last executing test programs: 15.430221339s ago: executing program 1 (id=877): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) listxattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240cc009}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'xfrm0\x00', {0x2, 0x0, @initdev}}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0xa) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) 12.5272553s ago: executing program 1 (id=883): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004a40)=ANY=[], 0x10d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x60044810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 9.422068798s ago: executing program 0 (id=892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[]) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f00000000c0), 0x0, 0xc000) syz_usb_connect(0x0, 0x81, 0x0, 0x0) 9.315512436s ago: executing program 1 (id=893): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x48000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r7, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x0, 0x5}, 0x20) sendto$inet6(r8, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.982896747s ago: executing program 4 (id=899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff8000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000040000000000000000000000000000000004010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000017be774483020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102"], 0x1bc}}, 0x0) 7.588197672s ago: executing program 4 (id=900): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000002f01330080200900080211000001080211"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffd8e, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) pwritev(r5, &(0x7f0000001900)=[{&(0x7f0000000180)="240cd03c91976aa422d4f4c1162e2f437c1dae5485ad57b5117b61aaf25dfc0b64f6daea50ac5b29a27c9395a75f0258ec93e746e66b89130abcbb0daaa1dae81d9f23a907a6f1fa485b2bfafc74ffb201be0aa112cfcaa97fdb8d91aac8532174b643c56fe9d465c74dbc9142342d12754cc03e2010c8ec83579e0955d60b8362b9aa427cab0402456994ea7d8caab6864638eab93ee6da08894ed6cd299efa8acbfee8c0d1020ac637e0cd9b12827b1b5b6357e3e531246425f5f816d05f70f0b30ef6816a1ceedf8b070907952851547edc491f7b04e0", 0xd8}, {&(0x7f0000000280)="ff2b19825aa1ab63ce29ab3d1da22a659eb1c44f66fd2f11ccdf224b95fedfc7df94c15c0dabdda7ee43949eda59163a358d65ad14e4422c51bef092c0112748dfeb2f321e674807f23e5a12c512978a89635347f082ec775c92f49cbddec11ebde912eaba1fc1f5db7fbafa64b36f26d15d", 0x72}, {&(0x7f0000000300)="1ef617426b4abf6bc0c22f47e4c8a4c6909fb5c560d9fb6222ebd56c88523e54af27894fd5b48cdefad0678f1c01843aa5135c127eab63a884034197581bbd9c4f67723f44648c534a51badf16dcfddd9b8253be3d7f9b9b798c2ff287cc83228ba70ee9e739195c021badaec7acf03f5220d1b204f8c75eb4d593dfbf153f2fa4b7c66bbd2498abdf0d13a136095c650e449cf0780905855f081ef191261cb7b8be7262780b88dd99", 0xa9}, {&(0x7f0000000480)="e972c05e92ffaf5b5fb97e2f5aa04f5a70e9f92713bc46749bb3b04a736154fed06b1c3a134de3d1f0b04ad40c73c3e66858b429ca5c9febae3f8ae8ca5eb2a075e42a4740", 0x45}, {&(0x7f00000005c0)="6952a225be59d2960db82b57b8c2f1326e5695495d542aea27d2b546b6ee32a8d9d6eee140b4834675130c20e43ef43a73b78f0cdd8395c7ca845ea24b8911d9fc30de2e5a8e650eee1e5a71cd8d59437d08be6e643f10eb393303db3c72117ae5355fd5ae754bb753158fff9ca524668d08291b77071ed9badbedf8d8ce6c7ed2bb9fe1aabfacefe3f4bf658c135ef1c2cce54bb552dee8b6cb98a1e84ffa4317c126de1473f8902ee1c0e3ac462f562e5fe30e0faddfeb1b3021a683b6a733337a16", 0xc3}, {&(0x7f0000000800)="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", 0xd06}], 0x100000000000030e, 0xe, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.063534948s ago: executing program 4 (id=904): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="001502f6ffff3398"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x18000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000340)) syz_usb_connect(0x2, 0x3f7, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x6f, 0x80, 0x63, 0x10, 0x1199, 0x68a3, 0xf1c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e5, 0x2, 0x7, 0x5, 0x90, 0x2, [{{0x9, 0x4, 0xb, 0xc, 0x7, 0xa6, 0x94, 0x85, 0xc, [@hid_hid={0x9, 0x21, 0x6, 0xff, 0x1, {0x22, 0xb90}}], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0x2, 0x7f, 0xf9}}, {{0x9, 0x5, 0x8c, 0x10, 0x400, 0x3d, 0x4, 0x5b, [@generic={0x2f, 0x1, "59e200afde661741d87a030f2f7a650e2d2e8f9780894899e1548b0ca268f38fbf17c59d506053e3c887d4f489"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xbe, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x9, 0x9, 0x40, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0xd4, 0x7, 0x2, [@generic={0x9f, 