last executing test programs: 18m44.177716698s ago: executing program 0 (id=1084): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) io_cancel(0x0, 0x0, 0x0) 18m43.092451649s ago: executing program 0 (id=1090): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000240)={0x20, 0x16, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 18m38.027504649s ago: executing program 0 (id=1100): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000d80)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10}}], 0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) unshare(0x2c020600) r4 = shmget(0x0, 0x4000, 0x78001600, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000000c0)=""/89) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 18m37.307973886s ago: executing program 0 (id=1102): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18m36.004055825s ago: executing program 0 (id=1107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a0800064000000001080004400000000014"], 0x94}}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m35.456423045s ago: executing program 0 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x14e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149282, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) open(0x0, 0x60840, 0x1d2) truncate(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) 18m34.531565483s ago: executing program 32 (id=1108): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100, 0x0, 0x14e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149282, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) open(0x0, 0x60840, 0x1d2) truncate(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) 38.809287188s ago: executing program 3 (id=3639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) acct(&(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x10}}], 0x10}, 0x40080) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="860000202300"}) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="1909208750b401956bfe", 0xa}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000100), 0x400000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0x722, 0x1, 0x7, 0x9, 0x2b, 0x0, {0xffff945a, 0x1}, 0x9, 0xf1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 37.629819144s ago: executing program 2 (id=3643): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x40}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x400001, 0x0) eventfd2(0xff, 0x80001) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000740)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f0000000280)="85687c94e2a7bff944539a3c4d22f7", 0xf, 0x7, 0x0, 0x2, r3}, 0x0]) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002d000000000"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.224336924s ago: executing program 3 (id=3645): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x4, 0x136}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000800)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf}}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 33.144408294s ago: executing program 3 (id=3649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x55}) 33.037163918s ago: executing program 2 (id=3650): openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) pipe(&(0x7f0000000340)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\x06\x00\x00\x00\x7f\x8cZ7`_4t\xcd\x00\x00\x00\x00\xd2\x9e/\xe2\x8f@:w\x00\x0e\xd2$w\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16}\xd8\x14\xc8\x8d\xf4^\x81\xe7\x85\x1c\x86\xab\xf6,!\x9c\xf9^Ux\xf6\xdd\xc2\xeegCA\x04\x9f\x86\xed\xf0w\xebx\xb7[\xd9\x8bA\x15d\xaa&0\xd2\xf1\x01\x15jb=\x96\xfbr\xc6\xa2\x16\xc9\xf96C\x8c\xe0\x82\x11Z6\xb9\x90q\x8fc\\\xb1p\t\x13Q\x8fA\b@\xd8\x1co\x04\xe0\x14\xf87\xe7\x01\"\xbc\xdcaH&\xc6\xfd\aQ\xe5\xbe\xfba\a\x86$Q\x9e`S/\xbew\x03\xf8\n\xa1\x8c\x80\x9b8\xc9\x80DBEe\xba\x05\x8f\x94GQ\x93X\xbc\xb5\xb7\\\xa6A\xfe\xf0\x8f\x9f\x9chN0\xc5\xb3\xcf\xc8\xf1\x90\xeb\x8b\xce\xe6\x98s\xaa\xb7.\xda&K\x80\x0f\x11\xf0\xd1\xc8\xb5H6~\x87\xdb\xd9\x03R\xac\xd6#\xba\xfbi\xd5;t\xfd\x03\xfa', 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa0001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) syz_open_dev$video4linux(&(0x7f0000000180), 0x1ff, 0x80a03) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x60c002, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f00000000c0)={0x4102}, 0x18, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) r0 = syz_io_uring_setup(0x162d, &(0x7f0000000500)={0x0, 0x707b, 0x2, 0x3, 0x200288}, 0x0, 0x0) io_uring_setup(0x3ca6, &(0x7f00000000c0)={0x0, 0xc63b, 0x2, 0xfffffffc, 0x40003, 0x0, r0}) openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 31.094366372s ago: executing program 5 (id=3653): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {0x0}, {&(0x7f0000000b80)}], 0x3}}, {}], 0x2, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="e8", 0x2ee0}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 31.093675641s ago: executing program 3 (id=3654): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) 31.024498232s ago: executing program 2 (id=3655): socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = getpid() bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x100b, &(0x7f0000001e40)=""/4107, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) syz_pidfd_open(r0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) memfd_secret(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000100)={0x0, 0x4, [0x5d, 0x9f9, 0x64, 0xd80]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "094a106b"}]}}, 0x0}, 0x0) 30.808681493s ago: executing program 1 (id=3656): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 30.472351873s ago: executing program 4 (id=3657): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) 28.445440298s ago: executing program 3 (id=3658): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8c2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast1}]}, 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) io_setup(0x6, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x80) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x262) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$unix(0x1, 0x1, 0x0) 28.44476908s ago: executing program 5 (id=3668): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) 28.444289391s ago: executing program 2 (id=3659): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d00020809"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) pread64(r2, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getrusage(0xffffffffffffffff, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) creat(&(0x7f0000000180)='./file0\x00', 0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0xafc, 0x5, 0x4, 0x100000, 0x4, {}, {0x3, 0x2, 0x3, 0x1, 0xc, 0x8, "361ed7dc"}, 0x4, 0x3, {0x0}, 0x9}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) io_uring_setup(0x6523, &(0x7f00000007c0)={0x0, 0x9c55, 0x4000, 0x3, 0x304}) 27.995311931s ago: executing program 4 (id=3660): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000040)='./file0/file0/..\x00', 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x3, @loopback}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x48) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sync() r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) rt_sigsuspend(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) 27.582750299s ago: executing program 1 (id=3661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) syz_emit_vhci(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000001840), 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000001880)={{0x3, 0x3, 0x1, 0x0, 0x9}, 0x5, 0x9}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 25.224482506s ago: executing program 4 (id=3662): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) unshare(0x6a040000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$kvm(0xffffff9c, 0x0, 0x10141, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)="a5ce", 0x2) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x6) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072"], 0xd0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 25.099651635s ago: executing program 5 (id=3663): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x0, &(0x7f0000001200)=""/4110, &(0x7f00000000c0)=0x100e) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) 25.088389464s ago: executing program 3 (id=3664): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r4) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000180)={0x1, 0x0, 0x1}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20000253) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) unlink(&(0x7f0000000140)='./file0/../file0\x00') 24.244708337s ago: executing program 2 (id=3665): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x55}) 24.217857541s ago: executing program 1 (id=3666): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x6, 0x7, 0x9}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$isdn(0x22, 0x2, 0x25) socket$isdn(0x22, 0x2, 0x24) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) timer_create(0x3, 0x0, &(0x7f0000044000)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040040) dup(0xffffffffffffffff) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) 22.937239665s ago: executing program 1 (id=3667): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1, 0x4}]) 21.640351237s ago: executing program 4 (id=3669): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r4}, &(0x7f000001f600)=""/94, 0x5e, &(0x7f0000000240)={&(0x7f000001f680)={'sha512-generic\x00'}}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000002c0)={0x6e, 0x1, "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"}) 21.639564032s ago: executing program 1 (id=3679): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='7', 0x1, 0x4}]) 21.358799545s ago: executing program 1 (id=3670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) setrlimit(0x9, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) io_setup(0x202, &(0x7f0000000480)) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) memfd_secret(0x0) unshare(0x40000000) 20.60294176s ago: executing program 5 (id=3671): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) 20.302076682s ago: executing program 2 (id=3672): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.192078595s ago: executing program 4 (id=3673): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(r3, 0xa, 0x2f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) madvise(&(0x7f0000b76000/0x1000)=nil, 0x1000, 0x15) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002000000000008000300000000000400"], 0x7c}}, 0x0) r8 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, &(0x7f00000003c0), 0x40000000, &(0x7f0000000400)) 18.516856555s ago: executing program 5 (id=3674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb46, 0x8, 0x8, 0x0, 0x3}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) 17.052342628s ago: executing program 5 (id=3675): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000280)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x2e, 0x1, @thr={0x0, &(0x7f0000000140)="a3e50e778ede12f92a3622754a72ac4c1e6a1209095b88139e5f99b4c409df1956bcb1dd7684a9f85219de5e35553524cea85bff65c56eff223cd563c97b34"}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vimc0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000d507df08c410448200dc0102030a090212000100000000090400000003"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xf}, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3fffffd}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000021c0)=ANY=[@ANYBLOB="01805f475a5de9c2000400aaaaaaaaaa008100000086dd60f53a0400403a00fe8000000000000000000000000000bbff020000000000000000f13b020000000100907802000000670f0d2900073300fc00fffffffffffff7000000000000010000000000000000000000000001040002a30000000042a475f32cd1fdc8"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x80380) r7 = io_uring_setup(0x1519, &(0x7f00000002c0)={0x0, 0x58e4, 0x10, 0x104, 0x1ff7ffc}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 15.923329336s ago: executing program 4 (id=3676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x55}) 10.005274988s ago: executing program 33 (id=3664): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close(r4) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000180)={0x1, 0x0, 0x1}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x20000253) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x182) unlink(&(0x7f0000000140)='./file0/../file0\x00') 6.007378198s ago: executing program 34 (id=3670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) setrlimit(0x9, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) io_setup(0x202, &(0x7f0000000480)) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) memfd_secret(0x0) unshare(0x40000000) 5.003031124s ago: executing program 35 (id=3672): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.50321539s ago: executing program 36 (id=3675): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000280)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x2e, 0x1, @thr={0x0, &(0x7f0000000140)="a3e50e778ede12f92a3622754a72ac4c1e6a1209095b88139e5f99b4c409df1956bcb1dd7684a9f85219de5e35553524cea85bff65c56eff223cd563c97b34"}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vimc0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000d507df08c410448200dc0102030a090212000100000000090400000003"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xf}, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3fffffd}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000021c0)=ANY=[@ANYBLOB="01805f475a5de9c2000400aaaaaaaaaa008100000086dd60f53a0400403a00fe8000000000000000000000000000bbff020000000000000000f13b020000000100907802000000670f0d2900073300fc00fffffffffffff7000000000000010000000000000000000000000001040002a30000000042a475f32cd1fdc8"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x80380) r7 = io_uring_setup(0x1519, &(0x7f00000002c0)={0x0, 0x58e4, 0x10, 0x104, 0x1ff7ffc}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=3676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f00000005c0)={'bridge_slave_0\x00', 0x55}) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.4.3167'. [ 1261.037116][T18669] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1261.086348][T18669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1261.440872][T18681] veth1_macvtap: left promiscuous mode [ 1261.446697][T18681] macsec0: entered promiscuous mode [ 1261.459108][T18681] veth1_macvtap: entered promiscuous mode [ 1261.466473][T18681] macsec0: left promiscuous mode [ 1262.808834][T18693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.831506][T18693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.877722][T18693] QAT: Device 6 not found [ 1262.882474][T18693] netlink: 'syz.4.3169': attribute type 10 has an invalid length. [ 1263.066438][ T5885] usb 3-1: USB disconnect, device number 97 [ 1263.406405][T18699] netlink: 'syz.1.3171': attribute type 29 has an invalid length. [ 1264.250336][T18713] netlink: 'syz.3.3175': attribute type 10 has an invalid length. [ 1264.376188][T18713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1264.390485][T18716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1264.406920][T18713] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1266.313708][T18743] netlink: 'syz.1.3179': attribute type 10 has an invalid length. [ 1266.331801][T18743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1266.426286][T18743] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1266.578314][T18743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1266.786089][ T24] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1266.946340][ T5885] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1266.980450][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.991003][ T24] usb 6-1: config 0 has no interfaces? [ 1267.002605][ T24] usb 6-1: New USB device found, idVendor=5050, idProduct=0500, bcdDevice=33.00 [ 1267.012705][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.021272][ T24] usb 6-1: Product: syz [ 1267.035087][ T24] usb 6-1: Manufacturer: syz [ 1267.045582][ T24] usb 6-1: SerialNumber: syz [ 1267.068852][ T24] usb 6-1: config 0 descriptor?? [ 1267.126317][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 1267.150594][ T5885] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1267.159250][ T5885] usb 3-1: config 0 has no interface number 0 [ 1267.185204][ T5885] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1267.592231][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 1267.614864][ T5885] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1267.666372][ T5885] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1267.685169][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.723887][ T5885] usb 3-1: Product: syz [ 1267.732518][ T5885] usb 3-1: Manufacturer: syz [ 1268.230101][ T5885] usb 3-1: SerialNumber: syz [ 1268.587797][ T5885] usb 3-1: config 0 descriptor?? [ 1268.613569][T18751] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1268.626959][T18751] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1268.713097][T18760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1269.053301][T18775] macsec0: entered promiscuous mode [ 1269.066510][T18776] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1269.074589][T18776] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1269.101078][T18775] macsec0: left promiscuous mode [ 1269.669232][T18779] netlink: 'syz.3.3186': attribute type 10 has an invalid length. [ 1269.686089][T18779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3186'. [ 1269.707899][T18779] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1269.992734][T18779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3186'. [ 1270.755695][T18791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1270.779470][ T5944] usb 6-1: USB disconnect, device number 79 [ 1271.206366][T18794] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1271.847199][ T5885] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1271.858452][ T5885] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1271.875776][T12857] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1271.909383][ T5885] asix 3-1:0.251: probe with driver asix failed with error -5 [ 1271.959138][T18806] netlink: 'syz.2.3194': attribute type 10 has an invalid length. [ 1271.983644][ T5885] usb 3-1: USB disconnect, device number 98 [ 1272.022360][T18806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1272.042926][T12857] usb 6-1: Using ep0 maxpacket: 16 [ 1272.103877][T18807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1272.123918][T18806] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1273.497253][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3197'. [ 1274.422147][T18834] netlink: 'syz.1.3199': attribute type 10 has an invalid length. [ 1274.616093][T18834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1274.651212][T18834] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1274.736255][T18840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3199'. [ 1274.885917][T18843] macsec0: entered promiscuous mode [ 1274.904932][T18843] macsec0: left promiscuous mode [ 1275.748023][T12857] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.767393][T12857] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1275.896422][T12857] usb 6-1: can't read configurations, error -71 [ 1276.616107][T12857] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1276.810511][T12857] usb 6-1: Using ep0 maxpacket: 32 [ 1276.868002][T12857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1276.915915][T12857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1276.959432][T12857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1277.000810][T12857] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 1277.021550][T12857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.050295][T12857] usb 6-1: Product: syz [ 1277.141938][T12857] usb 6-1: Manufacturer: syz [ 1277.239474][T12857] usb 6-1: SerialNumber: syz [ 1277.313501][T12857] usb 6-1: config 0 descriptor?? [ 1277.340324][T12857] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 1277.424786][ T5885] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1277.444995][T18870] netlink: 