5-1: USB disconnect, device number 56 [ 501.555535][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 501.555550][ T29] audit: type=1326 audit(1719847642.332:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13773 comm="syz.3.1944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x0 [ 501.583388][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.736076][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.746652][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.406427][T13784] netlink: 'syz.3.1947': attribute type 4 has an invalid length. [ 502.427443][T13784] netlink: 'syz.3.1947': attribute type 4 has an invalid length. [ 502.562095][T13786] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1948'. [ 502.577788][T13786] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1948'. [ 502.853861][ T5133] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 503.045632][ T5133] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.054639][ T5133] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 503.065323][ T5133] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.074839][ T5133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 503.090766][ T5133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 503.107775][ T5133] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.117105][ T5133] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.126087][ T5133] usb 4-1: Product: syz [ 503.130241][ T5133] usb 4-1: Manufacturer: syz [ 503.138476][T13786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 503.147214][ T5133] cdc_wdm 4-1:1.0: skipping garbage [ 503.152432][ T5133] cdc_wdm 4-1:1.0: skipping garbage [ 503.159075][ T5133] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 503.166086][ T5133] cdc_wdm 4-1:1.0: Unknown control protocol [ 503.368679][ C1] wdm_int_callback: 196 callbacks suppressed [ 503.368701][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 503.381298][ C1] wdm_int_callback: 196 callbacks suppressed [ 503.381310][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 503.393491][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 503.395303][ T5182] usb 4-1: USB disconnect, device number 69 [ 503.400087][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 503.400109][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 504.533610][ T5132] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 504.743579][ T5132] usb 4-1: Using ep0 maxpacket: 16 [ 504.750650][ T5132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.761616][ T5132] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.774506][ T5132] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 504.783651][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.794156][ T5132] usb 4-1: config 0 descriptor?? [ 505.406702][T13791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.416875][T13791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.631585][ T5132] usbhid 4-1:0.0: can't add hid device: -71 [ 505.637901][ T5132] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 505.648207][ T5132] usb 4-1: USB disconnect, device number 70 [ 506.176614][ T29] audit: type=1326 audit(1719847646.952:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.199907][ T29] audit: type=1326 audit(1719847646.952:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.225184][ T29] audit: type=1326 audit(1719847646.952:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.248947][ T29] audit: type=1326 audit(1719847646.952:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.272259][ T29] audit: type=1326 audit(1719847646.952:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.297132][ T29] audit: type=1326 audit(1719847646.952:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ea6f745d0 code=0x7ffc0000 [ 506.326278][ T29] audit: type=1326 audit(1719847646.952:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.356446][ T29] audit: type=1326 audit(1719847646.952:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 506.385342][ T29] audit: type=1326 audit(1719847646.952:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13792 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6f75b99 code=0x7ffc0000 [ 