0x21, "759c04f66068c2d803db1b36b961fafa630a9a5f2a01159911842817428717c3864a9de2e0339866c97697d38cc712c0b5c7f991f6426197555ca1b1d7d29b2cdf7717aa40b789e79d47b8c20dab37e1083b4abead7bbabf2d5de8b9d5444201b452e63cf85c8dd5e7df4104fdc6761ad0a1cdf62c1f2cae153d3df056f3aa43508b2acb9d6a7128a1cf6f2bfcc4b1e15666f411c5582c27b67ad884bf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x5e, 0x3, [@generic={0x3d, 0xc, "2b345da01a78830de7c4733c81e2929aaa36a99035a89c492fe9c5875422903d2f97bce407077ba70ca5d2021cb9c34e6e00eda0132f332f56ffd4"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x43, 0x9, 0xa, [@generic={0x9d, 0x4, "111cb5c103d7a0e6a8fe6af585fb479d2426fdc6a799fc0c303a17aa582d499b26d61d0e93a921084120b117a452f2f1529ac1705f61b1ef1e59eac1f730c69d93fce4d491c8ddfd937dabd5205ebfbd630877a4ffda6fec42c391ef9934da5667235d9cca74839810fbfc5f28a283764c7d2823fcb08d7e6cb87deadf35879b2666f538ed30a0181ce41af595934e49901a029f2e01bf87888007"}]}}]}}, {{0x9, 0x4, 0x80, 0xa1, 0xb, 0xc0, 0xc9, 0x4b, 0x1, [@uac_as], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x7f, 0x80, 0x1, [@generic={0x42, 0x0, "e512f9739252405a9656a04a9e75c916000784d7062c909ec490c2ea0ceec43d681c118da4ee7cb9b50f96c1ae5e5620f0be65ee6b5322219b45bedc6ee2a132"}, @generic={0x7e, 0x7, "461751c326107ee4844221bd31aeba69ad731eed0b129ec6ea03b7bdb60e05bab5ca5675dda619c2ace9816484212132dc37a5800cecd34ff4c119c749b8009158232d7e0f778ba282adf78b8b818f763beebd80fe4da1471fc4f0721409695a0c5de9c4e1e50a5cc56075f3c7a88cb0425a53c4ddf2c374e31ad136"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0xb, 0x9}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x0, 0xff, 0x81}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x9, 0x6}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x4d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xd}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x6, 0x9, 0x7, [@generic={0x42, 0x0, "c6f7ed335ba7958d88947a6c14a3d343f8ed6683e48dbaf7f32b0f4c45ff9eb67e21f426a97398d2bcc5a1e4b9ca2b9c120bcc13a76faa884076071767fc5aad"}, @generic={0x21, 0x23, "1f4a37eaf86f29433e3f2855a6cfc00760c6a6575ef24b53e5971cf91e1318"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x5c, 0x0, 0x40}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x5, 0x8, 0xd}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x9, 0xb, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x1e, 0x1, [@generic={0x3f, 0x6, "74c0e9f6e33ce40d80fcb99e183b9e8830fa533aca4d7fffd3bbe02a7f8ad8d62287a64c897c9753f37600cd8f363e1901d55c48251639e07a213d835e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x7, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xffff}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xb8, 0x2, 0x0, 0x10, 0x25}, 0x130, &(0x7f0000000180)={0x5, 0xf, 0x130, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x5, 0x0, 0x5, 0x4b}, @wireless={0xb, 0x10, 0x1, 0x2, 0x32, 0x9, 0x9, 0x3, 0xc2}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "e4c3f00ed0ac7d51c5720c69d1636ee9"}, @generic={0xed, 0x10, 0xa, "4af4db9c00cd249ccb0ccaae7ff3bbc38c79378202783e7067f1aba1979303dd965fe1da67be70fec965a0c94cbd50e510dabbff885b6de9aa8a1d8d6701922b979087e5070528f5953086e97b00fd38e3ad791cf14f58a8d293cc7876f0e3fbe06e444e4f4230a1e4edb7ad3074545df6a6c890748a50081d94518aa36a7994761de494b7ec6e6b8a0a824f48a4f9a6f229fcd87aef9c6cbe64aa330e160a3ec49ab1923a22a8f2846a1f6e991775145026a198f901907f658da5e055ae3a707e6c971ea3f09ed0127d362e707daebfeea2e3751320111f705855634cc3dd1f9acff9f57899f17a97e2"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e39eae7a37ef1998944d2c6f24873caa"}]}, 0x2, [{0x67, &(0x7f0000000040)=@string={0x67, 0x3, "191450aa6e9b8246d8a49c84beded0c3e9b49291f4c36c0b64dc007be59734972628199274616ee42455c7a3a0f577e3987fae7a456f9bbcdd194f7ce97f3faacdb70a1947061acdc920c0823941d07575950442caa67f8811bacf01c33ed9d54026874278"}}, {0x42, &(0x7f00000000c0)=@string={0x42, 0x3, "7019aa986746dbc568d9ebb3d25ba3abae0ad8792fdd01f888cb81f4089c0c15d8e3ac969eddc4384a7f7b5ec01b58172c18d57c2da3b0a1602e036722358a25"}}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="001502f6ffff3398"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x18000, 0x0) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000340)) (async) syz_usb_connect(0x2, 0x3f7, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x6f, 0x80, 0x63, 0x10, 0x1199, 0x68a3, 0xf1c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e5, 0x2, 0x7, 0x5, 0x90, 0x2, [{{0x9, 0x4, 0xb, 0xc, 0x7, 0xa6, 0x94, 0x85, 0xc, [@hid_hid={0x9, 0x21, 0x6, 0xff, 0x1, {0x22, 0xb90}}], [{{0x9, 0x5, 0x1, 0x8, 0x20, 0x2, 0x7f, 0xf9}}, {{0x9, 0x5, 0x8c, 0x10, 0x400, 0x3d, 0x4, 0x5b, [@generic={0x2f, 0x1, "59e200afde661741d87a030f2f7a650e2d2e8f9780894899e1548b0ca268f38fbf17c59d506053e3c887d4f489"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0xbe, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x9, 0x9, 0x40, 0x1, 0x7, 0x7}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0xd4, 