'syz.4.3208': attribute type 10 has an invalid length. [ 1277.471446][T18870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1277.586419][T18870] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1277.645526][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 1277.668941][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1277.708679][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1277.760393][ T5885] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1277.774758][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.796970][ T5885] usb 4-1: Product: syz [ 1277.801221][ T5885] usb 4-1: Manufacturer: syz [ 1277.811578][ T5885] usb 4-1: SerialNumber: syz [ 1277.830626][ T5885] usb 4-1: config 0 descriptor?? [ 1278.118469][T18855] netlink: 'syz.5.3205': attribute type 6 has an invalid length. [ 1278.151094][T18855] netlink: 'syz.5.3205': attribute type 1 has an invalid length. [ 1278.221648][T18855] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1278.330385][T18867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1278.375117][ T24] usb 6-1: USB disconnect, device number 81 [ 1278.884170][T18860] block device autoloading is deprecated and will be removed. [ 1278.900757][T18860] syz.2.3204: attempt to access beyond end of device [ 1278.900757][T18860] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1278.908868][ T5885] ath6kl: Failed to submit usb control message: -110 [ 1278.958046][ T5885] ath6kl: unable to send the bmi data to the device: -110 [ 1278.965809][ T5885] ath6kl: Unable to send get target info: -110 [ 1278.974834][ T5885] ath6kl: Failed to init ath6kl core: -110 [ 1278.982766][ T5885] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1279.902969][T18891] QAT: Device 6 not found [ 1279.921624][T18891] netlink: 'syz.1.3212': attribute type 10 has an invalid length. [ 1280.543926][T18899] netlink: 'syz.1.3213': attribute type 10 has an invalid length. [ 1280.567005][T18899] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1280.593273][T18899] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1280.756622][T18899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1281.347357][ T5885] usb 4-1: USB disconnect, device number 99 [ 1281.864840][ T5885] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1282.209538][ T5885] usb 4-1: config 0 has no interfaces? [ 1282.381396][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1282.503849][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.551102][T18929] macsec0: entered promiscuous mode [ 1282.589351][T18929] macsec0: left promiscuous mode [ 1282.606078][ T5885] usb 4-1: Product: syz [ 1282.610346][ T5885] usb 4-1: Manufacturer: syz [ 1282.620594][ T5885] usb 4-1: SerialNumber: syz [ 1282.630728][ T5885] usb 4-1: config 0 descriptor?? [ 1284.402774][T18943] netlink: 'syz.5.3221': attribute type 23 has an invalid length. [ 1284.704809][ T5885] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1285.130097][ T5885] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1285.139727][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.153759][ T5885] usb 3-1: Product: syz [ 1285.185829][ T5885] usb 3-1: Manufacturer: syz [ 1285.227519][ T5885] usb 3-1: SerialNumber: syz [ 1285.275750][ T5944] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1285.305196][ T5885] usb 3-1: config 0 descriptor?? [ 1285.320346][ T5885] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1285.446098][T12857] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1285.457631][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 1285.475689][ T5944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1285.492492][ T5944] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1285.512962][ T5944] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1285.541813][ T5944] usb 2-1: string descriptor 0 read error: -22 [ 1285.556195][ T5944] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1285.570609][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.619914][T12857] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1285.633218][T18954] QAT: Device 6 not found [ 1285.635460][T12857] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.666148][T18954] netlink: 'syz.4.3223': attribute type 10 has an invalid length. [ 1285.717928][ T5885] gspca_sunplus: reg_r err -71 [ 1285.800591][ T5885] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1285.883185][T12857] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1285.887755][ T5885] usb 3-1: USB disconnect, device number 99 [ 1286.022279][T12857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.242957][T12857] usb 6-1: usb_control_msg returned -32 [ 1286.249445][T12857] usbtmc 6-1:16.0: can't read capabilities [ 1286.493571][T12857] usb 4-1: USB disconnect, device number 100 [ 1286.704470][T18963] netlink: 'syz.2.3226': attribute type 10 has an invalid length. [ 1286.765377][T18946] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32 [ 1286.773024][T18963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1286.877443][T18965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1286.903185][T18963] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1286.968201][T17688] usb 6-1: USB disconnect, device number 82 [ 1287.045736][T12857] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1287.245900][T12857] usb 4-1: Using ep0 maxpacket: 32 [ 1287.272221][T12857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1287.476067][T12857] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1287.487840][T12857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.677748][T12857] usb 4-1: Product: syz [ 1287.682082][T12857] usb 4-1: Manufacturer: syz [ 1287.869246][T12857] usb 4-1: SerialNumber: syz [ 1287.912164][T12857] usb 4-1: config 0 descriptor?? [ 1288.207321][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1288.238471][ T5944] usbhid 2-1:1.0: can't add hid device: -71 [ 1288.257633][ T5944] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1288.328371][ T5944] usb 2-1: USB disconnect, device number 110 [ 1288.776263][T17688] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1289.014499][T17688] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 1289.299905][T12857] ath6kl: Failed to submit usb control message: -110 [ 1289.312080][T17688] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 1289.325647][T12857] ath6kl: unable to send the bmi data to the device: -110 [ 1289.333170][T12857] ath6kl: Unable to send get target info: -110 [ 1289.343449][T12857] ath6kl: Failed to init ath6kl core: -110 [ 1289.350454][T17688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1289.372400][T17688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.387014][T12857] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1289.397124][T17688] usb 6-1: Product: syz [ 1289.431682][T17688] usb 6-1: Manufacturer: syz [ 1289.464649][T17688] usb 6-1: SerialNumber: syz [ 1290.140777][T18982] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3228'. [ 1290.257278][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1291.422476][T17688] cdc_ncm 6-1:1.0: bind() failure [ 1291.439688][T17688] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1291.466210][T17688] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1291.508026][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3235'. [ 1291.521063][T19008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3235'. [ 1291.530802][T17688] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1291.550200][T19008] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3235'. [ 1291.567327][T17688] usb 6-1: USB disconnect, device number 83 [ 1291.739738][ T24] usb 4-1: USB disconnect, device number 101 [ 1291.789007][T19012] tipc: Enabling of bearer rejected, failed to enable media [ 1292.032685][T19014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1292.505468][T19016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1292.596628][T19018] netlink: 'syz.3.3239': attribute type 10 has an invalid length. [ 1292.644030][T19018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1292.656958][T19018] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1292.691413][T19018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1294.077081][ T24] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1294.358948][T19041] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1294.379067][T19041] bridge0: entered promiscuous mode [ 1294.396887][T19041] bridge0: entered allmulticast mode [ 1294.635772][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1294.726589][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.747593][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1294.790587][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1294.848244][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1294.888437][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.941551][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1295.006671][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.055575][ T24] usb 6-1: config 0 descriptor?? [ 1295.225414][ T5885] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1295.495610][ T5885] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1295.522079][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.544816][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1296.053613][ T5885] usb 3-1: config 0 has no interface number 0 [ 1296.060009][ T5885] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1296.106303][ T5885] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1296.115721][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.134099][ T5885] usb 3-1: Product: syz [ 1296.138796][ T5885] usb 3-1: Manufacturer: syz [ 1296.143430][ T5885] usb 3-1: SerialNumber: syz [ 1296.270928][ T5885] usb 3-1: config 0 descriptor?? [ 1296.282174][T19044] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1296.326680][T19044] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1296.341172][ T5885] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1296.395016][ T24] usb 4-1: config 0 has no interfaces? [ 1296.418247][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1296.427755][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.467113][ T24] usb 4-1: Product: syz [ 1296.484811][ T24] usb 4-1: Manufacturer: syz [ 1296.499132][T19057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.516010][ T24] usb 4-1: SerialNumber: syz [ 1296.552340][ T24] usb 4-1: config 0 descriptor?? [ 1296.608519][T19058] QAT: Device 6 not found [ 1296.619497][T19058] netlink: 'syz.2.3244': attribute type 10 has an invalid length. [ 1296.627966][T19057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.644490][T19058] team0: Device veth1_vlan failed to register rx_handler [ 1296.749403][ T24] usb 3-1: USB disconnect, device number 100 [ 1296.799808][T19051] @: renamed from vlan0 (while UP) [ 1297.884810][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1298.033224][ T5885] usb 6-1: USB disconnect, device number 84 [ 1298.353946][T17688] usb 4-1: USB disconnect, device number 102 [ 1298.369236][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1298.421706][T19074] macsec0: entered promiscuous mode [ 1298.449217][T19074] macsec0: left promiscuous mode [ 1298.461256][T19078] openvswitch: netlink: IP tunnel dst address not specified [ 1298.752113][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1298.817382][T12857] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1298.937736][T19083] netlink: 'syz.2.3253': attribute type 10 has an invalid length. [ 1298.959406][T19083] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3253'. [ 1298.976110][T12857] usb 4-1: Using ep0 maxpacket: 8 [ 1298.986695][T12857] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1299.011377][T12857] usb 4-1: config 0 has no interface number 0 [ 1299.027821][ T24] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1299.040881][T19083] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1299.056850][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.079703][ T24] usb 2-1: Product: syz [ 1299.084089][ T24] usb 2-1: Manufacturer: syz [ 1299.120051][ T24] usb 2-1: SerialNumber: syz [ 1299.135388][T19084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'. [ 1299.150478][T12857] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1299.173947][ T24] usb 2-1: config 0 descriptor?? [ 1299.271889][T12857] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1299.636004][T12857] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1299.651919][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3248'. [ 1299.796522][T12857] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1299.896681][T12857] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1299.928023][T12857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.983621][T12857] usb 4-1: config 0 descriptor?? [ 1300.048889][T12857] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1300.190130][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.201054][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.255189][ T24] ath6kl: Failed to submit usb control message: -110 [ 1300.394233][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 1300.427912][ T24] ath6kl: Unable to send get target info: -110 [ 1300.460331][ T24] ath6kl: Failed to init ath6kl core: -110 [ 1300.484576][ T24] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1300.799631][ T24] usb 4-1: USB disconnect, device number 103 [ 1300.816275][T12857] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1300.862523][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1300.985653][T12857] usb 3-1: Using ep0 maxpacket: 32 [ 1301.010411][T12857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1301.067642][T12857] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1301.149154][T12857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.190613][T12857] usb 3-1: Product: syz [ 1301.199871][T12857] usb 3-1: Manufacturer: syz [ 1301.209305][T12857] usb 3-1: SerialNumber: syz [ 1301.253794][T12857] usb 3-1: config 0 descriptor?? [ 1301.397137][T17688] usb 2-1: USB disconnect, device number 111 [ 1302.500021][T12857] ath6kl: Failed to submit usb control message: -110 [ 1302.517836][T12857] ath6kl: unable to send the bmi data to the device: -110 [ 1302.526336][T12857] ath6kl: Unable to send get target info: -110 [ 1302.537064][T12857] ath6kl: Failed to init ath6kl core: -110 [ 1302.564458][T12857] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1303.559164][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3259'. [ 1304.089887][T19132] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1304.427752][ T24] usb 3-1: USB disconnect, device number 101 [ 1305.497527][T19143] pimreg3: entered allmulticast mode [ 1307.009527][ T5944] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1307.098608][T19154] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1307.200708][ T5944] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 1307.215388][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.268503][ T5944] usb 4-1: config 0 has no interface number 0 [ 1307.308046][ T5944] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1307.471557][ T5944] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1307.501500][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.545990][ T5944] usb 4-1: Product: syz [ 1307.550197][ T5944] usb 4-1: Manufacturer: syz [ 1307.595987][ T5944] usb 4-1: SerialNumber: syz [ 1307.652455][ T5944] usb 4-1: config 0 descriptor?? [ 1307.695089][T19150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1307.707638][T19150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1307.793890][ T5944] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1308.025587][T19150] QAT: Device 6 not found [ 1308.030420][T19150] netlink: 'syz.3.3267': attribute type 10 has an invalid length. [ 1308.038614][T19150] veth1_vlan: entered allmulticast mode [ 1308.054279][T19150] team0: Device veth1_vlan failed to register rx_handler [ 1308.289943][T19168] sctp: [Deprecated]: syz.1.3271 (pid 19168) Use of int in maxseg socket option. [ 1308.289943][T19168] Use struct sctp_assoc_value instead [ 1308.500431][ T24] usb 4-1: USB disconnect, device number 104 [ 1308.668817][T19171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.719498][T19171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.813335][T19173] QAT: Device 6 not found [ 1308.838152][T19173] netlink: 'syz.4.3272': attribute type 10 has an invalid length. [ 1309.065049][ T5885] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1309.229908][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 1309.247507][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.264982][ T5885] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1309.280019][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.308542][ T5885] usb 6-1: config 0 descriptor?? [ 1309.318917][ T5885] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1309.522294][ T5885] gspca_vc032x: reg_r err -32 [ 1309.527289][ T5885] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 1309.566015][ T5944] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1309.728785][T19193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.766906][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 1309.780672][ T5944] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1309.790207][ T5944] usb 4-1: config 0 has no interface number 0 [ 1309.801306][ T5944] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1309.814450][T19193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.001267][ T5944] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1310.021440][ T5944] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1310.031897][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.046835][ T5944] usb 4-1: Product: syz [ 1310.052859][ T5944] usb 4-1: Manufacturer: syz [ 1310.064498][ T5944] usb 4-1: SerialNumber: syz [ 1310.408201][ T5944] usb 4-1: config 0 descriptor?? [ 1310.426430][T19181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1310.433976][T19181] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1310.830229][T19199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1310.839366][T19199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1311.878040][ T5885] usb 6-1: USB disconnect, device number 85 [ 1312.543841][T19216] tipc: Started in network mode [ 1312.557138][T19216] tipc: Node identity 7f000001, cluster identity 4711 [ 1312.582804][T19216] tipc: Enabling of bearer rejected, failed to enable media [ 1313.444280][ T5944] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1313.456290][ T5944] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1313.494114][ T5944] asix 4-1:0.251: probe with driver asix failed with error -5 [ 1313.542314][ T5944] usb 4-1: USB disconnect, device number 105 [ 1315.806253][ T5944] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1315.987967][ T5944] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 1316.004604][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.021972][T19249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.031154][ T5944] usb 2-1: config 0 has no interface number 0 [ 1316.031210][ T5944] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1316.037646][ T5944] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1316.037678][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.037708][ T5944] usb 2-1: Product: syz [ 1316.037724][ T5944] usb 2-1: Manufacturer: syz [ 1316.037740][ T5944] usb 2-1: SerialNumber: syz [ 1316.057464][ T5944] usb 2-1: config 0 descriptor?? [ 1316.102457][T19245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.114595][T19245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.137003][T19249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.202975][ T5944] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1316.385008][ T5885] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1316.398751][T19245] QAT: Device 6 not found [ 1316.404544][T19245] netlink: 'syz.1.3287': attribute type 10 has an invalid length. [ 1316.628196][ T5885] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1316.750122][ T5885] usb 6-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1316.776418][ T24] usb 2-1: USB disconnect, device number 112 [ 