563.168513][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.176173][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.608649][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.615113][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.803745][ T30] INFO: task kworker/1:8:7204 blocked for more than 143 seconds. [ 643.811516][ T30] Not tainted 6.10.0-rc6-syzkaller #0 [ 643.817855][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.827106][ T30] task:kworker/1:8 state:D stack:21200 pid:7204 tgid:7204 ppid:2 flags:0x00004000 [ 643.837791][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 643.844982][ T30] Call Trace: [ 643.848276][ T30] [ 643.851218][ T30] __schedule+0x17e8/0x4a20 [ 643.856406][ T30] ? __pfx___schedule+0x10/0x10 [ 643.861288][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 643.867818][ T30] ? __pfx_lock_release+0x10/0x10 [ 643.872869][ T30] ? kick_pool+0x1bd/0x620 [ 643.877776][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.883166][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 643.889105][ T30] ? schedule+0x90/0x320 [ 643.893374][ T30] schedule+0x14b/0x320 [ 643.898254][ T30] schedule_preempt_disabled+0x13/0x30 [ 643.908505][ T30] __mutex_lock+0x6a4/0xd70 [ 643.913053][ T30] ? __mutex_lock+0x527/0xd70 [ 643.918219][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 643.924968][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 643.930023][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 643.936481][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 643.942836][ T30] ? process_scheduled_works+0x945/0x1830 [ 643.949055][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 643.955588][ T30] ? process_scheduled_works+0x945/0x1830 [ 643.961325][ T30] process_scheduled_works+0xa2c/0x1830 [ 643.967512][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 643.974022][ T30] ? assign_work+0x364/0x3d0 [ 643.978641][ T30] worker_thread+0x86d/0xd50 [ 643.983243][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 643.989525][ T30] ? __kthread_parkme+0x169/0x1d0 [ 643.994946][ T30] ? __pfx_worker_thread+0x10/0x10 [ 644.000048][ T30] kthread+0x2f0/0x390 [ 644.004629][ T30] ? __pfx_worker_thread+0x10/0x10 [ 644.009749][ T30] ? __pfx_kthread+0x10/0x10 [ 644.015493][ T30] ret_from_fork+0x4b/0x80 [ 644.019942][ T30] ? __pfx_kthread+0x10/0x10 [ 644.024701][ T30] ret_from_fork_asm+0x1a/0x30 [ 644.029488][ T30] [ 644.032504][ T30] INFO: task syz.0.1939:13730 blocked for more than 143 seconds. [ 644.040412][ T30] Not tainted 6.10.0-rc6-syzkaller #0 [ 644.046355][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.055090][ T30] task:syz.0.1939 state:D stack:24992 pid:13730 tgid:13730 ppid:11350 flags:0x00004004 [ 644.065354][ T30] Call Trace: [ 644.068641][ T30] [ 644.071559][ T30] __schedule+0x17e8/0x4a20 [ 644.076140][ T30] ? __pfx___schedule+0x10/0x10 [ 644.081018][ T30] ? __pfx_lock_release+0x10/0x10 [ 644.086120][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 644.091595][ T30] ? schedule+0x90/0x320 [ 644.095898][ T30] schedule+0x14b/0x320 [ 644.100063][ T30] schedule_preempt_disabled+0x13/0x30 [ 644.105580][ T30] __mutex_lock+0x6a4/0xd70 [ 644.110102][ T30] ? kobject_put+0x443/0x480 [ 644.114748][ T30] ? __mutex_lock+0x527/0xd70 [ 644.119461][ T30] ? rfkill_unregister+0xd0/0x230 [ 644.124718][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.129761][ T30] ? __pfx_device_del+0x10/0x10 [ 644.135865][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 644.141885][ T30] rfkill_unregister+0xd0/0x230 [ 644.146878][ T30] nfc_unregister_device+0x96/0x2a0 [ 644.152091][ T30] virtual_ncidev_close+0x59/0x90 [ 644.157206][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 644.162934][ T30] __fput+0x406/0x8b0 [ 644.166978][ T30] task_work_run+0x24f/0x310 [ 644.171581][ T30] ? __pfx_task_work_run+0x10/0x10 [ 644.176756][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 644.182486][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 644.188181][ T30] do_syscall_64+0x100/0x230 [ 644.192783][ T30] ? clear_bhb_loop+0x35/0x90 [ 644.197519][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.203429][ T30] RIP: 0033:0x7f5c07175b99 [ 644.208060][ T30] RSP: 002b:00007f5c0742fb48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 644.216528][ T30] RAX: 0000000000000000 