0x7, 0x2, [@generic={0x9f, 0x21, "759c04f66068c2d803db1b36b961fafa630a9a5f2a01159911842817428717c3864a9de2e0339866c97697d38cc712c0b5c7f991f6426197555ca1b1d7d29b2cdf7717aa40b789e79d47b8c20dab37e1083b4abead7bbabf2d5de8b9d5444201b452e63cf85c8dd5e7df4104fdc6761ad0a1cdf62c1f2cae153d3df056f3aa43508b2acb9d6a7128a1cf6f2bfcc4b1e15666f411c5582c27b67ad884bf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x6, 0x5e, 0x3, [@generic={0x3d, 0xc, "2b345da01a78830de7c4733c81e2929aaa36a99035a89c492fe9c5875422903d2f97bce407077ba70ca5d2021cb9c34e6e00eda0132f332f56ffd4"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x43, 0x9, 0xa, [@generic={0x9d, 0x4, "111cb5c103d7a0e6a8fe6af585fb479d2426fdc6a799fc0c303a17aa582d499b26d61d0e93a921084120b117a452f2f1529ac1705f61b1ef1e59eac1f730c69d93fce4d491c8ddfd937dabd5205ebfbd630877a4ffda6fec42c391ef9934da5667235d9cca74839810fbfc5f28a283764c7d2823fcb08d7e6cb87deadf35879b2666f538ed30a0181ce41af595934e49901a029f2e01bf87888007"}]}}]}}, {{0x9, 0x4, 0x80, 0xa1, 0xb, 0xc0, 0xc9, 0x4b, 0x1, [@uac_as], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x7f, 0x80, 0x1, [@generic={0x42, 0x0, "e512f9739252405a9656a04a9e75c916000784d7062c909ec490c2ea0ceec43d681c118da4ee7cb9b50f96c1ae5e5620f0be65ee6b5322219b45bedc6ee2a132"}, @generic={0x7e, 0x7, "461751c326107ee4844221bd31aeba69ad731eed0b129ec6ea03b7bdb60e05bab5ca5675dda619c2ace9816484212132dc37a5800cecd34ff4c119c749b8009158232d7e0f778ba282adf78b8b818f763beebd80fe4da1471fc4f0721409695a0c5de9c4e1e50a5cc56075f3c7a88cb0425a53c4ddf2c374e31ad136"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0xb, 0x9}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x0, 0xff, 0x81}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x9, 0x6}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x6, 0x4d, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xd}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x6, 0x9, 0x7, [@generic={0x42, 0x0, "c6f7ed335ba7958d88947a6c14a3d343f8ed6683e48dbaf7f32b0f4c45ff9eb67e21f426a97398d2bcc5a1e4b9ca2b9c120bcc13a76faa884076071767fc5aad"}, @generic={0x21, 0x23, "1f4a37eaf86f29433e3f2855a6cfc00760c6a6575ef24b53e5971cf91e1318"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x5c, 0x0, 0x40}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x5, 0x8, 0xd}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x9, 0xb, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x1e, 0x1, [@generic={0x3f, 0x6, "74c0e9f6e33ce40d80fcb99e183b9e8830fa533aca4d7fffd3bbe02a7f8ad8d62287a64c897c9753f37600cd8f363e1901d55c48251639e07a213d835e"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x7, 0x6, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xffff}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xb8, 0x2, 0x0, 0x10, 0x25}, 0x130, &(0x7f0000000180)={0x5, 0xf, 0x130, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0x5, 0x0, 0x5, 0x4b}, @wireless={0xb, 0x10, 0x1, 0x2, 0x32, 0x9, 0x9, 0x3, 0xc2}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "e4c3f00ed0ac7d51c5720c69d1636ee9"}, @generic={0xed, 0x10, 0xa, "4af4db9c00cd249ccb0ccaae7ff3bbc38c79378202783e7067f1aba1979303dd965fe1da67be70fec965a0c94cbd50e510dabbff885b6de9aa8a1d8d6701922b979087e5070528f5953086e97b00fd38e3ad791cf14f58a8d293cc7876f0e3fbe06e444e4f4230a1e4edb7ad3074545df6a6c890748a50081d94518aa36a7994761de494b7ec6e6b8a0a824f48a4f9a6f229fcd87aef9c6cbe64aa330e160a3ec49ab1923a22a8f2846a1f6e991775145026a198f901907f658da5e055ae3a707e6c971ea3f09ed0127d362e707daebfeea2e3751320111f705855634cc3dd1f9acff9f57899f17a97e2"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e39eae7a37ef1998944d2c6f24873caa"}]}, 0x2, [{0x67, &(0x7f0000000040)=@string={0x67, 0x3, "191450aa6e9b8246d8a49c84beded0c3e9b49291f4c36c0b64dc007be59734972628199274616ee42455c7a3a0f577e3987fae7a456f9bbcdd194f7ce97f3faacdb70a1947061acdc920c0823941d07575950442caa67f8811bacf01c33ed9d54026874278"}}, {0x42, &(0x7f00000000c0)=@string={0x42, 0x3, "7019aa986746dbc568d9ebb3d25ba3abae0ad8792fdd01f888cb81f4089c0c15d8e3ac969eddc4384a7f7b5ec01b58172c18d57c2da3b0a1602e036722358a25"}}]}) (async) 6.966586224s ago: executing program 2 (id=905): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) recvmsg$unix(r0, &(0x7f0000001480)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/197, 0xc5}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000000) 6.349846478s ago: executing program 1 (id=907): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a2, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b00200800800034000000004"], 0x364}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="1aa4d2541365787228f457aa7491f94b42bae988a3d342d1fb9f52dd6ac23dd83c6fd53672e226495d632589518692e46c2d1e69e24b17197575b9350c2e4f4d", 0x40, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000280)={r10, 