1316.830053][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1316.839333][ T5885] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1316.858546][ T5885] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1316.868104][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1316.881608][ T5885] usb 6-1: Product: syz [ 1316.886147][ T5885] usb 6-1: Manufacturer: syz [ 1316.935012][ T5885] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1317.361557][ T5944] usb 6-1: USB disconnect, device number 86 [ 1317.378034][T19251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1318.186821][T19270] delete_channel: no stack [ 1319.326215][T19297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.362139][T19297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.546004][T17688] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1319.696290][T17688] usb 2-1: Using ep0 maxpacket: 8 [ 1319.703658][T17688] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.733784][T17688] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1319.803903][T17688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.873333][T17688] usb 2-1: config 0 descriptor?? [ 1319.904124][T17688] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1320.115694][T17688] gspca_vc032x: reg_r err -32 [ 1320.125629][T17688] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1322.402995][T17688] usb 2-1: USB disconnect, device number 113 [ 1322.682938][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1322.682956][ T30] audit: type=1326 audit(1745868382.636:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1322.717837][ T30] audit: type=1326 audit(1745868382.636:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1322.766845][T12857] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1322.807185][ T30] audit: type=1326 audit(1745868382.636:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1322.869198][ T30] audit: type=1326 audit(1745868382.636:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1322.908072][ T30] audit: type=1326 audit(1745868382.636:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1322.944036][ T30] audit: type=1326 audit(1745868382.636:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1323.038185][T12857] usb 4-1: Using ep0 maxpacket: 8 [ 1323.053804][T12857] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1323.077984][T12857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1323.111581][T12857] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1323.155546][ T30] audit: type=1326 audit(1745868382.636:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1323.177915][T12857] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.205566][T12857] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1323.241735][T12857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.256101][ T30] audit: type=1326 audit(1745868382.666:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1323.292144][ T30] audit: type=1326 audit(1745868382.676:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1323.348470][ T30] audit: type=1326 audit(1745868382.706:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19341 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 1323.650233][T19350] netlink: 'syz.1.3314': attribute type 33 has an invalid length. [ 1323.692841][T19350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3314'. [ 1323.788741][T12857] usb 4-1: GET_CAPABILITIES returned 0 [ 1323.794285][T12857] usbtmc 4-1:16.0: can't read capabilities [ 1324.232097][ T5885] usb 4-1: USB disconnect, device number 106 [ 1328.183922][T19396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.375639][T12857] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1328.489986][T19396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.605753][T12857] usb 3-1: Using ep0 maxpacket: 8 [ 1328.614412][T12857] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.633445][T12857] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1328.689274][T12857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.764450][T12857] usb 3-1: config 0 descriptor?? [ 1328.793858][T12857] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1328.990129][T12857] gspca_vc032x: reg_r err -32 [ 1328.996402][T12857] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1329.887883][T12857] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1330.045504][T12857] usb 6-1: Using ep0 maxpacket: 16 [ 1330.056825][T19408] snd_dummy snd_dummy.0: control 0:1:0:syz0:0 is already present [ 1330.415731][ T5944] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1330.601382][ T5944] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 1330.691331][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.703781][ T5944] usb 2-1: config 0 has no interface number 0 [ 1330.711923][ T5944] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1330.741748][ T5944] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1330.752029][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.761537][ T5944] usb 2-1: Product: syz [ 1330.767630][ T5944] usb 2-1: Manufacturer: syz [ 1330.772482][ T5944] usb 2-1: SerialNumber: syz [ 1330.787107][ T5944] usb 2-1: config 0 descriptor?? [ 1330.864267][T19417] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1330.873622][T19417] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1330.923932][ T5944] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1331.220833][ T5885] usb 3-1: USB disconnect, device number 102 [ 1331.295745][T19417] QAT: Device 6 not found [ 1331.301976][T19417] netlink: 'syz.1.3327': attribute type 10 has an invalid length. [ 1331.468590][ T5944] usb 2-1: USB disconnect, device number 114 [ 1332.079904][T19439] fuse: blksize only supported for fuseblk [ 1333.053364][T12857] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1333.098328][T12857] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1333.116011][T12857] usb 6-1: can't read configurations, error -71 [ 1336.071660][ T5885] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1336.245153][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 1336.252307][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.263339][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1336.296153][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.346598][ T5885] usb 3-1: config 0 descriptor?? [ 1336.402366][ T5885] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1336.602863][ T5885] gspca_vc032x: reg_r err -32 [ 1336.629775][ T5885] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1337.305890][T17688] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1337.475666][T17688] usb 2-1: Using ep0 maxpacket: 8 [ 1337.482650][T17688] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1337.499961][T17688] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1337.511468][T17688] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1337.524561][T17688] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.539075][T17688] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.550057][T17688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.829860][T17688] usb 2-1: GET_CAPABILITIES returned 0 [ 1337.840866][T17688] usbtmc 2-1:16.0: can't read capabilities [ 1338.058559][T17688] usb 2-1: USB disconnect, device number 115 [ 1338.762138][T17688] usb 3-1: USB disconnect, device number 103 [ 1339.354078][ T5885] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1339.665156][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 1339.679302][ T5885] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1339.758448][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.771641][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1339.805092][ T5885] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1339.814610][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.893876][ T5885] usb 2-1: config 0 descriptor?? [ 1339.951797][ T5885] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1340.156355][T19526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.171782][T19526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.279033][T17688] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1341.561239][T17688] usb 4-1: config 0 has no interfaces? [ 1341.620781][T17688] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1341.663966][T17688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.689428][T17688] usb 4-1: Product: syz [ 1341.693674][T17688] usb 4-1: Manufacturer: syz [ 1341.803026][T17688] usb 4-1: SerialNumber: syz [ 1341.843885][T17688] usb 4-1: config 0 descriptor?? [ 1342.367701][ T5885] usb 2-1: USB disconnect, device number 116 [ 1343.337374][T19563] netlink: 'syz.2.3353': attribute type 2 has an invalid length. [ 1343.696793][T17688] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1343.877122][T17688] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 1343.886828][T17688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.905872][T17688] usb 6-1: config 0 has no interface number 0 [ 1343.912175][T17688] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1343.983707][T17688] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1343.995724][T17688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.003814][T17688] usb 6-1: Product: syz [ 1344.009197][T17688] usb 6-1: Manufacturer: syz [ 1344.013969][T17688] usb 6-1: SerialNumber: syz [ 1344.502665][T17688] usb 6-1: config 0 descriptor?? [ 1344.549394][T19565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1344.606212][T19565] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1344.651624][T12857] usb 4-1: USB disconnect, device number 107 [ 1344.743444][T17688] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1345.061466][T19565] QAT: Device 6 not found [ 1345.087237][T19565] netlink: 'syz.5.3355': attribute type 10 has an invalid length. [ 1345.131915][T19565] team0: Device veth1_vlan failed to register rx_handler [ 1345.236112][T19573] veth1_macvtap: left promiscuous mode [ 1345.241673][T19573] macsec0: entered promiscuous mode [ 1345.269730][T17688] usb 6-1: USB disconnect, device number 89 [ 1345.360600][T19573] veth1_macvtap: entered promiscuous mode [ 1345.398837][T19573] macsec0: left promiscuous mode [ 1346.645875][T12857] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1347.036461][T12857] usb 6-1: Using ep0 maxpacket: 8 [ 1347.051073][T12857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.062518][T12857] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1347.119654][T12857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.499745][T12857] usb 6-1: config 0 descriptor?? [ 1347.522262][T12857] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1347.563858][T19609] netlink: 'syz.3.3365': attribute type 10 has an invalid length. [ 1347.572371][T19609] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1347.583161][T19609] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1347.596052][T19609] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1347.830107][T19599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.877698][T12857] gspca_vc032x: reg_r err -32 [ 1347.923255][T12857] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 1348.764075][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1348.881183][T19618] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1348.969158][T19620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3367'. [ 1348.994119][T19620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1349.416537][T12857] usb 6-1: USB disconnect, device number 90 [ 1349.474866][ T5885] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1349.626664][ T5885] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1349.663318][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.701142][ T5885] usb 3-1: config 0 has no interface number 0 [ 1349.745998][ T5885] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1349.799509][ T5885] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1349.858237][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.876626][ T5885] usb 3-1: Product: syz [ 1349.885250][ T5885] usb 3-1: Manufacturer: syz [ 1349.950320][ T5885] usb 3-1: SerialNumber: syz [ 1349.975440][ T5885] usb 3-1: config 0 descriptor?? [ 1349.996684][T19625] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1350.012147][T19625] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1350.196547][ T5885] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1350.457378][T19643] QAT: Device 6 not found [ 1350.581337][ T5885] usb 3-1: USB disconnect, device number 104 [ 1352.063079][T19662] veth1_macvtap: left promiscuous mode [ 1352.088298][T19662] macsec0: entered promiscuous mode [ 1352.207731][T19663] veth1_macvtap: entered promiscuous mode [ 1352.252420][T19663] macsec0: left promiscuous mode [ 1352.740899][T19788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.757782][T19788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.894317][T19650] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[19650] [ 1354.623083][ T5885] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1354.691955][T12857] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1354.815129][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 1354.849775][ T5885] usb 2-1: too many configurations: 16, using maximum allowed: 8 [ 1355.279744][T12857] usb 4-1: config 0 has no interfaces? [ 1355.289274][ T5885] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1355.357693][ T5885] usb 2-1: can't read configurations, error -61 [ 1355.670960][T12857] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1355.716219][T12857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.724273][T12857] usb 4-1: Product: syz [ 1355.770387][T12857] usb 4-1: Manufacturer: syz [ 1355.785526][T12857] usb 4-1: SerialNumber: syz [ 1355.811709][T12857] usb 4-1: config 0 descriptor?? [ 1356.512093][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 1356.512113][ T30] audit: type=1326 audit(1745868416.466:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.603433][ T30] audit: type=1326 audit(1745868416.466:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.627816][ T30] audit: type=1326 audit(1745868416.466:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.652688][ T30] audit: type=1326 audit(1745868416.466:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.679972][ T30] audit: type=1326 audit(1745868416.466:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.726011][ T30] audit: type=1326 audit(1745868416.466:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.788054][ T30] audit: type=1326 audit(1745868416.466:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.878030][ T30] audit: type=1326 audit(1745868416.466:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1356.922819][ T30] audit: type=1326 audit(1745868416.466:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1357.143903][ T30] audit: type=1326 audit(1745868416.496:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.1.3383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f98539 code=0x7ffc0000 [ 1357.331497][T19814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.366087][T19814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.480805][T19817] tipc: Trying to set illegal importance in message [ 1357.569064][T12857] usb 4-1: USB disconnect, device number 108 [ 1357.764787][ T5885] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1357.807505][T19818] QAT: Device 6 not found [ 1358.332894][ T5885] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1358.361613][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1358.370473][ T5885] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 1358.391334][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.644401][ T5885] usb 3-1: config 0 descriptor?? [ 1358.942952][T19817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.954444][T19817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.968855][T19817] capability: warning: `syz.2.3384' uses deprecated v2 capabilities in a way that may be insecure [ 1359.427509][T19836] macsec0: entered promiscuous mode [ 1359.442144][T19836] macsec0: left promiscuous mode [ 1359.691117][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 1359.722980][T19839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.744135][T19839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.468061][ T5885] usb 3-1: string descriptor 0 read error: -71 [ 1360.482122][ T5885] usb 3-1: ucan: probing device on interface #0 [ 1360.524572][ T5885] usb 3-1: ucan: invalid endpoint configuration [ 1360.554696][ T5885] usb 3-1: ucan: probe failed; try to update the device firmware [ 1360.707330][T19851] netlink: 'syz.1.3392': attribute type 6 has an invalid length. [ 1360.760820][ T5885] usb 3-1: USB disconnect, device number 105 [ 1361.630608][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.646178][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.816563][T19869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1362.848570][T19869] wg1: entered promiscuous mode [ 1362.858909][T19869] wg1: entered allmulticast mode [ 1363.145156][ T5885] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1363.462327][ T5885] usb 4-1: config 0 has no interfaces? [ 1363.486812][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1363.496593][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.514885][T17696] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1363.528702][ T5885] usb 4-1: Product: syz [ 1363.533110][ T5885] usb 4-1: Manufacturer: syz [ 1363.538726][ T5885] usb 4-1: SerialNumber: syz [ 1363.818148][T17696] usb 2-1: config index 0 descriptor too short (expected 65511, got 77) [ 1363.864805][T17696] usb 2-1: config 198 has too many interfaces: 127, using maximum allowed: 32 [ 1363.976429][T17696] usb 2-1: config 198 has an invalid descriptor of length 170, skipping remainder of the config [ 1364.041695][ T5885] usb 4-1: config 0 descriptor?? [ 1364.233715][T17696] usb 2-1: config 198 has 0 interfaces, different from the descriptor's value: 127 [ 1364.336454][T17696] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1364.346445][T17696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.354503][T17696] usb 2-1: Product: syz [ 1364.379147][T17696] usb 2-1: Manufacturer: syz [ 1364.395211][T17696] usb 2-1: SerialNumber: syz [ 1364.607811][T19897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.617889][T19897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.796347][T19878] @: renamed from vlan0 (while UP) [ 1366.527493][T17696] usb 2-1: USB disconnect, device number 119 [ 1367.306242][T17688] usb 4-1: USB disconnect, device number 109 [ 1367.925980][T17688] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1368.102688][T17688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.165869][T17688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.215552][T17688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1368.301718][T17688] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1368.365928][T17688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.428571][T17688] usb 4-1: config 0 descriptor?? [ 1368.487486][T19939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.583724][T19939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.599609][T19937] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1368.639261][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.639880][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.865210][T17696] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1368.878699][T17688] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 1368.963718][T19944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.973817][T19944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.993852][T19944] Cannot find add_set index 3 as target [ 1369.036902][T17688] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1369.137537][T17696] usb 6-1: Using ep0 maxpacket: 16 [ 1369.178794][T17696] usb 6-1: config index 0 descriptor too short (expected 1828, got 36) [ 1369.215730][T17696] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1369.292957][T19935] syz_tun: entered allmulticast mode [ 1369.324886][T17696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.336732][ T5885] usb 4-1: USB disconnect, device number 110 [ 1369.363672][T19934] syz_tun: left allmulticast mode [ 1369.482976][T17696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1369.596670][T17696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1369.621358][T17696] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1369.686890][T17696] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 1369.705788][T17696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.951787][T17696] usb 6-1: Product: syz [ 1369.969241][T17696] usb 6-1: Manufacturer: syz [ 1369.973942][T19954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3411'. [ 1369.986113][T17696] usb 6-1: SerialNumber: syz [ 1370.035500][T17696] usb 6-1: config 0 descriptor?? [ 1370.102924][T17696] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 1370.160217][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 1370.181403][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 1370.334614][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 1370.372102][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 1370.404613][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 1370.438996][T19937] tipc: Enabled bearer , priority 22 [ 1370.477208][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 1370.501339][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 1370.535505][T17696] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1370.577362][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 1370.601074][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 1370.622770][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 1370.632308][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 1370.641890][T17696] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 1370.663496][T17696] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1370.717813][T17696] usb 6-1: USB disconnect, device number 91 [ 1370.763959][T17696] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1370.820002][T17696] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1370.838690][T17696] keyspan 6-1:0.0: device disconnected [ 1370.839715][T19966] netlink: zone id is out of range [ 1370.882404][T19966] netlink: zone id is out of range [ 1370.923578][T19966] netlink: zone id is out of range [ 1370.935449][T19967] syz_tun: entered allmulticast mode [ 1370.941812][T19966] netlink: zone id is out of range [ 1370.956950][T19966] netlink: zone id is out of range [ 1370.970204][T19966] netlink: zone id is out of range [ 1371.026006][T17688] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1371.034104][T19966] netlink: zone id is out of range [ 1371.058171][T19966] netlink: zone id is out of range [ 1371.080717][T19966] netlink: zone id is out of range [ 1371.205698][T17688] usb 3-1: Using ep0 maxpacket: 16 [ 1371.218760][T17688] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1371.231017][T17688] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.252194][T17688] usb 3-1: config 0 has no interface number 0 [ 1371.301159][T17688] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1371.314057][T17688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.330845][T17688] usb 3-1: Product: syz [ 1371.337048][T17688] usb 3-1: Manufacturer: syz [ 1371.343794][T17688] usb 3-1: SerialNumber: syz [ 1371.356201][T19963] syz_tun: left allmulticast mode [ 1371.381234][T17688] usb 3-1: config 0 descriptor?? [ 1371.674800][T17696] tipc: Node number set to 2130706433 [ 1371.680739][T17688] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 1371.805937][T17688] usb 3-1: No valid video chain found. [ 1372.079269][T17688] usb 3-1: USB disconnect, device number 106 [ 1374.346610][T19994] netdevsim netdevsim2: Direct firmware load for . [ 1374.346610][T19994] failed with error -2 [ 1374.443763][T19994] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1374.443763][T19994] [ 1374.858342][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1374.871438][T20006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3423'. [ 1375.014203][T20015] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1375.052635][T20016] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1376.664968][T17696] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1376.817953][T20027] macsec0: entered promiscuous mode [ 1376.927384][T20028] macsec0: left promiscuous mode [ 1377.056241][T20036] fuse: blksize only supported for fuseblk [ 1377.383342][T17696] usb 2-1: config 0 has no interfaces? [ 1377.535487][T17696] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1377.547159][T17696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.594773][T17696] usb 2-1: Product: syz [ 1377.609480][T17696] usb 2-1: Manufacturer: syz [ 1377.615107][T17696] usb 2-1: SerialNumber: syz [ 1377.891973][T17696] usb 2-1: config 0 descriptor?? [ 1377.959533][T20043] macsec0: entered promiscuous mode [ 1377.971323][T20043] macsec0: left promiscuous mode [ 1380.088583][T17696] usb 2-1: USB disconnect, device number 120 [ 1380.613714][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 1381.275048][T17696] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1381.451844][T17696] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 1381.475388][T17696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.512126][T17696] usb 2-1: config 0 has no interface number 0 [ 1381.545451][T17696] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1381.565313][T17696] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1381.574559][T17696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.590110][T17696] usb 2-1: Product: syz [ 1381.594338][T17696] usb 2-1: Manufacturer: syz [ 1381.633754][T17696] usb 2-1: SerialNumber: syz [ 1381.676805][T17696] usb 2-1: config 0 descriptor?? [ 1381.727211][T20077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1381.736664][T20077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1381.759552][T17696] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1381.919101][T17482] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1381.937060][T20089] macsec0: entered promiscuous mode [ 1381.943979][T20093] macsec0: left promiscuous mode [ 1381.974196][T20077] QAT: Device 6 not found [ 1381.985269][T20077] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 1382.066916][T17696] usb 2-1: USB disconnect, device number 121 [ 1382.151710][T17482] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1382.161051][T17688] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1382.173108][T17482] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.228183][T17482] usb 3-1: config 0 has no interface number 0 [ 1382.235458][T17482] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1382.249052][T17482] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1382.272535][T17482] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1382.282875][T17482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.298015][T17482] usb 3-1: Product: syz [ 1382.302376][T17482] usb 3-1: Manufacturer: syz [ 1382.308411][T17482] usb 3-1: SerialNumber: syz [ 1382.325727][T17688] usb 4-1: Using ep0 maxpacket: 16 [ 1382.354612][T17482] usb 3-1: config 0 descriptor?? [ 1382.806890][T17482] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1382.821042][T17482] usb 3-1: USB disconnect, device number 107 [ 1382.959678][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.026665][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.201210][T20103] macsec0: entered promiscuous mode [ 1383.238395][T20103] macsec0: left promiscuous mode [ 1383.899330][T20111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1383.918359][T20111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.942538][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1383.952620][T20111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1384.065261][T17696] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1384.305997][T17696] usb 3-1: Using ep0 maxpacket: 16 [ 1384.327211][T17696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1384.386311][T17696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1384.469994][T17696] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1384.768041][T17696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.946085][T17696] usb 3-1: Product: syz [ 1384.952791][T17696] usb 3-1: Manufacturer: syz [ 1384.967282][T17696] usb 3-1: SerialNumber: syz [ 1384.989859][T17696] usb 3-1: config 0 descriptor?? [ 1385.004122][T17696] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 1385.024429][T17696] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1385.245856][T17688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1385.254376][T17688] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1385.306738][T17688] usb 4-1: can't read configurations, error -71 [ 1385.540729][T17482] usb 3-1: USB disconnect, device number 108 [ 1385.661237][T17482] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1385.711799][T17482] kobil_sct 3-1:0.0: device disconnected [ 1385.901009][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1387.935165][T20150] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1388.575613][T17482] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1389.000362][T17482] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.086033][T17482] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1389.316583][T17482] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.365368][T17482] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1389.382052][T17482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.690402][T17482] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1389.871600][T20162] macsec0: entered promiscuous mode [ 1389.878830][T20164] macsec0: left promiscuous mode [ 1389.948988][T17482] usb 2-1: invalid MIDI out EP 0 [ 1390.774816][T17696] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1390.890930][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.900203][T17482] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1391.004839][T17696] usb 6-1: Using ep0 maxpacket: 8 [ 1391.051342][T20171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.092944][T17696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.093316][T20171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.114468][T17696] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1391.143922][T17696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.181852][T17696] usb 6-1: config 0 descriptor?? [ 1391.197774][T17696] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1391.275710][T20171] loop2: detected capacity change from 0 to 7 [ 1391.406821][T20171] Dev loop2: unable to read RDB block 7 [ 1391.432168][T20171] loop2: unable to read partition table [ 1391.447449][T20171] loop2: partition table beyond EOD, truncated [ 1391.483399][T20171] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1391.555793][ T5885] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1391.584163][ T5201] Dev loop2: unable to read RDB block 7 [ 1391.592389][ T5201] loop2: unable to read partition table [ 1391.605558][ T5201] loop2: partition table beyond EOD, truncated [ 1391.729816][ T5885] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1391.741815][ T5885] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1391.752310][ T5885] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1391.776525][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.801887][T20175] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1391.818377][ T5885] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1391.832652][T17696] gspca_vc032x: reg_r err -32 [ 1391.837551][T17696] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 1391.933123][T17482] usb 2-1: USB disconnect, device number 122 [ 1391.968956][T20153] delete_channel: no stack [ 1392.264738][T17696] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1392.567878][T17696] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.593245][T17696] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1392.616214][T17696] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1392.693456][T17696] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1392.719458][T17696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.748651][T17696] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1392.761415][T17696] usb 3-1: invalid MIDI out EP 0 [ 1393.125635][T17696] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1393.162774][T17696] usb 3-1: USB disconnect, device number 109 [ 1393.271258][T20190] delete_channel: no stack [ 1393.885143][ T5201] Dev loop2: unable to read RDB block 7 [ 1393.947646][ T5201] loop2: unable to read partition table [ 1393.961175][ T5201] loop2: partition table beyond EOD, truncated [ 1394.239739][T17482] usb 4-1: USB disconnect, device number 113 [ 1394.338799][T20198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.348307][T20198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.453262][T17688] usb 6-1: USB disconnect, device number 92 [ 1394.525110][T20198] tty tty28: ldisc open failed (-12), clearing slot 27 [ 1394.698130][T20209] netlink: 'syz.1.3465': attribute type 10 has an invalid length. [ 1394.709356][T20209] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1394.722238][T20209] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1394.736033][T20209] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1394.971441][T20215] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1395.071719][T20212] veth1_macvtap: left promiscuous mode [ 1395.079871][T20212] macsec0: entered promiscuous mode [ 1395.104079][T20212] veth1_macvtap: entered promiscuous mode [ 1395.177168][T17696] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1395.199681][T20212] macsec0: left promiscuous mode [ 1395.384827][T17696] usb 3-1: Using ep0 maxpacket: 32 [ 1395.443938][T20197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.532830][T17696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.587428][T17696] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1395.609859][T17696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.654598][T17696] usb 3-1: Product: syz [ 1395.674204][T17696] usb 3-1: Manufacturer: syz [ 1395.722403][T17696] usb 3-1: SerialNumber: syz [ 1395.786689][T17696] usb 3-1: config 0 descriptor?? [ 1395.837277][T17696] usb 3-1: no audio or video endpoints found [ 1396.040941][T17696] usb 3-1: USB disconnect, device number 110 [ 1396.144252][T20221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.245316][T20221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.411444][T20221] QAT: Device 6 not found [ 1396.431774][T20221] netlink: 'syz.4.3469': attribute type 10 has an invalid length. [ 1396.790975][T20228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1397.107752][T20233] sctp: [Deprecated]: syz.2.3470 (pid 20233) Use of int in maxseg socket option. [ 1397.107752][T20233] Use struct sctp_assoc_value instead [ 1397.468876][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3471'. [ 1398.057436][T17688] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1398.226016][T17688] usb 2-1: device descriptor read/64, error -71 [ 1398.695729][T17688] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1398.768541][T20253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.802735][T20253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.836198][T17688] usb 2-1: device descriptor read/64, error -71 [ 1398.947539][T17688] usb usb2-port1: attempt power cycle [ 1399.031729][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 1399.031751][ T30] audit: type=1326 audit(1745868458.976:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20255 comm="syz.3.3476" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3539 code=0x0 [ 1399.455995][T17688] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1399.509725][T17688] usb 2-1: device descriptor read/8, error -71 [ 1399.754441][T20268] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1399.764381][T20268] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1399.865721][T20268] batadv0: left promiscuous mode [ 1399.870763][T20268] batadv0: left allmulticast mode [ 1399.876398][T20268] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1399.888519][T20268] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1400.873251][T20275] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1400.886779][T20275] bridge0: port 1(bond3) entered blocking state [ 1400.895082][T20275] bridge0: port 1(bond3) entered disabled state [ 1400.903931][T20275] bond3: entered allmulticast mode [ 1400.925183][T20275] bond3: entered promiscuous mode [ 1402.142481][T20287] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1402.684764][T17696] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1403.218326][T17696] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1403.259783][T17696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.300378][T17696] usb 3-1: config 0 has no interface number 0 [ 1403.332616][T17696] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1403.417881][T17696] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1403.433646][T17696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.447442][T17696] usb 3-1: Product: syz [ 1403.456059][T17696] usb 3-1: Manufacturer: syz [ 1403.684876][T17696] usb 3-1: SerialNumber: syz [ 1403.745470][T17696] usb 3-1: config 0 descriptor?? [ 1403.895240][T20291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1403.903341][T20291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1403.925992][T17696] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1404.232273][T20291] QAT: Device 6 not found [ 1404.238309][T20291] netlink: 'syz.2.3484': attribute type 10 has an invalid length. [ 1404.256229][T20291] team0: Device veth1_vlan failed to register rx_handler [ 1404.601858][T17688] usb 3-1: USB disconnect, device number 111 [ 1405.316132][T17482] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1405.347917][T20322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3491'. [ 1405.455789][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3491'. [ 1405.476448][T17482] usb 2-1: Using ep0 maxpacket: 8 [ 1405.770533][T17482] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.825291][T20322] bridge0: port 1(syz_tun) entered blocking state [ 1405.835745][T20322] bridge0: port 1(syz_tun) entered disabled state [ 1405.851133][T17482] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1405.876102][T17482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.915024][T20322] syz_tun: entered allmulticast mode [ 1405.940967][T17482] usb 2-1: config 0 descriptor?? [ 1405.958843][T20322] syz_tun: entered promiscuous mode [ 1405.964129][T17482] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1406.606761][T20328] macsec0: entered promiscuous mode [ 1406.614539][T20328] macsec0: left promiscuous mode [ 1406.621201][T20325] fuse: root generation should be zero [ 1406.735522][T20334] ptrace attach of "./syz-executor exec"[9706] was attempted by "./syz-executor exec"[20334] [ 1407.028630][T20340] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1407.060763][T17482] gspca_vc032x: reg_r err -32 [ 1407.066032][T17482] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1407.250650][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1407.262148][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.292695][T17696] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1407.757602][T17696] usb 6-1: device descriptor read/64, error -71 [ 1408.096098][T17696] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1408.264823][T17696] usb 6-1: device descriptor read/64, error -71 [ 1408.379937][T17696] usb usb6-port1: attempt power cycle [ 1408.843711][ T5944] usb 2-1: USB disconnect, device number 127 [ 1409.229987][ T5885] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1409.247314][T17696] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1409.310291][T20353] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1409.394367][T17696] usb 6-1: device descriptor read/8, error -71 [ 1409.676375][ T5885] usb 3-1: config 0 has no interfaces? [ 1409.714289][ T5885] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1409.726418][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.752178][ T5885] usb 3-1: Product: syz [ 1409.761710][ T5885] usb 3-1: Manufacturer: syz [ 1409.784146][ T5885] usb 3-1: SerialNumber: syz [ 1409.820785][ T5885] usb 3-1: config 0 