RBX: 00007f5c07305aa0 RCX: 00007f5c07175b99 [ 644.224545][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 644.232522][ T30] RBP: 00007f5c07305aa0 R08: 0000000000000008 R09: 000000160742fe5f [ 644.240562][ T30] R10: 00000000003fd620 R11: 0000000000000246 R12: 000000000007a0e1 [ 644.248600][ T30] R13: 0000000000000032 R14: 00007f5c07305aa0 R15: 00007f5c0742fc30 [ 644.256678][ T30] [ 644.259716][ T30] INFO: task syz.2.1940:13734 blocked for more than 143 seconds. [ 644.267493][ T30] Not tainted 6.10.0-rc6-syzkaller #0 [ 644.273385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.282107][ T30] task:syz.2.1940 state:D stack:26584 pid:13734 tgid:13734 ppid:10745 flags:0x00004004 [ 644.292357][ T30] Call Trace: [ 644.295704][ T30] [ 644.298642][ T30] __schedule+0x17e8/0x4a20 [ 644.303143][ T30] ? __pfx___schedule+0x10/0x10 [ 644.308050][ T30] ? __pfx_lock_release+0x10/0x10 [ 644.313096][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 644.318641][ T30] ? schedule+0x90/0x320 [ 644.322896][ T30] schedule+0x14b/0x320 [ 644.327117][ T30] schedule_preempt_disabled+0x13/0x30 [ 644.332591][ T30] __mutex_lock+0x6a4/0xd70 [ 644.337156][ T30] ? kobject_put+0x443/0x480 [ 644.341758][ T30] ? __mutex_lock+0x527/0xd70 [ 644.346511][ T30] ? rfkill_unregister+0xd0/0x230 [ 644.351540][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.356614][ T30] ? __pfx_device_del+0x10/0x10 [ 644.361481][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 644.367695][ T30] rfkill_unregister+0xd0/0x230 [ 644.372560][ T30] nfc_unregister_device+0x96/0x2a0 [ 644.377831][ T30] virtual_ncidev_close+0x59/0x90 [ 644.382871][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 644.388646][ T30] __fput+0x406/0x8b0 [ 644.392691][ T30] task_work_run+0x24f/0x310 [ 644.397359][ T30] ? __pfx_task_work_run+0x10/0x10 [ 644.402502][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 644.408298][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 644.414012][ T30] do_syscall_64+0x100/0x230 [ 644.418622][ T30] ? clear_bhb_loop+0x35/0x90 [ 644.423315][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.429292][ T30] RIP: 0033:0x7fad63f75b99 [ 644.433765][ T30] RSP: 002b:00007fad6422fb48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 644.442196][ T30] RAX: 0000000000000000 RBX: 00007fad64105aa0 RCX: 00007fad63f75b99 [ 644.450707][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 644.458933][ T30] RBP: 00007fad64105aa0 R08: 0000000000000008 R09: 000000166422fe5f [ 644.466981][ T30] R10: 00000000005e691c R11: 0000000000000246 R12: 000000000007a1c0 [ 644.475022][ T30] R13: 0000000000000032 R14: 00007fad64105aa0 R15: 00007fad6422fc30 [ 644.483003][ T30] [ 644.486094][ T30] [ 644.486094][ T30] Showing all locks held in the system: [ 644.493884][ T30] 1 lock held by khungtaskd/30: [ 644.498735][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 644.508706][ T30] 2 locks held by getty/4844: [ 644.513385][ T30] #0: ffff88802ac030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 644.523219][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 644.533386][ T30] 3 locks held by kworker/1:8/7204: [ 644.538748][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 644.549952][ T30] #1: ffffc90003657d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 644.563545][ T30] #2: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 644.574985][ T30] 2 locks held by syz.1.1937/13752: [ 644.580185][ T30] #0: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 644.590359][ T30] #1: ffff88807ba4b100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 644.600215][ T30] 2 locks held by syz.0.1939/13730: [ 644.606899][ T30] #0: ffff88807ba4b100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 644.620267][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 644.630683][ T30] 2 locks held by syz.2.1940/13734: [ 644.636021][ T30] #0: ffff88807ca5c100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 644.645857][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 644.656071][ T30] 3 locks held by syz.4.1946/13780: [ 644.661276][ T30] #0: ffffffff8f64d530 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 644.669965][ T30] #1: ffffffff8f64d3e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 