0x97, &(0x7f00000001c0)=""/151}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r10, 0xd5, &(0x7f0000000540)=""/213}) r11 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r11, 0xc054561d, &(0x7f0000000040)={0xfffffffa, "64222219d8d8c980a354fc3d32e3a387e30a180c5bf8c1d0922c454c846de19d", 0x3, 0x80, 0xa4, 0x200, 0x4, 0x2, 0x8, 0x3e}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000300)={0x200, 0x435b, &(0x7f0000000180)=[r12], &(0x7f0000000200), &(0x7f0000000280)=[0x0], &(0x7f0000000040)}) 5.772078038s ago: executing program 2 (id=909): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x48000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r7, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x0, 0x5}, 0x20) sendto$inet6(r8, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.771837079s ago: executing program 0 (id=910): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f000"], 0x232) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000051f72bcab75035edd6e90600000000fedbdf2500000000666926d168af42dc1ab1d39b031d1e89cbda170847417fcc76f4a914ca7854c1c4dd1f03549b1b0362539520206f14a38195ab2016f2f596602a7a0cf503d1ff852cc267d8d3890608d69611ffe06e9b7d741aaf9d3834dd04dda7c7e3c1cbb7edcc569eec3049109d2ef8002de80187805f3df5c24e2d7d1b30ee2afef3df4c0000000000000000006b0eed4f797c72e351eb94a5cfaaf90f", @ANYRES32=0x0, @ANYBLOB="86feae88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 5.617094522s ago: executing program 3 (id=912): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008983c00000000000000000000000000000005001400ff0000000500120004000000"], 0x38}}, 0x2) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x78, 0x0, r5, {0x7, 0x0, 0x0, {0x0, 0x0, 0x52, 0x800000000000000, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0xa000}}}, 0x78) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000300)=@ethtool_sfeatures={0x3b, 0x3, [{0x9, 0x6}, {0x7ff, 0xe}, {0x1, 0x3}]}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) waitid(0x1, r7, 0x0, 0x8000000a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000080)={0x6c, @remote, 0x4e24, 0x3, 'ovf\x00', 0x2, 0x3, 0x10}, 0x2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "faca"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) r10 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='veth0_to_team\x00', &(0x7f00000001c0)='\xaa\xaa\xaa\xaa\xaa', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x10, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) 4.984250863s ago: executing program 3 (id=913): add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000000040)='R\xf1?\x9f\xa5\xca\x91IMs\x00', 0xfffffffffffffffb) 4.973572906s ago: executing program 0 (id=914): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="f8012995f5d7250600003b14000000000000000000003b2155dbb43c8ec145bd631895a3ad05d0c21612991d5853bbb0be1a5db33eefe0c39ddee21452fc5b852b", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000027850a40fffffffc0800034000000014400000000c0a010200000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.825196294s ago: executing program 3 (id=915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x107fff}, 0x0, 0x0]) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000fa0080b8785d96000100000000000000000000000000000000000000000000008534df7400", "2809e8dbe11e598948324ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000004000", "f4bd000000801900000000000000000000004000", [0x0, 0x2000000000005]}}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 4.744130254s ago: executing program 4 (id=916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) (async) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000200)}, 0x24000008) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) dup(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r6, 0x0, 0x0, 0x0) (async) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 3.648767706s ago: executing program 1 (id=917): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x48000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) read$snddsp(r7, &(0x7f0000000100)=""/44, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x0, 0x5}, 0x20) sendto$inet6(r8, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.566503729s ago: executing program 4 (id=918): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r7 = syz_io_uring_setup(0x23c, &(0x7f0000000700)={0x0, 0x1, 0x100}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r10, 0x0, &(0x7f0000000780)="352f1938d1418d0663ebab120f718d5b2215d083456d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0x39}) io_uring_enter(r7, 0x49d, 0xc000000, 0x0, 0x0, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000580)) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x4, 0x8000, 