descriptor?? [ 1410.569599][T20358] delete_channel: no stack [ 1410.574283][T20358] delete_channel: no stack [ 1410.689638][ T5885] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1410.718127][ T5885] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1410.912741][T20370] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1412.287428][T17696] usb 3-1: USB disconnect, device number 112 [ 1412.475648][T20379] netlink: 'syz.2.3504': attribute type 10 has an invalid length. [ 1412.504186][T20379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1412.547695][T20379] bridge2: port 1(batadv0) entered blocking state [ 1412.569948][T20380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1412.666048][T20379] bridge2: port 1(batadv0) entered disabled state [ 1412.701162][T20379] bridge2: port 1(batadv0) entered blocking state [ 1412.707746][T20379] bridge2: port 1(batadv0) entered forwarding state [ 1412.799812][T20382] netlink: 4900 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1412.864869][T20382] netlink: 4900 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1412.874037][T20382] netlink: 484 bytes leftover after parsing attributes in process `syz.3.3503'. [ 1413.101788][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1413.112028][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1413.164996][T17696] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1413.391666][T20393] veth1_macvtap: left promiscuous mode [ 1413.416142][ T5944] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1413.416745][T17696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.456713][T20393] macsec0: entered promiscuous mode [ 1413.479899][T20394] veth1_macvtap: entered promiscuous mode [ 1413.495304][T17696] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1413.507463][T20394] macsec0: left promiscuous mode [ 1413.532800][T17696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.567096][T17696] usb 6-1: config 0 descriptor?? [ 1413.588062][ T5944] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 1413.613227][ T5944] usb 2-1: config 0 has no interface number 0 [ 1413.631905][ T5944] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1413.658653][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.689028][ T5944] usb 2-1: Product: syz [ 1413.698993][ T5944] usb 2-1: Manufacturer: syz [ 1413.711028][ T5944] usb 2-1: SerialNumber: syz [ 1413.750447][ T5944] usb 2-1: config 0 descriptor?? [ 1413.776101][T17482] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1413.935924][T17482] usb 3-1: Using ep0 maxpacket: 32 [ 1413.948192][T17482] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1413.963148][T17482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.980290][ T5944] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1413.999382][T17696] lg-g15 0003:046D:C222.0033: unbalanced collection at end of report description [ 1414.010554][T17696] lg-g15 0003:046D:C222.0033: probe with driver lg-g15 failed with error -22 [ 1414.020208][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1414.030773][T17482] usb 3-1: config 0 descriptor?? [ 1414.041131][T20404] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1414.066854][ T5944] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1414.084592][ T5944] usb 2-1: media controller created [ 1414.102588][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1414.215613][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1414.224844][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1414.244952][T17696] usb 6-1: USB disconnect, device number 97 [ 1414.250340][ T5944] DVB: Unable to find symbol dib7000p_attach() [ 1414.277467][ T5944] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1414.307451][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1414.331666][T17482] usbhid 3-1:0.0: can't add hid device: -71 [ 1414.361165][T17482] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1414.374156][ T5944] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1414.400775][T17482] usb 3-1: USB disconnect, device number 113 [ 1414.408241][ T5944] usb 2-1: media controller created [ 1414.439898][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1414.518657][ T5944] dib0700: the master dib7090 has to be initialized first [ 1414.529487][ T5944] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1414.626074][ T5944] rc_core: IR keymap rc-dib0700-rc5 not found [ 1414.633370][ T5944] Registered IR keymap rc-empty [ 1414.639865][ T5944] dvb-usb: could not initialize remote control. [ 1414.773694][ T5944] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1414.905602][T17482] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1414.933242][ T5944] usb 2-1: USB disconnect, device number 2 [ 1415.250596][ T5944] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1415.269176][T17482] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.338147][T17482] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1415.435985][T17482] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1415.461713][T20419] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1415.730192][T17482] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1416.004554][T17482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.149337][T17482] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1416.157957][T17482] usb 4-1: invalid MIDI out EP 0 [ 1416.263578][T17482] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1416.300242][T20412] delete_channel: no stack [ 1416.400555][T17482] usb 4-1: USB disconnect, device number 114 [ 1416.490462][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1416.517131][T17696] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1416.734805][T17696] usb 6-1: Using ep0 maxpacket: 32 [ 1416.741843][T17696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1416.756642][T17696] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1416.770750][T17696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.778930][T17696] usb 6-1: Product: syz [ 1416.784795][T17696] usb 6-1: Manufacturer: syz [ 1416.793254][T17696] usb 6-1: SerialNumber: syz [ 1416.807799][T17696] usb 6-1: config 0 descriptor?? [ 1417.041825][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3513'. [ 1417.826963][T20438] netlink: 'syz.3.3517': attribute type 10 has an invalid length. [ 1417.850255][T20438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1418.388119][T20438] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1418.423451][T17696] ath6kl: Failed to submit usb control message: -110 [ 1418.487736][T20441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1418.526156][T17696] ath6kl: unable to send the bmi data to the device: -110 [ 1418.533485][T17696] ath6kl: Unable to send get target info: -110 [ 1418.551611][T17696] ath6kl: Failed to init ath6kl core: -110 [ 1418.572993][T17696] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1419.147541][T17688] usb 6-1: USB disconnect, device number 98 [ 1419.215098][T17696] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1419.331121][T20455] macsec0: entered promiscuous mode [ 1419.387805][T17696] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1419.396863][T20461] netlink: 'syz.5.3521': attribute type 1 has an invalid length. [ 1419.416285][T20458] macsec0: left promiscuous mode [ 1419.421509][T17696] usb 3-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1419.436897][T20461] netlink: 'syz.5.3521': attribute type 2 has an invalid length. [ 1419.472151][T17696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1419.506075][T17696] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1419.546032][T17696] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1419.571272][T17696] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1419.702851][ T5885] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1419.734570][T17696] usb 3-1: Product: syz [ 1419.836929][T17696] usb 3-1: Manufacturer: syz [ 1419.935652][T17696] cdc_wdm 3-1:1.0: skipping garbage [ 1419.935685][T17696] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1419.975978][ T5885] usb 4-1: config 0 has no interfaces? [ 1420.019971][ T5885] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1420.074331][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.253777][T17482] usb 3-1: USB disconnect, device number 114 [ 1420.344712][ T5885] usb 4-1: Product: syz [ 1420.348982][ T5885] usb 4-1: Manufacturer: syz [ 1420.454764][ T5885] usb 4-1: SerialNumber: syz [ 1420.575432][ T5885] usb 4-1: config 0 descriptor?? [ 1421.299750][T20473] input: syz1 as /devices/virtual/input/input69 [ 1421.656902][T20479] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1422.350215][T20484] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1422.437559][T17482] usb 4-1: USB disconnect, device number 115 [ 1422.696882][T20488] program syz.4.3526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1422.938869][T20492] netlink: 'syz.4.3530': attribute type 10 has an invalid length. [ 1422.947619][T20492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3530'. [ 1422.967185][T20492] batadv0: entered promiscuous mode [ 1422.998997][T20492] batadv0: entered allmulticast mode [ 1423.062705][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.069856][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.141818][T20492] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1424.362098][T20509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.381037][T20509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.457166][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1424.849636][T20512] macsec0: entered promiscuous mode [ 1424.879597][T20513] macsec0: left promiscuous mode [ 1425.075549][T20521] macsec0: entered promiscuous mode [ 1425.102222][T20521] macsec0: left promiscuous mode [ 1425.260031][ T5885] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1426.429820][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 1426.518573][ T5885] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1426.529295][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.565647][ T5885] usb 3-1: config 0 has no interface number 0 [ 1426.571980][ T5885] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1426.590658][ T5885] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1426.605513][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.614255][ T5885] usb 3-1: Product: syz [ 1426.622949][ T5885] usb 3-1: Manufacturer: syz [ 1426.631543][ T5885] usb 3-1: SerialNumber: syz [ 1426.647876][ T5885] usb 3-1: config 0 descriptor?? [ 1426.662665][T20520] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1426.675272][T20520] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1426.692750][ T5885] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1426.914318][T20520] QAT: Device 6 not found [ 1426.923668][T20520] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 1426.936608][T20520] team0: Device veth1_vlan failed to register rx_handler [ 1427.047793][T17482] usb 3-1: USB disconnect, device number 115 [ 1427.943696][T20548] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1427.979656][T20548] fuse: Unknown parameter 'dont_hash' [ 1428.588811][ T5885] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1428.950694][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1428.967377][ T5885] usb 4-1: not running at top speed; connect to a high speed hub [ 1428.984772][T17696] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1429.019823][ T5885] usb 4-1: config 17 has an invalid interface number: 8 but max is 1 [ 1429.036482][T20552] netlink: 'syz.1.3541': attribute type 10 has an invalid length. [ 1429.044588][T20552] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1429.060876][ T5885] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.117604][T20552] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1429.134814][T17696] usb 6-1: Using ep0 maxpacket: 16 [ 1429.183180][ T5885] usb 4-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1429.203222][T17696] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.301506][ T5885] usb 4-1: config 17 has no interface number 0 [ 1429.302761][T20552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1429.311613][T17696] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1429.339546][ T5885] usb 4-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1429.407461][T17696] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1429.422621][T17696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.440888][ T5885] usb 4-1: config 17 interface 8 has no altsetting 0 [ 1429.469335][T17696] usb 6-1: Product: syz [ 1429.503511][T17696] usb 6-1: Manufacturer: syz [ 1429.528341][T17696] usb 6-1: SerialNumber: syz [ 1429.624650][ T5885] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1429.665671][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.733165][ T5885] usb 4-1: Product: syz [ 1429.809667][ T5885] usb 4-1: Manufacturer: syz [ 1429.814369][ T5885] usb 4-1: SerialNumber: syz [ 1430.158107][T17696] usb 6-1: 0:2 : does not exist [ 1430.163065][T17696] usb 6-1: unit 9 not found! [ 1430.244842][T17696] usb 6-1: USB disconnect, device number 99 [ 1430.510487][T20570] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1430.802864][T20573] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1431.286776][T20576] veth1_macvtap: left promiscuous mode [ 1431.292276][T20576] macsec0: entered promiscuous mode [ 1431.477763][T20580] veth1_macvtap: entered promiscuous mode [ 1431.507415][T20580] macsec0: left promiscuous mode [ 1431.548193][T20581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1431.560187][ T5885] usb 4-1: selecting invalid altsetting 0 [ 1431.650706][ T5885] usb 4-1: USB disconnect, device number 116 [ 1431.719148][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1433.375017][T17696] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1433.648902][T17696] usb 2-1: Using ep0 maxpacket: 32 [ 1433.656747][T17696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1433.687728][T17696] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 1433.815958][T17696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.845275][T17696] usb 2-1: Product: syz [ 1433.853835][T17696] usb 2-1: Manufacturer: syz [ 1433.869213][T17696] usb 2-1: SerialNumber: syz [ 1433.958117][T17696] usb 2-1: config 0 descriptor?? [ 1434.167094][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1434.195096][T20604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.221379][T20604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.459682][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1434.515376][T20614] netlink: 'syz.2.3553': attribute type 10 has an invalid length. [ 1434.534322][T20614] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1434.582701][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1435.056518][T17696] ath6kl: Failed to submit usb control message: -110 [ 1435.154127][T17696] ath6kl: unable to send the bmi data to the device: -110 [ 1435.162220][T17696] ath6kl: Unable to send get target info: -110 [ 1435.182502][T17696] ath6kl: Failed to init ath6kl core: -110 [ 1435.201924][T17696] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1436.069518][T17688] usb 2-1: USB disconnect, device number 3 [ 1436.625301][T17696] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1437.261225][T17696] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.271664][T17696] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1437.381009][T17696] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1437.507006][T20646] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1437.634029][T17696] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1437.668971][T17696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.699220][T17696] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1437.712284][T17696] usb 2-1: invalid MIDI out EP 0 [ 1437.947262][T20636] delete_channel: no stack [ 1438.140220][T17696] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1438.197061][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1438.198962][T17696] usb 2-1: USB disconnect, device number 4 [ 1439.686164][T20658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3562'. [ 1440.003329][T20662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1440.026139][T20657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1440.899721][T20670] netlink: 'syz.1.3564': attribute type 10 has an invalid length. [ 1440.961427][T20670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1441.096586][T20675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1441.101328][T20677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.126440][T20670] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1441.151821][T20677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.179369][T20677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.188638][T20677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.768897][T20687] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1442.358828][T20700] input input70: cannot allocate more than FF_MAX_EFFECTS effects [ 1442.481134][T20700] lo: entered allmulticast mode [ 1442.486686][T20700] tunl0: entered allmulticast mode [ 1442.492066][T20700] gre0: entered allmulticast mode [ 1442.498320][T20700] gretap0: entered allmulticast mode [ 1442.508365][T20700] erspan0: entered allmulticast mode [ 1442.513961][T20700] ip_vti0: entered allmulticast mode [ 1442.521121][T20700] ip6_vti0: entered allmulticast mode [ 1442.532000][T20700] sit0: entered allmulticast mode [ 1442.539034][T20700] ip6tnl0: entered allmulticast mode [ 1442.550288][T20700] ip6gre0: entered allmulticast mode [ 1442.706075][T20700] ip6gretap0: entered allmulticast mode [ 1442.711953][T20700] bond0: entered allmulticast mode [ 1442.731760][T20700] team0: entered allmulticast mode [ 1442.751713][T20700] nlmon0: entered allmulticast mode [ 1442.837067][T20705] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1442.883136][T20700] caif0: entered allmulticast mode [ 1443.006296][T20700] vxcan0: entered allmulticast mode [ 1443.093010][T20700] vxcan1: entered allmulticast mode [ 1443.336457][T20700] veth0: entered allmulticast mode [ 1443.369377][T20700] veth1: entered allmulticast mode [ 1443.377335][T20700] wg0: entered allmulticast mode [ 1443.382421][T20700] wg1: entered allmulticast mode [ 1443.392268][T20700] wg2: entered allmulticast mode [ 1443.400144][T20700] veth0_to_bridge: entered allmulticast mode [ 1443.413872][T20700] bridge_slave_0: entered allmulticast mode [ 1443.446953][T20700] veth1_to_bridge: entered allmulticast mode [ 1443.464412][T20700] bridge_slave_1: entered allmulticast mode [ 1443.491777][T20700] veth0_to_bond: entered allmulticast mode [ 1443.521106][T20700] bond_slave_0: entered allmulticast mode [ 1443.534550][T20700] bond_slave_1: entered allmulticast mode [ 1443.554447][T20700] veth0_to_team: entered allmulticast mode [ 1443.562425][T20700] team_slave_0: entered allmulticast mode [ 1443.574533][T20700] veth1_to_team: entered allmulticast mode [ 1443.584032][T20700] team_slave_1: entered allmulticast mode [ 1443.613998][T20700] veth0_to_batadv: entered allmulticast mode [ 1443.687000][T20700] batadv_slave_0: entered allmulticast mode [ 1443.701049][T20700] veth1_to_batadv: entered allmulticast mode [ 1443.716166][T20700] batadv_slave_1: entered allmulticast mode [ 1443.729083][T20700] xfrm0: entered allmulticast mode [ 1443.803560][T20700] veth0_to_hsr: entered allmulticast mode [ 1443.830623][T20700] hsr_slave_0: entered allmulticast mode [ 1443.847864][T20700] veth1_to_hsr: entered allmulticast mode [ 1443.886091][T20700] hsr_slave_1: entered allmulticast mode [ 1443.942994][T20700] hsr0: entered allmulticast mode [ 1443.950904][T20700] veth1_virt_wifi: entered allmulticast mode [ 1444.018845][T20700] veth0_virt_wifi: entered allmulticast mode [ 1444.046147][T20700] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1444.068608][T20709] netlink: 4900 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1444.078892][T20700] veth1_macvtap: entered allmulticast mode [ 1444.105793][T20700] veth0_macvtap: entered allmulticast mode [ 1444.137301][T20700] macvtap0: entered allmulticast mode [ 1444.175658][T20700] macsec0: entered allmulticast mode [ 1444.186988][T20700] geneve0: entered allmulticast mode [ 