644.679000][ T30] #2: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 644.689239][ T30] 2 locks held by syz.4.1946/13781: [ 644.694530][ T30] #0: ffffffff8f64d530 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 644.702758][ T30] #1: ffffffff8f64d3e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 644.711793][ T30] 2 locks held by syz-executor/13802: [ 644.717226][ T30] #0: ffff88807ce11118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 644.727334][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 644.737389][ T30] 2 locks held by syz-executor/13803: [ 644.742762][ T30] #0: ffff88807ce10918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 644.752814][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 644.762825][ T30] 2 locks held by syz-executor/13804: [ 644.768478][ T30] #0: ffff88807ce12118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 644.778708][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 644.788865][ T30] 2 locks held by syz.3.1956/13806: [ 644.794127][ T30] #0: ffffffff8f64d530 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 644.802340][ T30] #1: ffffffff8f64d3e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 644.811342][ T30] 2 locks held by syz.3.1956/13807: [ 644.816582][ T30] #0: ffffffff8f64d530 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 644.824825][ T30] #1: ffffffff8f64d3e8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 644.833897][ T30] 2 locks held by syz-executor/13809: [ 644.839284][ T30] #0: ffff888041537918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 644.849494][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 644.859536][ T30] 2 locks held by syz-executor/13810: [ 644.864976][ T30] #0: ffff88802eda7918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 644.875056][ T30] #1: ffffffff8f8bbba8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 644.885026][ T30] [ 644.887355][ T30] ============================================= [ 644.887355][ T30] [ 644.895831][ T30] NMI backtrace for cpu 0 [ 644.900160][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller #0 [ 644.908296][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 644.918359][ T30] Call Trace: [ 644.921624][ T30] [ 644.924557][ T30] dump_stack_lvl+0x241/0x360 [ 644.929224][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.934411][ T30] ? __pfx__printk+0x10/0x10 [ 644.938980][ T30] ? vprintk_emit+0x631/0x770 [ 644.943658][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 644.948671][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 644.953607][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 644.959072][ T30] ? _printk+0xd5/0x120 [ 644.963235][ T30] ? __pfx__printk+0x10/0x10 [ 644.967821][ T30] ? __wake_up_klogd+0xcc/0x110 [ 644.972661][ T30] ? __pfx__printk+0x10/0x10 [ 644.977237][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 644.982245][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 644.988205][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 644.994166][ T30] watchdog+0xfde/0x1020 [ 644.998390][ T30] ? watchdog+0x1ea/0x1020 [ 645.002786][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.007452][ T30] kthread+0x2f0/0x390 [ 645.011513][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.016178][ T30] ? __pfx_kthread+0x10/0x10 [ 645.020757][ T30] ret_from_fork+0x4b/0x80 [ 645.025166][ T30] ? __pfx_kthread+0x10/0x10 [ 645.029745][ T30] ret_from_fork_asm+0x1a/0x30 [ 645.034515][ T30] [ 645.037902][ T30] Sending NMI from CPU 0 to CPUs 1: [ 645.043131][ C1] NMI backtrace for cpu 1 [ 645.043144][ C1] CPU: 1 PID: 2806 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller #0 [ 645.043161][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 645.043171][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 645.043199][ C1] RIP: 0010:mark_lock+0xa2/0x350 [ 645.043218][ C1] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 85 fa 92 be 08 00 00 00 e8 16 05 89 00 48 0f a3 1d 6e ab 87 11 <73> 10 48 69 c3 c8 00 00 00 48 8d 98 80 e4 c8 92 eb 68 48 c7 c0 e0 [ 645.043233][ C1] RSP: 0018:ffffc90009bb78f8 EFLAGS: 00000057 [ 645.043246][ C1] RAX: 0000000000000001 RBX: 0000000000000706 RCX: ffffffff8172da0a [ 645.043258][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fa8660 [ 645.043269][ C1] RBP: 0000000000000002 R08: ffffffff92fa8667 R09: 1ffffffff25f50cc [ 645.043281][ C1] R10: dffffc0000000000 R11: fffffbfff25f50cd R12: ffff88802af5c728 [ 645.043294][ C1] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff88802af5c708 [ 645.043306][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 645.043320][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.043332][ C1] CR2: 000055647252d600 CR3: 000000000e132000 CR4: 00000000003526f0 [ 645.043346][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 645.043357][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 645.043367][ C1] Call Trace: [ 645.043374][ C1] [ 645.043380][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 645.043398][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 645.043415][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 645.043438][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 645.043458][ C1] ? nmi_handle+0x14f/0x5a0 [ 645.043478][ C1] ? nmi_handle+0x2a/0x5a0 [ 645.043498][ C1] ? mark_lock+0xa2/0x350 [ 645.043514][ C1] ? default_do_nmi+0x63/0x160 [ 645.043532][ C1] ? exc_nmi+0x123/0x1f0 [ 645.043548][ C1] ? end_repeat_nmi+0xf/0x53 [ 645.043566][ C1] ? mark_lock+0x9a/0x350 [ 645.043583][ C1] ? mark_lock+0xa2/0x350 [ 645.043599][ C1] ? mark_lock+0xa2/0x350 [ 645.043616][ C1] ? mark_lock+0xa2/0x350 [ 645.043632][ C1] [ 645.043639][ C1] [ 645.043647][ C1] lockdep_hardirqs_on_prepare+0x282/0x780 [ 645.043665][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 645.043683][ C1] ? rcu_is_watching+0x15/0xb0 [ 645.043701][ C1] trace_hardirqs_on+0x28/0x40 [ 645.043717][ C1] __local_bh_enable_ip+0x168/0x200 [ 645.043733][ C1] ? batadv_forw_packet_steal+0x149/0x160 [ 645.043756][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 645.043772][ C1] ? batadv_forw_packet_steal+0x2f/0x160 [ 645.043791][ C1] batadv_forw_packet_steal+0x149/0x160 [ 645.043810][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x710/0x810 [ 645.043838][ C1] ? process_scheduled_works+0x945/0x1830 [ 645.043854][ C1] process_scheduled_works+0xa2c/0x1830 [ 645.043882][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 645.043901][ C1] ? assign_work+0x364/0x3d0 [ 645.043918][ C1] worker_thread+0x86d/0xd50 [ 645.043941][ C1] ? __kthread_parkme+0x169/0x1d0 [ 645.043959][ C1] ? __pfx_worker_thread+0x10/0x10 [ 645.043975][ C1] kthread+0x2f0/0x390 [ 645.043992][ C1] ? __pfx_worker_thread+0x10/0x10 [ 645.044008][ C1] ? __pfx_kthread+0x10/0x10 [ 645.044025][ C1] ret_from_fork+0x4b/0x80 [ 645.044043][ C1] ? __pfx_kthread+0x10/0x10 [ 645.044059][ C1] ret_from_fork_asm+0x1a/0x30 [ 645.044085][ C1] [ 645.053617][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 645.053632][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller #0 [ 645.053650][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 645.053661][ T30] Call Trace: [ 645.053668][ T30] [ 645.053676][ T30] dump_stack_lvl+0x241/0x360 [ 645.053705][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.053727][ T30] ? __pfx__printk+0x10/0x10 [ 645.053747][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.053772][ T30] ? vscnprintf+0x5d/0x90 [ 645.053791][ T30] panic+0x349/0x860 [ 645.053814][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 645.053834][ T30] ? __pfx_panic+0x10/0x10 [ 645.053853][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 645.053876][ T30] ? __irq_work_queue_local+0x137/0x410 [ 645.053896][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 645.053914][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 645.053932][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 645.053953][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 645.053973][ T30] watchdog+0x101d/0x1020 [ 645.053994][ T30] ? watchdog+0x1ea/0x1020 [ 645.054017][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.054035][ T30] kthread+0x2f0/0x390 [ 645.054055][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.054072][ T30] ? __pfx_kthread+0x10/0x10 [ 645.054092][ T30] ret_from_fork+0x4b/0x80 [ 645.054112][ T30] ? __pfx_kthread+0x10/0x10 [ 645.054131][ T30] ret_from_fork_asm+0x1a/0x30 [ 645.054165][ T30] [ 645.057175][ T30] Kernel Offset: disabled [ 645.535827][ T30] Rebooting in 86400 seconds..