0xd67, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x3, 0x0, 0x5, 0x3, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x800, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.522655966s ago: executing program 2 (id=919): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) pwritev(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000180)="240cd03c91976aa422d4f4c1162e2f437c1dae5485ad57b5117b61aaf25dfc0b64f6daea50ac5b29a27c9395a75f0258ec93e746e66b89130abcbb0daaa1dae81d9f23a907a6f1fa485b2bfafc74ffb201be0aa112cfcaa97fdb8d91aac8532174b643c56fe9d465c74dbc9142342d12754cc03e2010c8ec83579e0955d60b8362b9aa427cab0402456994ea7d8caab6864638eab93ee6da08894ed6cd299efa8acbfee8c0d1020ac637e0cd9b12827b1b5b6357e3e531246425f5f816d05f70f0b30ef6816a1ceedf8b070907952851547edc491f7b04e0", 0xd8}, {&(0x7f0000000280)="ff2b19825aa1ab63ce29ab3d1da22a659eb1c44f66fd2f11ccdf224b95fedfc7df94c15c0dabdda7ee43949eda59163a358d65ad14e4422c51bef092c0112748dfeb2f321e674807f23e5a12c512978a89635347f082ec775c92f49cbddec11ebde912eaba1fc1f5db7fbafa64b36f26d15d", 0x72}, {&(0x7f0000000300)="1ef617426b4abf6bc0c22f47e4c8a4c6909fb5c560d9fb6222ebd56c88523e54af27894fd5b48cdefad0678f1c01843aa5135c127eab63a884034197581bbd9c4f67723f44648c534a51badf16dcfddd9b8253be3d7f9b9b798c2ff287cc83228ba70ee9e739195c021badaec7acf03f5220d1b204f8c75eb4d593dfbf153f2fa4b7c66bbd2498abdf0d13a136095c650e449cf0780905855f081ef191261cb7b8be7262780b88dd99", 0xa9}, {&(0x7f0000000480)="e972c05e92ffaf5b5fb97e2f5aa04f5a70e9f92713bc46749bb3b04a736154fed06b1c3a134de3d1f0b04ad40c73c3e66858b429ca5c9febae3f8ae8ca5eb2a075e42a4740", 0x45}, {&(0x7f00000005c0)="6952a225be59d2960db82b57b8c2f1326e5695495d542aea27d2b546b6ee32a8d9d6eee140b4834675130c20e43ef43a73b78f0cdd8395c7ca845ea24b8911d9fc30de2e5a8e650eee1e5a71cd8d59437d08be6e643f10eb393303db3c72117ae5355fd5ae754bb753158fff9ca524668d08291b77071ed9badbedf8d8ce6c7ed2bb9fe1aabfacefe3f4bf658c135ef1c2cce54bb552dee8b6cb98a1e84ffa4317c126de1473f8902ee1c0e3ac462f562e5fe30e0faddfeb1b3021a683b6a733337a16", 0xc3}], 0x5, 0xe, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.36757088s ago: executing program 0 (id=920): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x7, 0x9, 0x5, 0xffff, 0x4, 0x3}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) (async, rerun: 32) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000000c0)) (rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x2186507b928fa2c4, 0xb, 0xff00, 0x2, 0x2d, 0x80000001, &(0x7f0000000100)="d27398c1ccd4552946a711d4d58d4421f515bc05bfe7f4ef0b82b0efc05f28adc49be4ff388955fe7ca372b17f"}) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x60, 0x3, 0x10, 0xffff, 0x69, 0x8c3b, &(0x7f0000000180)="deb7d8d5f2b390d56e75dd349f473e49e5eaf8ee602803eedfadf34d7a6676fe7d328c48ca0086322667f3bb1243a0b92d43edd45239036bd375781b31013e060ed5c9a9e897fe8ccee537f334464b4fb353e7ec1032963cf2e40dad45020f3a9bbdc6cd8e3cab67d8"}) (async) set_mempolicy(0x4000, &(0x7f0000000240)=0x4, 0x7f) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000280)=0x1) (async) mknod(&(0x7f00000002c0)='./file0\x00', 0x1, 0xb) (async, rerun: 32) r2 = dup(r1) (rerun: 32) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000380)={0x20, 0x9, 0x0, 0x0, 0x63, 0x6, &(0x7f0000000300)="3cd20746d6de009875b53155cc7659d1478901f9e2aefb4f0011a30ea637591be06b1d6ca4c38b2df3c39c8225b06282cdc63f903a78da116021a20576ab7a87c55292e71307eb3745aba22d4251fc14b766b34d4edef4deee4c6f425280098a76fa7f"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x160, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x97, 0x6, "fcd28271533fdc3930c0654356f8d3dc4d486d81e13be8f8d9caeaeb710d6299de99c6bfde9f9cf14be20ab3d41ee55f6e34a37c94bcf04262a2cb70fc2be30a6995a4566b36d94f74790f6c475b1b7cd98e25dbc1c589cc9742fe57bbfcac55bfd0fecdb53d17fa34dd367f4213ccf8fbfc58dfe41338491c344e5c7c4570c37e56ed15393aeab9ac8cceb64c8f2f12eaf9ae"}, @NFTA_TABLE_USERDATA={0x9f, 0x6, "dde5d25bacd8d3982ae5d9a6ea3a630aeb01ab6d5520031aaf3f1c71a81c1a7ef414b8e13baccb56a1c1edee4dd24bddd5fb5dd3ec9828a43af17bdbf22dbe02c5199a697f66c6777c4d06475baa02e8525be35c15cb31e4b43623d0abc3788e262513c9bafd92fc725bcf176368a936c8659fac953705f9ab67bc707729dcce28323c452f9cf970775089baf4fb139d7e1ff503602cc60407dc8d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x208}}, 0x48000) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @private}, &(0x7f0000000700)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000740)={'gre0\x00', r3, 0x10, 0x20, 0xbc3c, 0x3, {{0x4f, 0x4, 0x0, 0x3f, 0x13c, 0x68, 0x0, 0xa, 0x2f, 0x0, @empty, @local, {[@ssrr={0x89, 0x23, 0xeb, [@private=0xa010100, @remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x9, [0x40]}, @generic={0x88, 0x10, "a163274b1fa9c8c1a2372d8c9054"}, @timestamp={0x44, 0x10, 0xe9, 0x0, 0x2, [0x3, 0x8, 0x8]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x5, 