1444.212118][T20700] geneve1: entered allmulticast mode [ 1444.232489][T20700] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1444.258734][T20700] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1444.318564][T20700] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1444.385323][T20700] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1444.403178][T20700] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1444.432390][T20700] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1444.463231][T20700] bond1: entered allmulticast mode [ 1444.481294][T20700] veth2: entered allmulticast mode [ 1444.503488][T20700] veth3: entered allmulticast mode [ 1444.512487][T20700] ip6erspan0: entered allmulticast mode [ 1444.536937][T20700] veth4: entered allmulticast mode [ 1444.542442][T20700] veth5: entered allmulticast mode [ 1444.554568][T20700] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1444.563177][T20700] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 1444.571096][T20700] veth6: entered allmulticast mode [ 1444.586397][T20700] veth7: entered allmulticast mode [ 1444.596440][T20700] veth8: entered allmulticast mode [ 1444.632710][T20700] veth9: entered allmulticast mode [ 1445.258585][T20700] bridge1: entered allmulticast mode [ 1445.272007][T20700] batadv1: entered allmulticast mode [ 1445.286501][T20700] sit1: entered allmulticast mode [ 1445.298776][T20700] macvtap2: left promiscuous mode [ 1445.304542][T20700] syztnl2: entered allmulticast mode [ 1445.312318][T20700] macvtap3: left promiscuous mode [ 1446.069310][T20700] bridge2: entered allmulticast mode [ 1446.086520][T20700] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 1446.115169][T20700] mac80211_hwsim hwsim24 wlan3: entered allmulticast mode [ 1446.124573][T20700] : entered allmulticast mode [ 1446.148771][T20700] @: left promiscuous mode [ 1446.162573][T20700] batadv0: left promiscuous mode [ 1446.174895][T20700] @: entered allmulticast mode [ 1446.190015][T20700] bridge0: entered allmulticast mode [ 1446.203011][T20700] ip6gre1: entered allmulticast mode [ 1446.239784][T20700] team0.0: entered allmulticast mode [ 1446.253410][T20700] bond2: entered allmulticast mode [ 1446.830550][T20736] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1447.247171][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3578'. [ 1447.300581][T20739] macsec0: entered promiscuous mode [ 1447.350612][T20739] macsec0: left allmulticast mode [ 1447.478390][T20741] macsec0: left promiscuous mode [ 1447.906677][T20747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1447.932539][T20747] bridge0: port 1(bond1) entered blocking state [ 1447.942235][T20747] bridge0: port 1(bond1) entered disabled state [ 1447.951725][T20747] bond1: entered allmulticast mode [ 1447.964036][T20747] bond1: entered promiscuous mode [ 1448.777857][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3581'. [ 1449.318589][T20764] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1450.916645][T17696] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1451.109462][T17696] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1451.142436][T17696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1451.192596][T17696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1451.212919][T17696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1451.350088][T17696] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1451.359787][T17696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.384948][T17696] usb 3-1: Product: syz [ 1451.386148][T17482] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1451.400623][T17696] usb 3-1: Manufacturer: syz [ 1451.424744][T17696] usb 3-1: SerialNumber: syz [ 1451.590993][T17482] usb 2-1: config 0 has no interfaces? [ 1451.611663][T17482] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1451.624009][T20790] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1451.679440][T17482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.712853][T17482] usb 2-1: Product: syz [ 1452.006711][T17696] usb 3-1: config 0 descriptor?? [ 1452.060108][T17482] usb 2-1: Manufacturer: syz [ 1452.080415][T17482] usb 2-1: SerialNumber: syz [ 1452.126368][T17482] usb 2-1: config 0 descriptor?? [ 1453.671274][T17696] usb 3-1: can't set config #0, error -71 [ 1453.681439][T17696] usb 3-1: USB disconnect, device number 116 [ 1454.283989][T20807] program syz.4.3588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1454.538160][T20811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1455.533700][T17696] usb 2-1: USB disconnect, device number 5 [ 1455.737747][T20819] macsec0: entered promiscuous mode [ 1455.744523][T20822] macsec0: left promiscuous mode [ 1456.284886][T20833] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1456.613334][T20837] input: syz1 as /devices/virtual/input/input71 [ 1456.770747][T20842] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1457.255740][T17482] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1457.530682][T17482] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.550802][T17482] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.618326][T17482] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1457.790998][T17482] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1457.882083][T17482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.974982][T17696] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1457.975985][T17482] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.051792][T17482] usb 2-1: invalid MIDI out EP 0 [ 1458.131388][T17696] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 1458.144421][T17696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.171995][T17696] usb 6-1: config 0 has no interface number 0 [ 1458.238861][T17696] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1458.251353][T20845] delete_channel: no stack [ 1458.312757][T17696] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1458.325349][T17696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.333451][T17696] usb 6-1: Product: syz [ 1458.343285][T17696] usb 6-1: Manufacturer: syz [ 1458.349012][T17696] usb 6-1: SerialNumber: syz [ 1458.363557][T17696] usb 6-1: config 0 descriptor?? [ 1458.375647][T20847] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1458.383223][T20847] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1458.431652][T17696] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1458.489710][T17482] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1458.587521][T17482] usb 2-1: USB disconnect, device number 6 [ 1458.644085][T20847] QAT: Device 6 not found [ 1458.668471][T20847] netlink: 'syz.5.3598': attribute type 10 has an invalid length. [ 1458.694256][T20847] team0: Device veth1_vlan failed to register rx_handler [ 1458.797036][T17688] usb 6-1: USB disconnect, device number 100 [ 1458.864424][T20859] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1459.043172][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1461.159702][T20871] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1461.196214][T20873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1461.215943][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1461.665255][T17688] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1461.876468][T17688] usb 4-1: Using ep0 maxpacket: 8 [ 1461.883897][T17688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.898174][T17688] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1461.998865][T17688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.093975][T17688] usb 4-1: config 0 descriptor?? [ 1462.104132][T17688] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1463.267711][T17688] gspca_vc032x: reg_r err -32 [ 1463.272564][T17688] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 1463.662313][T20907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.672390][T20907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.926325][T20900] macsec0: entered promiscuous mode [ 1463.959164][T20908] macsec0: left promiscuous mode [ 1464.140909][T20906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1464.157328][T20906] bridge0: port 2(bond6) entered blocking state [ 1464.167649][T20906] bridge0: port 2(bond6) entered disabled state [ 1464.178961][T20906] bond6: entered allmulticast mode [ 1464.218308][T20906] bond6: entered promiscuous mode [ 1465.133686][T17696] usb 4-1: USB disconnect, device number 117 [ 1465.235395][ T5885] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1465.410946][ T5885] usb 6-1: config 0 has no interfaces? [ 1465.424484][ T5885] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1466.055766][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.084817][ T5885] usb 6-1: Product: syz [ 1466.089048][ T5885] usb 6-1: Manufacturer: syz [ 1466.093769][ T5885] usb 6-1: SerialNumber: syz [ 1466.164067][ T5885] usb 6-1: config 0 descriptor?? [ 1466.890242][T20930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1466.901468][T20930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1467.282864][T20937] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1468.989953][T17696] usb 6-1: USB disconnect, device number 101 [ 1469.448073][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3620'. [ 1469.565569][T17482] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1469.737284][T20958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1469.763034][T17482] usb 3-1: config 0 has no interfaces? [ 1469.862438][T17482] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1469.894350][T17482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.023055][T17482] usb 3-1: Product: syz [ 1470.033163][T17482] usb 3-1: Manufacturer: syz [ 1470.082685][T17482] usb 3-1: SerialNumber: syz [ 1470.173366][T17482] usb 3-1: config 0 descriptor?? [ 1470.272407][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 1471.073898][T20969] macsec0: entered promiscuous mode [ 1471.130867][T20969] macsec0: left promiscuous mode [ 1473.144935][ T5885] usb 3-1: USB disconnect, device number 117 [ 1474.016174][T17482] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1474.278506][T17482] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1474.290714][T17482] usb 3-1: not running at top speed; connect to a high speed hub [ 1474.379346][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1474.392176][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1474.460944][T17482] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 1474.522249][T17482] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.739018][T17482] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1474.830983][T17482] usb 3-1: config 17 has no interface number 0 [ 1474.862653][T17482] usb 3-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1474.968248][T17482] usb 3-1: config 17 interface 8 has no altsetting 0 [ 1475.176726][T17482] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1475.190744][T17482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.259493][T17482] usb 3-1: Product: syz [ 1475.263688][T17482] usb 3-1: Manufacturer: syz [ 1475.288669][T21011] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1475.419285][T17482] usb 3-1: SerialNumber: syz [ 1477.821761][T17482] usb 3-1: selecting invalid altsetting 0 [ 1477.902027][T17482] usb 3-1: USB disconnect, device number 118 [ 1479.252216][T21048] veth1_macvtap: left promiscuous mode [ 1479.264517][T21048] macsec0: entered promiscuous mode [ 1479.283183][T21048] veth1_macvtap: entered promiscuous mode [ 1479.296057][T21048] macsec0: left promiscuous mode [ 1479.733325][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.808298][T21044] syz.5.3637 (21044): /proc/21036/oom_adj is deprecated, please use /proc/21036/oom_score_adj instead. [ 1479.900149][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.122076][T21047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.142257][T21047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.553174][T21057] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1481.668446][T17688] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1481.851142][T17688] usb 6-1: config 0 has no interfaces? [ 1481.862591][T17688] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1481.873524][T17688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.916021][T17688] usb 6-1: Product: syz [ 1481.946848][T17688] usb 6-1: Manufacturer: syz [ 1481.983096][T17688] usb 6-1: SerialNumber: syz [ 1482.013059][T17688] usb 6-1: config 0 descriptor?? [ 1482.400275][T21066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.413284][T17482] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1482.436586][T21066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.881332][T21078] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1483.060462][T17482] usb 3-1: config 0 has no interfaces? [ 1483.082983][T17482] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1483.095934][T17482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.114096][T17482] usb 3-1: Product: syz [ 1483.151681][T17482] usb 3-1: Manufacturer: syz [ 1483.178010][T17482] usb 3-1: SerialNumber: syz [ 1483.211685][T17482] usb 3-1: config 0 descriptor?? [ 1484.422205][T17696] usb 6-1: USB disconnect, device number 102 [ 1484.501878][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.510658][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.284732][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1485.304885][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1485.585707][T17482] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1485.801381][ T5885] usb 3-1: USB disconnect, device number 119 [ 1485.837258][T17482] usb 6-1: config 0 has no interfaces? [ 1485.848399][T17482] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1485.858247][T17482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.882917][T17482] usb 6-1: Product: syz [ 1485.899676][T17482] usb 6-1: Manufacturer: syz [ 1485.949734][T17482] usb 6-1: SerialNumber: syz [ 1485.979306][T17482] usb 6-1: config 0 descriptor?? [ 1486.076223][T21100] veth1_macvtap: left promiscuous mode [ 1486.081922][T21100] macsec0: entered promiscuous mode [ 1486.125778][T21100] veth1_macvtap: entered promiscuous mode [ 1486.132119][T21100] macsec0: left promiscuous mode [ 1486.357512][T21101] netlink: 'syz.4.3646': attribute type 2 has an invalid length. [ 1486.444791][ T5885] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1486.776709][ T5885] usb 3-1: config index 0 descriptor too short (expected 12129, got 59) [ 1486.829075][ T5885] usb 3-1: config 116 has too many interfaces: 112, using maximum allowed: 32 [ 1486.866135][ T5885] usb 3-1: config 116 has an invalid descriptor of length 101, skipping remainder of the config [ 1486.903468][ T5885] usb 3-1: config 116 has 0 interfaces, different from the descriptor's value: 112 [ 1486.942198][ T5885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1487.005362][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1487.046518][ T5885] usb 3-1: SerialNumber: syz [ 1487.349039][ T5885] usb 3-1: USB disconnect, device number 120 [ 1487.792577][T17688] usb 6-1: USB disconnect, device number 103 [ 1488.080479][T21102] delete_channel: no stack [ 1488.086214][T21102] delete_channel: no stack [ 1488.256228][T21127] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1488.487593][ T5885] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1488.651236][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 1488.661158][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.697414][ T5885] usb 3-1: config 0 descriptor?? [ 1488.942145][T21134] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1489.591043][ T5885] usb 3-1: USB disconnect, device number 121 [ 1490.878841][T21151] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1491.219077][T21152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1491.225980][T17688] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1491.352426][T21152] bridge0: port 1(bond4) entered blocking state [ 1491.360163][T21152] bridge0: port 1(bond4) entered disabled state [ 1491.446642][T21152] bond4: entered allmulticast mode [ 1491.481023][T21152] bond4: entered promiscuous mode [ 1491.517227][T17688] usb 3-1: Using ep0 maxpacket: 8 [ 1491.547416][T17688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1491.559151][T21152] bridge0: port 1(bond4) entered blocking state [ 1491.565568][T21152] bridge0: port 1(bond4) entered forwarding state [ 1491.580806][T17688] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.594392][T17688] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 2 [ 1491.842056][T17688] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1492.068353][ T36] bridge0: port 1(bond4) entered disabled state [ 1492.075809][T17688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.093884][T17688] usb 3-1: Product: syz [ 1492.102939][T17688] usb 3-1: Manufacturer: syz [ 1492.123568][T17688] usb 3-1: SerialNumber: syz [ 1492.294847][T21163] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3660'. [ 1492.465052][T21149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.490354][T21149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.285936][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1494.296626][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1494.475258][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1494.507580][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1494.680154][T17688] usb 3-1: USB disconnect, device number 122 [ 1494.744909][ T5885] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1494.914949][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 1495.070543][ T5885] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1495.162433][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1495.192440][T21173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1495.303589][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.322293][ T5885] usb 6-1: Product: syz [ 1495.338248][ T5885] usb 6-1: Manufacturer: syz [ 1495.350758][ T5885] usb 6-1: SerialNumber: syz [ 1495.606077][ T5885] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1495.634223][ T5885] r8152-cfgselector 6-1: config 0 descriptor?? [ 1495.681938][T21185] delete_channel: no stack [ 1495.698407][T21185] delete_channel: no stack [ 1498.322844][ T5885] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1498.335839][ T5885] r8152-cfgselector 6-1: bad CDC descriptors [ 1498.368091][ T5885] r8152-cfgselector 6-1: USB disconnect, device number 104 [ 1498.955510][T21228] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1500.045553][T21235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1500.706549][T21242] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1503.160215][T21250] macsec0: entered promiscuous mode [ 1503.170851][T21250] macsec0: left promiscuous mode [ 1519.032257][T16009] raw-gadget.1 gadget.4: failed to queue disconnect event [ 1545.940330][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.947670][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.380768][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.387470][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1656.014792][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 1656.022410][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1656.030546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1656.039389][ T31] task:kworker/1:0 state:D stack:19720 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1656.052211][ T31] Workqueue: events rfkill_sync_work [ 1656.058874][ T31] Call Trace: [ 1656.062191][ T31] [ 1656.066158][ T31] __schedule+0x16e2/0x4cd0 [ 1656.070892][ T31] ? schedule+0x165/0x360 [ 1656.077632][ T31] ? __pfx___schedule+0x10/0x10 [ 1656.082547][ T31] ? schedule+0x91/0x360 [ 1656.087091][ T31] schedule+0x165/0x360 [ 1656.091321][ T31] schedule_preempt_disabled+0x13/0x30 [ 1656.097188][ T31] __mutex_lock+0x724/0xe80 [ 1656.101725][ T31] ? __mutex_lock+0x51b/0xe80 [ 1656.106550][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1656.111870][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1656.117762][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.122994][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1656.128986][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1656.135402][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1656.141166][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1656.146450][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1656.152204][ T31] rfkill_set_block+0x1cf/0x440 [ 1656.157227][ T31] rfkill_sync_work+0x114/0x200 [ 1656.162105][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1656.167983][ T31] process_scheduled_works+0xadb/0x17a0 [ 1656.173617][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1656.179779][ T31] worker_thread+0x8a0/0xda0 [ 1656.184418][ T31] kthread+0x70e/0x8a0 [ 1656.188648][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1656.193792][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.198624][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.203250][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1656.208573][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.213793][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.218754][ T31] ret_from_fork+0x4b/0x80 [ 1656.223203][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.227981][ T31] ret_from_fork_asm+0x1a/0x30 [ 1656.232802][ T31] [ 1656.236131][ T31] INFO: task kworker/1:6:17696 blocked for more than 143 seconds. [ 1656.243965][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1656.251690][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1656.260433][ T31] task:kworker/1:6 state:D stack:21048 pid:17696 tgid:17696 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1656.272555][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1656.279394][ T31] Call Trace: [ 1656.282697][ T31] [ 1656.285715][ T31] __schedule+0x16e2/0x4cd0 [ 1656.290270][ T31] ? schedule+0x165/0x360 [ 1656.294693][ T31] ? __pfx___schedule+0x10/0x10 [ 1656.299606][ T31] ? schedule+0x91/0x360 [ 1656.303884][ T31] schedule+0x165/0x360 [ 1656.308161][ T31] schedule_preempt_disabled+0x13/0x30 [ 1656.313658][ T31] __mutex_lock+0x724/0xe80 [ 1656.318280][ T31] ? __mutex_lock+0x51b/0xe80 [ 1656.323001][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1656.329397][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1656.334463][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1656.340417][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1656.346259][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1656.352354][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1656.358202][ T31] process_scheduled_works+0xadb/0x17a0 [ 1656.363811][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1656.369912][ T31] worker_thread+0x8a0/0xda0 [ 1656.374593][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1656.380963][ T31] ? __kthread_parkme+0x7b/0x200 [ 1656.386009][ T31] kthread+0x70e/0x8a0 [ 1656.390113][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1656.395352][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.399994][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.404716][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1656.409950][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.415371][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.420264][ T31] ret_from_fork+0x4b/0x80 [ 1656.424831][ T31] ? __pfx_kthread+0x10/0x10 [ 1656.429448][ T31] ret_from_fork_asm+0x1a/0x30 [ 1656.434222][ T31] [ 1656.437564][ T31] INFO: task syz.3.3664:21177 blocked for more than 143 seconds. [ 1656.445380][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1656.453038][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1656.461817][ T31] task:syz.3.3664 state:D stack:24248 pid:21177 tgid:21177 ppid:5839 task_flags:0x400040 flags:0x20004004 [ 1656.473868][ T31] Call Trace: [ 1656.477285][ T31] [ 1656.480255][ T31] __schedule+0x16e2/0x4cd0 [ 1656.484903][ T31] ? schedule+0x165/0x360 [ 1656.489273][ T31] ? __pfx___schedule+0x10/0x10 [ 1656.494153][ T31] ? schedule+0x91/0x360 [ 1656.498497][ T31] schedule+0x165/0x360 [ 1656.502781][ T31] schedule_timeout+0x9a/0x270 [ 1656.507624][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1656.513014][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1656.518350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.523581][ T31] ? wait_for_completion+0x267/0x5d0 [ 1656.528993][ T31] wait_for_completion+0x2bf/0x5d0 [ 1656.534164][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1656.539932][ T31] ? __flush_work+0xd2/0xbc0 [ 1656.544650][ T31] ? __flush_work+0xd2/0xbc0 [ 1656.549275][ T31] __flush_work+0x9b9/0xbc0 [ 1656.553790][ T31] ? __flush_work+0xd2/0xbc0 [ 1656.558545][ T31] ? __pfx___flush_work+0x10/0x10 [ 1656.563612][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1656.569003][ T31] ? __pfx___cancel_work+0x10/0x10 [ 1656.574207][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 1656.580323][ T31] __cancel_work_sync+0xbe/0x110 [ 1656.585392][ T31] rfkill_unregister+0x92/0x220 [ 1656.590322][ T31] nfc_unregister_device+0x96/0x2a0 [ 1656.595685][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1656.601529][ T31] virtual_ncidev_close+0x56/0x90 [ 1656.606795][ T31] __fput+0x449/0xa70 [ 1656.610945][ T31] task_work_run+0x1d1/0x260 [ 1656.615670][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1656.620857][ T31] resume_user_mode_work+0x5e/0x80 [ 1656.626076][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 1656.631656][ T31] __do_fast_syscall_32+0xc1/0x110 [ 1656.636920][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1656.642160][ T31] do_fast_syscall_32+0x34/0x80 [ 1656.647124][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1656.653478][ T31] RIP: 0023:0xf7fc3539 [ 1656.657744][ T31] RSP: 002b:00000000f75afadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1656.666419][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1656.674418][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1656.682527][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1656.690640][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1656.698714][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1656.706793][ T31] [ 1656.709876][ T31] INFO: task syz.3.3664:21195 blocked for more than 144 seconds. [ 1656.717803][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1656.725654][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1656.734353][ T31] task:syz.3.3664 state:D stack:25976 pid:21195 tgid:21177 ppid:5839 task_flags:0x400040 flags:0x20004004 [ 1656.746451][ T31] Call Trace: [ 1656.749763][ T31] [ 1656.752719][ T31] __schedule+0x16e2/0x4cd0 [ 1656.757403][ T31] ? schedule+0x165/0x360 [ 1656.762497][ T31] ? __pfx___schedule+0x10/0x10 [ 1656.767565][ T31] ? schedule+0x91/0x360 [ 1656.771869][ T31] schedule+0x165/0x360 [ 1656.776205][ T31] schedule_preempt_disabled+0x13/0x30 [ 1656.781699][ T31] __mutex_lock+0x724/0xe80 [ 1656.786298][ T31] ? __mutex_lock+0x51b/0xe80 [ 1656.791025][ T31] ? rfkill_register+0x37/0x8e0 [ 1656.796028][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1656.801087][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1656.806557][ T31] ? device_initialize+0x24b/0x440 [ 1656.811791][ T31] rfkill_register+0x37/0x8e0 [ 1656.816578][ T31] nfc_register_device+0x14a/0x320 [ 1656.821721][ T31] nci_register_device+0x87f/0x9d0 [ 1656.826955][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 1656.832622][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1656.838048][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1656.843475][ T31] virtual_ncidev_open+0x129/0x1a0 [ 1656.848716][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1656.854468][ T31] misc_open+0x2b9/0x330 [ 1656.858871][ T31] chrdev_open+0x4c9/0x5e0 [ 1656.863364][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1656.868410][ T31] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 1656.873992][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1656.879075][ T31] do_dentry_open+0xdf0/0x1970 [ 1656.883942][ T31] vfs_open+0x3b/0x340 [ 1656.888111][ T31] ? path_openat+0x2ecd/0x3830 [ 1656.892955][ T31] path_openat+0x2ee5/0x3830 [ 1656.897691][ T31] ? arch_stack_walk+0xfc/0x150 [ 1656.902630][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1656.908448][ T31] ? __pfx_path_openat+0x10/0x10 [ 1656.913410][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1656.918558][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1656.925218][ T31] do_filp_open+0x1fa/0x410 [ 1656.929760][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1656.934918][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1656.939806][ T31] ? alloc_fd+0x64c/0x6c0 [ 1656.944198][ T31] do_sys_openat2+0x121/0x1c0 [ 1656.949004][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1656.954238][ T31] ? rcu_is_watching+0x15/0xb0 [ 1656.959138][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1656.964812][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1656.969977][ T31] do_fast_syscall_32+0x34/0x80 [ 1656.974928][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1656.981291][ T31] RIP: 0023:0xf7fc3539 [ 1656.985470][ T31] RSP: 002b:00000000f485e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1656.993922][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 1657.002053][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1657.010117][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1657.018175][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1657.026263][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1657.034267][ T31] [ 1657.037460][ T31] INFO: task syz.1.3670:21217 blocked for more than 144 seconds. [ 1657.045277][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1657.052923][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1657.061745][ T31] task:syz.1.3670 state:D stack:28312 pid:21217 tgid:21212 ppid:5845 task_flags:0x400040 flags:0x20000004 [ 1657.073874][ T31] Call Trace: [ 1657.077279][ T31] [ 1657.080258][ T31] __schedule+0x16e2/0x4cd0 [ 1657.084915][ T31] ? schedule+0x165/0x360 [ 1657.089286][ T31] ? __pfx___schedule+0x10/0x10 [ 1657.094161][ T31] ? schedule+0x91/0x360 [ 1657.098552][ T31] schedule+0x165/0x360 [ 1657.102755][ T31] schedule_preempt_disabled+0x13/0x30 [ 1657.108327][ T31] __mutex_lock+0x724/0xe80 [ 1657.112868][ T31] ? __mutex_lock+0x51b/0xe80 [ 1657.117804][ T31] ? misc_open+0x51/0x330 [ 1657.122177][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1657.127333][ T31] misc_open+0x51/0x330 [ 1657.131524][ T31] chrdev_open+0x4c9/0x5e0 [ 1657.136247][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.141226][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.146259][ T31] do_dentry_open+0xdf0/0x1970 [ 1657.151069][ T31] vfs_open+0x3b/0x340 [ 1657.155281][ T31] ? path_openat+0x2ecd/0x3830 [ 1657.160072][ T31] path_openat+0x2ee5/0x3830 [ 1657.164768][ T31] ? arch_stack_walk+0xfc/0x150 [ 1657.169684][ T31] ? futex_wait_queue+0x31/0x200 [ 1657.174722][ T31] ? __pfx_path_openat+0x10/0x10 [ 1657.179684][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1657.184810][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.191363][ T31] do_filp_open+0x1fa/0x410 [ 1657.196006][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1657.201093][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1657.206062][ T31] ? alloc_fd+0x64c/0x6c0 [ 1657.210446][ T31] do_sys_openat2+0x121/0x1c0 [ 1657.215244][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1657.220495][ T31] ? rcu_is_watching+0x15/0xb0 [ 1657.225380][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1657.230983][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1657.236239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1657.241565][ T31] do_fast_syscall_32+0x34/0x80 [ 1657.246522][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.252883][ T31] RIP: 0023:0xf7f98539 [ 1657.257038][ T31] RSP: 002b:00000000f5072460 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1657.265562][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a6528 [ 1657.273567][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7422ff4 [ 1657.281667][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1657.289736][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1657.297897][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1657.305990][ T31] [ 1657.309061][ T31] INFO: task syz.2.3672:21227 blocked for more than 144 seconds. [ 1657.316928][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1657.324669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1657.333357][ T31] task:syz.2.3672 state:D stack:28312 pid:21227 tgid:21223 ppid:9719 task_flags:0x400040 flags:0x20000004 [ 1657.345415][ T31] Call Trace: [ 1657.348730][ T31] [ 1657.351734][ T31] __schedule+0x16e2/0x4cd0 [ 1657.356413][ T31] ? schedule+0x165/0x360 [ 1657.360791][ T31] ? __pfx___schedule+0x10/0x10 [ 1657.365782][ T31] ? schedule+0x91/0x360 [ 1657.370079][ T31] schedule+0x165/0x360 [ 1657.374260][ T31] schedule_preempt_disabled+0x13/0x30 [ 1657.379847][ T31] __mutex_lock+0x724/0xe80 [ 1657.384376][ T31] ? __mutex_lock+0x51b/0xe80 [ 1657.389142][ T31] ? misc_open+0x51/0x330 [ 1657.393502][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1657.398690][ T31] misc_open+0x51/0x330 [ 1657.402881][ T31] chrdev_open+0x4c9/0x5e0 [ 1657.407399][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.412372][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.417389][ T31] do_dentry_open+0xdf0/0x1970 [ 1657.422215][ T31] vfs_open+0x3b/0x340 [ 1657.426403][ T31] ? path_openat+0x2ecd/0x3830 [ 1657.431205][ T31] path_openat+0x2ee5/0x3830 [ 1657.435940][ T31] ? arch_stack_walk+0xfc/0x150 [ 1657.440860][ T31] ? futex_wait_queue+0x31/0x200 [ 1657.445933][ T31] ? __pfx_path_openat+0x10/0x10 [ 1657.450895][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1657.456176][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.462904][ T31] do_filp_open+0x1fa/0x410 [ 1657.467532][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1657.472602][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1657.477594][ T31] ? alloc_fd+0x64c/0x6c0 [ 1657.482008][ T31] do_sys_openat2+0x121/0x1c0 [ 1657.486824][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1657.492094][ T31] ? rcu_is_watching+0x15/0xb0 [ 1657.496994][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1657.502584][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1657.507798][ T31] do_fast_syscall_32+0x34/0x80 [ 1657.512676][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.519172][ T31] RIP: 0023:0xf7fb5539 [ 1657.523268][ T31] RSP: 002b:00000000f509455c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1657.531795][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 1657.539861][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1657.547980][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1657.556096][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1657.564106][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1657.572308][ T31] [ 1657.575443][ T31] INFO: task syz.5.3675:21244 blocked for more than 144 seconds. [ 1657.583219][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1657.590974][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1657.599801][ T31] task:syz.5.3675 state:D stack:27736 pid:21244 tgid:21243 ppid:9706 task_flags:0x400140 flags:0x20000004 [ 1657.611863][ T31] Call Trace: [ 1657.615218][ T31] [ 1657.618186][ T31] __schedule+0x16e2/0x4cd0 [ 1657.622741][ T31] ? __kasan_slab_free+0x62/0x70 [ 1657.627929][ T31] ? security_file_open+0xb1/0x270 [ 1657.633153][ T31] ? schedule+0x165/0x360 [ 1657.637621][ T31] ? __pfx___schedule+0x10/0x10 [ 1657.642534][ T31] ? schedule+0x91/0x360 [ 1657.646913][ T31] schedule+0x165/0x360 [ 1657.651112][ T31] schedule_preempt_disabled+0x13/0x30 [ 1657.656674][ T31] __mutex_lock+0x724/0xe80 [ 1657.661204][ T31] ? __mutex_lock+0x51b/0xe80 [ 1657.665981][ T31] ? misc_open+0x51/0x330 [ 1657.670344][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1657.675508][ T31] misc_open+0x51/0x330 [ 1657.679800][ T31] chrdev_open+0x4c9/0x5e0 [ 1657.684249][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.689295][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.694269][ T31] do_dentry_open+0xdf0/0x1970 [ 1657.699338][ T31] vfs_open+0x3b/0x340 [ 1657.703449][ T31] ? path_openat+0x2ecd/0x3830 [ 1657.708333][ T31] path_openat+0x2ee5/0x3830 [ 1657.712948][ T31] ? arch_stack_walk+0xfc/0x150 [ 1657.717964][ T31] ? futex_wait_queue+0x31/0x200 [ 1657.722942][ T31] ? __pfx_path_openat+0x10/0x10 [ 1657.728013][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1657.733071][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.739727][ T31] do_filp_open+0x1fa/0x410 [ 1657.744275][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1657.749428][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1657.754317][ T31] ? alloc_fd+0x64c/0x6c0 [ 1657.758806][ T31] do_sys_openat2+0x121/0x1c0 [ 1657.763526][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1657.768855][ T31] ? rcu_is_watching+0x15/0xb0 [ 1657.773670][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1657.779325][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1657.784476][ T31] do_fast_syscall_32+0x34/0x80 [ 1657.789439][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1657.795897][ T31] RIP: 0023:0xf705e539 [ 1657.799996][ T31] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1657.808534][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 1657.816621][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1657.824686][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1657.832705][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1657.840753][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1657.848872][ T31] [ 1657.851922][ T31] INFO: task syz.5.3675:21245 blocked for more than 145 seconds. [ 1657.859859][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1657.867609][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1657.876373][ T31] task:syz.5.3675 state:D stack:28072 pid:21245 tgid:21243 ppid:9706 task_flags:0x400040 flags:0x20000004 [ 1657.888443][ T31] Call Trace: [ 1657.891752][ T31] [ 1657.894794][ T31] __schedule+0x16e2/0x4cd0 [ 1657.899340][ T31] ? __kasan_slab_free+0x62/0x70 [ 1657.904317][ T31] ? security_file_open+0xb1/0x270 [ 1657.909541][ T31] ? schedule+0x165/0x360 [ 1657.913911][ T31] ? __pfx___schedule+0x10/0x10 [ 1657.918878][ T31] ? schedule+0x91/0x360 [ 1657.923165][ T31] schedule+0x165/0x360 [ 1657.927459][ T31] schedule_preempt_disabled+0x13/0x30 [ 1657.932969][ T31] __mutex_lock+0x724/0xe80 [ 1657.937724][ T31] ? __mutex_lock+0x51b/0xe80 [ 1657.942433][ T31] ? misc_open+0x51/0x330 [ 1657.946860][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1657.951926][ T31] misc_open+0x51/0x330 [ 1657.956213][ T31] chrdev_open+0x4c9/0x5e0 [ 1657.960715][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.965749][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1657.970726][ T31] do_dentry_open+0xdf0/0x1970 [ 1657.975618][ T31] vfs_open+0x3b/0x340 [ 1657.979719][ T31] ? path_openat+0x2ecd/0x3830 [ 1657.984489][ T31] path_openat+0x2ee5/0x3830 [ 1657.989248][ T31] ? arch_stack_walk+0xfc/0x150 [ 1657.994154][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1657.999943][ T31] ? __pfx_path_openat+0x10/0x10 [ 1658.004976][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1658.010034][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.016780][ T31] do_filp_open+0x1fa/0x410 [ 1658.021317][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1658.026507][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1658.031397][ T31] ? alloc_fd+0x64c/0x6c0 [ 1658.035897][ T31] do_sys_openat2+0x121/0x1c0 [ 1658.040622][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1658.045886][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1658.051101][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x2a7/0x310 [ 1658.057637][ T31] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 1658.064427][ T31] ? cgroup_freezing+0x20/0x360 [ 1658.069359][ T31] ? cgroup_freezing+0x20/0x360 [ 1658.074241][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1658.079956][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1658.085173][ T31] do_fast_syscall_32+0x34/0x80 [ 1658.090052][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.096538][ T31] RIP: 0023:0xf705e539 [ 1658.100632][ T31] RSP: 002b:00000000f502d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1658.109158][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 