0x3, "93"}]}, @noop, @timestamp_addr={0x44, 0x54, 0x33, 0x1, 0x3, [{@empty, 0x1}, {@rand_addr=0x64010102, 0xb7}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@multicast1, 0x365}, {@multicast1, 0x6}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x6}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x1}, {@broadcast, 0x3}]}, @cipso={0x86, 0x54, 0x3, [{0x7, 0x8, "95a24e9b344f"}, {0x7, 0x6, "961bfca5"}, {0x5, 0x7, "0248dfaaee"}, {0x6, 0xf, "46eb204a0ac2635789449ee8ab"}, {0x7, 0x6, "39489831"}, {0x2, 0xf, "552e4ddfa653b39ece8e4263ae"}, {0x6, 0xa, "263a7eabf0a49d58"}, {0x0, 0xb, "dbc7313620553616c2"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x6c, 0x1, 0x6, [{@multicast2, 0x3ff}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@remote, 0x1}]}]}}}}}) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000900)) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000940), 0x10240, 0x0) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000980)=[0x4], 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000009c0)=0x0) sched_setattr(r5, &(0x7f0000000a00)={0x38, 0x6, 0x2, 0x2, 0x3, 0xbdc3, 0x9, 0xb, 0x5, 0x2}, 0x0) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000a40), {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xfff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@empty, @rand_addr=0x64010100, 0xffffff00, 0xfffffefe, 0x8, 0x6, {@mac=@link_local, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x2, 0x7, 0x8, 0x5, 0x400, 'rose0\x00', 'virt_wifi0\x00', {0x8a52d79df0259166}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x1000, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async, rerun: 64) rt_tgsigqueueinfo(r5, r5, 0x1, &(0x7f0000000ec0)={0xa, 0xa3, 0x10000}) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000f40), 0x79, 0x2) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/consoles\x00', 0x0, 0x0) (async) getpeername$unix(r0, &(0x7f0000000fc0)=@abs, &(0x7f0000001040)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r6, 0x82307201, &(0x7f0000001080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000012c0)={0x1, 0x1, 0x6}) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 2.33681289s ago: executing program 3 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x68}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x574e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) read$FUSE(r6, &(0x7f0000001fc0)={0x2020}, 0x2020) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@uexit={0x0, 0x18, 0xd}, @wrmsr={0x1e, 0x20, {0x60b, 0x7}}, @rdmsr={0x32, 0x18, {0x2ab}}], 0x50}) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000500)) r8 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xd2, 0xcf, 0xa0, 0x8, 0x1163, 0x100, 0xdcba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0xd7, 0x3, 0x2, 0xff, 0x3, 0x4, 0x4, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}, {{0x9, 0x5, 0x85, 0x3, 0x10, 0x8, 0x8, 0xae}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sendmsg$key(r8, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) 2.255244404s ago: executing program 0 (id=922): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x47}, 0x7e91}], 0x1, 0x10002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x7, 0x80000) 2.095028067s ago: executing program 1 (id=923): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4109, 0x100d}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000180)=""/243) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x400454da, &(0x7f0000000000)) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="01000100fe00000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) sendto$packet(r2, &(0x7f0000000300)="05031600d3fc140000004788031c09102c28fc3c39a39adc54c9f4965007a47b2359279ccb551a3ee434cf6f3482baf8468154066b6c83ac2b15bfd6082265ea768a3e045a293cbf065cee953df5598b8062fc88da0d2b12f17c4e9047786983b672c8905a85b7edc4728135102d9454674aa6eff329735d82cf2497479ad0d5d488010800000000107d03a30b7c3ff3870db8", 0x93, 0x4, &(0x7f0000000000)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.936039995s ago: executing program 2 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000040000000000000000000000000000000004010500e0000002000000000000000000000000000000003c"], 0x1bc}}, 0x0) 1.325686658s ago: executing program 2 (id=925): syz_clone(0x200, 0x0, 0xfffffffffffffef9, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000700)='./file1\x00', 0x2000775) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_newneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x7e, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in6={0x21, 0x6, 0x1c, 0x2, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x81}}, 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100060000000000007c0808000300", @ANYRES32=r7, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0x320, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x200000, 0x32}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x5, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @loopback, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast2, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xfffffffb, 0x5d5, 0x2, 0x40000006}, 0x3c) 1.047015086s ago: executing program 3 (id=926): syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) syz_emit_ethernet(0x92, &(0x7f00000002c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, 0xfffe, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @nop, @mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}, @sack={0x5, 0x26, [0x9, 0xffffff4c, 0x43, 0x1, 0x8, 0xfa39, 0x8000, 0x8, 0x9]}, @md5sig={0x13, 0x12, "625fbe96fc97dc524d8a397b7b38957f"}]}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = gettid() tkill(r3, 0x12) ioprio_get$pid(0x1, r3) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x7ffffffc, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x1, {0xff, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x8, 0x20000008, r7, r8, 0x8000, '\x00', 0x5, 0x8, 0x4, 0x6, {0x6, 0x6}, {0x20000000000004}, {0x100000000, 0x2}, {0x8, 0xa04}, 0x4, 0x0, 0x5}}}}) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@newsa={0x18c, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@mcast2, 0x4e21, 0x80, 0x4e24, 0x4, 0x2, 0xc0, 0x80, 0x11, 0x0, r7}, {@in6=@remote, 0x4d3}, @in6=@empty, {0x4, 0x878, 0x3, 0x9, 0xfffffffffffffffa, 0x0, 0x3, 0x7}, {0x4, 0x800, 0xb, 0x5cf}, {0x3, 0x2}, 0x70bd25, 0x40003500, 0x2, 0x3, 0x9, 0xa4}, [@algo_auth_trunc={0x9a, 0x14, {{'crc32-generic\x00'}, 0x270, 0x200, "8c41a7d58c5ea41f6d0de45400d55eb857701c75d1ef061414451eada5041bb9c9370cd68143434f3da33ddc25447b33277a312ea725c400cdce859ab3650f2024668094ef2f28ad60dc5f1aff6e"}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40084) r9 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r9, 0x11, 0x0, 0x4) 501.867406ms ago: executing program 3 (id=927): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) unshare(0x42000000) 459.56998ms ago: executing program 0 (id=928): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x600400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)="888cf911465900067c403b1d8eb0c56a671973256a21d9cfc9acd53c4a"}, 0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) shutdown(r1, 0x0) accept(r1, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket(0x28, 0xa, 0x4) sendmsg$key(r4, 0x0, 0x20048060) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x6) 416.912578ms ago: executing program 2 (id=929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 0s ago: executing program 4 (id=930): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x4b7, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x800, 0x7}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 457.119817][ T5956] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 457.204488][ T5956] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 457.236056][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.260731][ T7498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 457.291596][ T5956] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.852637][ T5939] usb 2-1: USB disconnect, device number 28 [ 457.989256][ T5956] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 458.108402][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.169750][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 458.171968][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.197651][ T5956] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.313868][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0 [ 458.374052][ T5956] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 458.502187][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.546564][ T5956] usb 5-1: config 0 descriptor?? [ 458.991633][ T7546] capability: warning: `syz.3.398' uses 32-bit capabilities (legacy support in use) [ 459.227797][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 459.299788][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 459.369465][ T5956] usb 5-1: USB disconnect, device number 20 [ 459.734916][ T7560] loop6: detected capacity change from 0 to 7 [ 459.785671][ T7560] Dev loop6: unable to read RDB block 7 [ 459.809742][ T7560] loop6: AHDI p1 p2 p3 p4 [ 459.861937][ T7560] loop6: partition table partially beyond EOD, truncated [ 459.869474][ T7560] loop6: p1 start 3099783474 is beyond EOD, truncated [ 459.908890][ T7560] loop6: p2 start 668120390 is beyond EOD, truncated [ 459.950911][ T7560] loop6: p3 start 1886353253 is beyond EOD, truncated [ 460.133691][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 