1658.117241][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1658.125306][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1658.133311][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1658.141449][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1658.149553][ T31] [ 1658.152636][ T31] INFO: task syz.5.3675:21246 blocked for more than 145 seconds. [ 1658.160482][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1658.168195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1658.179803][ T31] task:syz.5.3675 state:D stack:26392 pid:21246 tgid:21243 ppid:9706 task_flags:0x400140 flags:0x20000004 [ 1658.191860][ T31] Call Trace: [ 1658.195232][ T31] [ 1658.198197][ T31] __schedule+0x16e2/0x4cd0 [ 1658.202738][ T31] ? __kasan_slab_free+0x62/0x70 [ 1658.207769][ T31] ? security_file_open+0xb1/0x270 [ 1658.212935][ T31] ? schedule+0x165/0x360 [ 1658.217386][ T31] ? __pfx___schedule+0x10/0x10 [ 1658.222284][ T31] ? schedule+0x91/0x360 [ 1658.226620][ T31] schedule+0x165/0x360 [ 1658.230817][ T31] schedule_preempt_disabled+0x13/0x30 [ 1658.236384][ T31] __mutex_lock+0x724/0xe80 [ 1658.240922][ T31] ? __mutex_lock+0x51b/0xe80 [ 1658.245694][ T31] ? misc_open+0x51/0x330 [ 1658.250068][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1658.255227][ T31] misc_open+0x51/0x330 [ 1658.259433][ T31] chrdev_open+0x4c9/0x5e0 [ 1658.263888][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1658.268971][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1658.273952][ T31] do_dentry_open+0xdf0/0x1970 [ 1658.278886][ T31] vfs_open+0x3b/0x340 [ 1658.282992][ T31] ? path_openat+0x2ecd/0x3830 [ 1658.287862][ T31] path_openat+0x2ee5/0x3830 [ 1658.292489][ T31] ? arch_stack_walk+0xfc/0x150 [ 1658.297506][ T31] ? __pfx_path_openat+0x10/0x10 [ 1658.302470][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1658.307675][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.314229][ T31] do_filp_open+0x1fa/0x410 [ 1658.318834][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1658.323901][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1658.328862][ T31] ? alloc_fd+0x64c/0x6c0 [ 1658.333241][ T31] do_sys_openat2+0x121/0x1c0 [ 1658.338000][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1658.343213][ T31] ? exc_page_fault+0x68/0x110 [ 1658.348071][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1658.353661][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1658.358889][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1658.364126][ T31] do_fast_syscall_32+0x34/0x80 [ 1658.369102][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.375508][ T31] RIP: 0023:0xf705e539 [ 1658.379584][ T31] RSP: 002b:00000000f500a460 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1658.388130][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7246528 [ 1658.396221][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73c2ff4 [ 1658.404230][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1658.412309][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1658.420398][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1658.428495][ T31] [ 1658.431558][ T31] INFO: task syz.4.3676:21249 blocked for more than 145 seconds. [ 1658.439561][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1658.447265][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1658.456034][ T31] task:syz.4.3676 state:D stack:28072 pid:21249 tgid:21247 ppid:5847 task_flags:0x400040 flags:0x20000004 [ 1658.468040][ T31] Call Trace: [ 1658.471319][ T31] [ 1658.474251][ T31] __schedule+0x16e2/0x4cd0 [ 1658.478880][ T31] ? schedule+0x165/0x360 [ 1658.483276][ T31] ? __pfx___schedule+0x10/0x10 [ 1658.488266][ T31] ? schedule+0x91/0x360 [ 1658.492546][ T31] schedule+0x165/0x360 [ 1658.496949][ T31] schedule_preempt_disabled+0x13/0x30 [ 1658.502451][ T31] __mutex_lock+0x724/0xe80 [ 1658.507062][ T31] ? __mutex_lock+0x51b/0xe80 [ 1658.511800][ T31] ? misc_open+0x51/0x330 [ 1658.516257][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1658.521350][ T31] misc_open+0x51/0x330 [ 1658.525624][ T31] chrdev_open+0x4c9/0x5e0 [ 1658.530083][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1658.535155][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1658.540137][ T31] do_dentry_open+0xdf0/0x1970 [ 1658.545046][ T31] vfs_open+0x3b/0x340 [ 1658.549149][ T31] ? path_openat+0x2ecd/0x3830 [ 1658.553917][ T31] path_openat+0x2ee5/0x3830 [ 1658.558641][ T31] ? arch_stack_walk+0xfc/0x150 [ 1658.563559][ T31] ? __lock_acquire+0xaac/0xd20 [ 1658.568526][ T31] ? __pfx_path_openat+0x10/0x10 [ 1658.573484][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1658.579010][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.585623][ T31] do_filp_open+0x1fa/0x410 [ 1658.590160][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1658.595286][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1658.600176][ T31] ? alloc_fd+0x64c/0x6c0 [ 1658.604591][ T31] do_sys_openat2+0x121/0x1c0 [ 1658.609303][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1658.614626][ T31] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1658.620483][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1658.626149][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1658.631292][ T31] do_fast_syscall_32+0x34/0x80 [ 1658.636257][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.642629][ T31] RIP: 0023:0xf7f82539 [ 1658.646851][ T31] RSP: 002b:00000000f508555c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1658.655374][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 1658.663390][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1658.671464][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1658.679584][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1658.687709][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1658.695819][ T31] [ 1658.698865][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1658.709111][ T31] INFO: task syz-executor:21251 blocked for more than 146 seconds. [ 1658.721858][ T31] Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 [ 1658.730746][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1658.740129][ T31] task:syz-executor state:D stack:24248 pid:21251 tgid:21251 ppid:5824 task_flags:0x400000 flags:0x20000004 [ 1658.752325][ T31] Call Trace: [ 1658.755758][ T31] [ 1658.758716][ T31] __schedule+0x16e2/0x4cd0 [ 1658.763231][ T31] ? __kasan_slab_free+0x62/0x70 [ 1658.768254][ T31] ? security_file_open+0xb1/0x270 [ 1658.773419][ T31] ? schedule+0x165/0x360 [ 1658.777861][ T31] ? __pfx___schedule+0x10/0x10 [ 1658.782752][ T31] ? schedule+0x91/0x360 [ 1658.787078][ T31] schedule+0x165/0x360 [ 1658.791277][ T31] schedule_preempt_disabled+0x13/0x30 [ 1658.796883][ T31] __mutex_lock+0x724/0xe80 [ 1658.801423][ T31] ? __mutex_lock+0x51b/0xe80 [ 1658.806224][ T31] ? misc_open+0x51/0x330 [ 1658.810593][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1658.815748][ T31] misc_open+0x51/0x330 [ 1658.819939][ T31] chrdev_open+0x4c9/0x5e0 [ 1658.824369][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1658.829418][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1658.834387][ T31] do_dentry_open+0xdf0/0x1970 [ 1658.839269][ T31] vfs_open+0x3b/0x340 [ 1658.843368][ T31] ? path_openat+0x2ecd/0x3830 [ 1658.848227][ T31] path_openat+0x2ee5/0x3830 [ 1658.852847][ T31] ? arch_stack_walk+0xfc/0x150 [ 1658.857818][ T31] ? __pfx_path_openat+0x10/0x10 [ 1658.862757][ T31] ? do_fast_syscall_32+0x34/0x80 [ 1658.867879][ T31] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.874596][ T31] do_filp_open+0x1fa/0x410 [ 1658.879142][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1658.884186][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1658.889170][ T31] ? alloc_fd+0x64c/0x6c0 [ 1658.893552][ T31] do_sys_openat2+0x121/0x1c0 [ 1658.898350][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1658.903470][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1658.908791][ T31] ? __fget_files+0x2a/0x420 [ 1658.913419][ T31] ? __fget_files+0x2a/0x420 [ 1658.918193][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 1658.923780][ T31] __do_fast_syscall_32+0xb4/0x110 [ 1658.928985][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1658.934223][ T31] do_fast_syscall_32+0x34/0x80 [ 1658.939199][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1658.945641][ T31] RIP: 0023:0xf7f61539 [ 1658.949729][ T31] RSP: 002b:00000000ffb995f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1658.958260][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f727719a [ 1658.966346][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73f2ff4 [ 1658.974335][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1658.982371][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1658.990410][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1658.998523][ T31] [ 1659.001562][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1659.010702][ T31] [ 1659.010702][ T31] Showing all locks held in the system: [ 1659.021232][ T31] 4 locks held by kworker/1:0/24: [ 1659.026363][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1659.037484][ T31] #1: ffffc900001e7c60 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1659.050017][ T31] #2: ffffffff8f5c7fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 1659.060156][ T31] #3: ffff88807ef90100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1659.070332][ T31] 1 lock held by khungtaskd/31: [ 1659.075565][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1659.085945][ T31] 2 locks held by getty/5586: [ 1659.090703][ T31] #0: ffff8880306f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1659.100871][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1659.111151][ T31] 3 locks held by kworker/1:6/17696: [ 1659.116568][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1659.127730][ T31] #1: ffffc9000bd07c60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1659.141390][ T31] #2: ffffffff8f5c7fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1659.152815][ T31] 1 lock held by syz.3.3664/21177: [ 1659.158103][ T31] #0: ffff88807ef90100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1659.168004][ T31] 3 locks held by syz.3.3664/21195: [ 1659.173228][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.181785][ T31] #1: ffff888028128100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 1659.191499][ T31] #2: ffffffff8f5c7fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1659.201590][ T31] 1 lock held by syz.1.3670/21217: [ 1659.207561][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.216335][ T31] 1 lock held by syz.2.3672/21227: [ 1659.221478][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.230106][ T31] 1 lock held by syz.5.3675/21244: [ 1659.235371][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.243880][ T31] 1 lock held by syz.5.3675/21245: [ 1659.249139][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.257741][ T31] 1 lock held by syz.5.3675/21246: [ 1659.262867][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.271439][ T31] 1 lock held by syz.4.3676/21249: [ 1659.277171][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.285771][ T31] 1 lock held by syz-executor/21251: [ 1659.291095][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.299658][ T31] 1 lock held by syz-executor/21252: [ 1659.305044][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.313548][ T31] 1 lock held by syz-executor/21253: [ 1659.319010][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.327610][ T31] 1 lock held by syz-executor/21254: [ 1659.332913][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.341469][ T31] 1 lock held by syz-executor/21255: [ 1659.346840][ T31] #0: ffffffff8e7ad068 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1659.355464][ T31] [ 1659.357809][ T31] ============================================= [ 1659.357809][ T31] [ 1659.366403][ T31] NMI backtrace for cpu 1 [ 1659.366441][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 1659.366483][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1659.366506][ T31] Call Trace: [ 1659.366520][ T31] [ 1659.366536][ T31] dump_stack_lvl+0x189/0x250 [ 1659.366585][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1659.366634][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1659.366662][ T31] ? __pfx__printk+0x10/0x10 [ 1659.366694][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1659.366725][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1659.366750][ T31] ? _printk+0xcf/0x120 [ 1659.366773][ T31] ? __pfx__printk+0x10/0x10 [ 1659.366794][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1659.366816][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1659.366847][ T31] watchdog+0xfee/0x1030 [ 1659.366873][ T31] ? watchdog+0x1de/0x1030 [ 1659.366923][ T31] kthread+0x70e/0x8a0 [ 1659.366948][ T31] ? __pfx_watchdog+0x10/0x10 [ 1659.366972][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.366996][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.367018][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.367046][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.367062][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.367080][ T31] ret_from_fork+0x4b/0x80 [ 1659.367095][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.367114][ T31] ret_from_fork_asm+0x1a/0x30 [ 1659.367141][ T31] [ 1659.367151][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1659.514788][ C0] NMI backtrace for cpu 0 [ 1659.514805][ C0] CPU: 0 UID: 0 PID: 3528 Comm: kworker/u8:7 Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 1659.514826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1659.514838][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1659.514920][ C0] RIP: 0010:fq_pie_timer+0x270/0x5b0 [ 1659.514945][ C0] Code: 46 e4 ab f8 4c 8b 3b 41 0f b6 04 2c 84 c0 75 4f 41 8b 06 4c 6b f0 70 4b 8d 3c 37 48 83 c7 44 48 89 f8 48 c1 e8 03 0f b6 04 28 <84> c0 75 48 4d 01 f7 41 8b 57 44 48 8b 7c 24 38 4c 89 fe e8 08 6f [ 1659.514960][ C0] RSP: 0018:ffffc90000007b28 EFLAGS: 00000a03 [ 1659.514974][ C0] RAX: 0000000000000000 RBX: ffff88801bb27ad0 RCX: ffff888030dc9e00 [ 1659.514987][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffc9001f52bf34 [ 1659.514999][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1659.515011][ C0] R10: dffffc0000000000 R11: fffff52000000f54 R12: 1ffff11003764f65 [ 1659.515024][ C0] R13: 0000000000000526 R14: 000000000012bef0 R15: ffffc9001f400000 [ 1659.515036][ C0] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 1659.515050][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1659.515062][ C0] CR2: 00007fe6170be6c0 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1659.515077][ C0] Call Trace: [ 1659.515085][ C0] [ 1659.515094][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 1659.515120][ C0] call_timer_fn+0x17b/0x5f0 [ 1659.515143][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 1659.515170][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1659.515191][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1659.515218][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.515243][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.515259][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 1659.515283][ C0] __run_timer_base+0x61a/0x860 [ 1659.515302][ C0] ? ktime_get+0x3e/0x1f0 [ 1659.515326][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1659.515344][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1659.515372][ C0] run_timer_softirq+0xb7/0x180 [ 1659.515392][ C0] handle_softirqs+0x283/0x870 [ 1659.515420][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1659.515438][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1659.515466][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1659.515489][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1659.515504][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1659.515524][ C0] irq_exit_rcu+0x9/0x30 [ 1659.515537][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1659.515564][ C0] [ 1659.515570][ C0] [ 1659.515577][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1659.515596][ C0] RIP: 0010:smp_call_function_many_cond+0xe6e/0x11c0 [ 1659.515660][ C0] Code: 89 ee 83 e6 01 31 ff e8 20 6d 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 cb 68 0b 00 eb 37 f3 90 43 0f b6 04 2c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 b0 68 0b 00 eb e5 44 89 [ 1659.515675][ C0] RSP: 0018:ffffc9000c9a7700 EFLAGS: 00000293 [ 1659.515688][ C0] RAX: 0000000000000000 RBX: ffff8880b883ad40 RCX: ffff888030dc9e00 [ 1659.515701][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1659.515711][ C0] RBP: ffffc9000c9a7860 R08: ffffffff8f7ec977 R09: 1ffffffff1efd92e [ 1659.515724][ C0] R10: dffffc0000000000 R11: fffffbfff1efd92f R12: 1ffff11017127e99 [ 1659.515737][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b893f4c8 [ 1659.515764][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1659.515791][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1659.515814][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 1659.515873][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1659.515906][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1659.515928][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1659.515954][ C0] text_poke_bp_batch+0x61a/0x940 [ 1659.515982][ C0] ? kmem_cache_alloc_bulk_noprof+0x149/0x790 [ 1659.516005][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1659.516029][ C0] ? text_poke_queue+0x140/0x190 [ 1659.516052][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1659.516074][ C0] text_poke_finish+0x30/0x50 [ 1659.516098][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1659.516114][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 1659.516140][ C0] static_key_enable+0x1a/0x20 [ 1659.516163][ C0] toggle_allocation_gate+0xad/0x240 [ 1659.516184][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1659.516205][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.516236][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.516261][ C0] ? process_scheduled_works+0x9ec/0x17a0 [ 1659.516287][ C0] process_scheduled_works+0xadb/0x17a0 [ 1659.516328][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1659.516363][ C0] worker_thread+0x8a0/0xda0 [ 1659.516393][ C0] kthread+0x70e/0x8a0 [ 1659.516415][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1659.516430][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.516450][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.516468][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1659.516492][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1659.516508][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.516526][ C0] ret_from_fork+0x4b/0x80 [ 1659.516543][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.516562][ C0] ret_from_fork_asm+0x1a/0x30 [ 1659.516587][ C0] [ 1659.516799][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1660.022183][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00011-gf15d97df5afa #0 PREEMPT(full) [ 1660.034003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1660.044076][ T31] Call Trace: [ 1660.047369][ T31] [ 1660.050309][ T31] dump_stack_lvl+0x99/0x250 [ 1660.054923][ T31] ? __asan_memcpy+0x40/0x70 [ 1660.059532][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1660.064758][ T31] ? __pfx__printk+0x10/0x10 [ 1660.069378][ T31] panic+0x2db/0x790 [ 1660.073295][ T31] ? __pfx_panic+0x10/0x10 [ 1660.077725][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1660.083543][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1660.088929][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1660.095196][ T31] watchdog+0x102d/0x1030 [ 1660.099547][ T31] ? watchdog+0x1de/0x1030 [ 1660.103980][ T31] kthread+0x70e/0x8a0 [ 1660.108064][ T31] ? __pfx_watchdog+0x10/0x10 [ 1660.112795][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.117402][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.122002][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1660.127218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1660.132422][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.137022][ T31] ret_from_fork+0x4b/0x80 [ 1660.141447][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.146047][ T31] ret_from_fork_asm+0x1a/0x30 [ 1660.150830][ T31] [ 1660.154166][ T31] Kernel Offset: disabled [ 1660.158492][ T31] Rebooting in 86400 seconds..