460.291987][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 460.740091][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 460.797374][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.830690][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.876172][ T7582] could not allocate digest TFM handle poly1305-neon [ 461.123484][ T7492] syz.1.385: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 461.145476][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.1.385 Not tainted syzkaller #0 PREEMPT(full) [ 461.145501][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.145510][ T7492] Call Trace: [ 461.145517][ T7492] [ 461.145522][ T7492] dump_stack_lvl+0x189/0x250 [ 461.145544][ T7492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.145557][ T7492] ? __pfx__printk+0x10/0x10 [ 461.145569][ T7492] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 461.145583][ T7492] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 461.145597][ T7492] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 461.145611][ T7492] warn_alloc+0x214/0x310 [ 461.145629][ T7492] ? __pfx_warn_alloc+0x10/0x10 [ 461.145648][ T7492] ? __get_vm_area_node+0x28f/0x300 [ 461.145662][ T7492] ? hash_ipportip_create+0x358/0xfe0 [ 461.145676][ T7492] __vmalloc_node_range_noprof+0x690/0x12d0 [ 461.145706][ T7492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 461.145719][ T7492] ? hash_ipportip_create+0x358/0xfe0 [ 461.145741][ T7492] ? rcu_is_watching+0x15/0xb0 [ 461.145753][ T7492] ? hash_ipportip_create+0x358/0xfe0 [ 461.145765][ T7492] __kvmalloc_node_noprof+0x674/0x910 [ 461.145780][ T7492] ? hash_ipportip_create+0x358/0xfe0 [ 461.145791][ T7492] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 461.145804][ T7492] ? hash_ipportip_create+0x2fe/0xfe0 [ 461.145818][ T7492] hash_ipportip_create+0x358/0xfe0 [ 461.145834][ T7492] ? __nla_parse+0x40/0x60 [ 461.145845][ T7492] ? __pfx_hash_ipportip_create+0x10/0x10 [ 461.145857][ T7492] ip_set_create+0xa97/0x1940 [ 461.145872][ T7492] ? ip_set_create+0x4a2/0x1940 [ 461.145890][ T7492] ? __pfx_ip_set_create+0x10/0x10 [ 461.145922][ T7492] nfnetlink_rcv_msg+0xb4d/0x1130 [ 461.145936][ T7492] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 461.145959][ T7492] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 461.145971][ T7492] ? kasan_save_track+0x4f/0x80 [ 461.146010][ T7492] netlink_rcv_skb+0x208/0x470 [ 461.146025][ T7492] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.146039][ T7492] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 461.146053][ T7492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.146073][ T7492] ? bpf_lsm_capable+0x9/0x20 [ 461.146086][ T7492] ? security_capable+0x7e/0x2e0 [ 461.146103][ T7492] nfnetlink_rcv+0x282/0x2590 [ 461.146125][ T7492] ? __dev_queue_xmit+0x27b/0x3b50 [ 461.146137][ T7492] ? __dev_queue_xmit+0x1d79/0x3b50 [ 461.146147][ T7492] ? kasan_save_track+0x3e/0x80 [ 461.146159][ T7492] ? __kasan_slab_alloc+0x6c/0x80 [ 461.146177][ T7492] ? __dev_queue_xmit+0x27b/0x3b50 [ 461.146195][ T7492] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 461.146207][ T7492] ? __pfx___dev_queue_xmit+0x10/0x10 [ 461.146226][ T7492] ? ref_tracker_free+0x63a/0x7d0 [ 461.146236][ T7492] ? __asan_memcpy+0x40/0x70 [ 461.146248][ T7492] ? __pfx_ref_tracker_free+0x10/0x10 [ 461.146257][ T7492] ? __skb_clone+0x63/0x7a0 [ 461.146270][ T7492] ? __skb_clone+0x483/0x7a0 [ 461.146284][ T7492] ? skb_clone+0x246/0x3a0 [ 461.146296][ T7492] ? __netlink_deliver_tap+0x807/0x850 [ 461.146305][ T7492] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.146317][ T7492] ? netlink_deliver_tap+0x2e/0x1b0 [ 461.146331][ T7492] netlink_unicast+0x82f/0x9e0 [ 461.146349][ T7492] ? __pfx_netlink_unicast+0x10/0x10 [ 461.146365][ T7492] ? netlink_sendmsg+0x642/0xb30 [ 461.146374][ T7492] ? skb_put+0x11b/0x210 [ 461.146385][ T7492] netlink_sendmsg+0x805/0xb30 [ 461.146400][ T7492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.146411][ T7492] ? aa_sock_msg_perm+0xf1/0x1d0 [ 461.146426][ T7492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.146436][ T7492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.146446][ T7492] __sock_sendmsg+0x21c/0x270 [ 461.146460][ T7492] ____sys_sendmsg+0x505/0x830 [ 461.146483][ T7492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.146509][ T7492] ? import_iovec+0x74/0xa0 [ 461.146534][ T7492] ___sys_sendmsg+0x21f/0x2a0 [ 461.146554][ T7492] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.146604][ T7492] ? __fget_files+0x2a/0x420 [ 461.146621][ T7492] ? __fget_files+0x3a0/0x420 [ 461.146649][ T7492] __x64_sys_sendmsg+0x19b/0x260 [ 461.146671][ T7492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.146708][ T7492] ? do_syscall_64+0xbe/0xfa0 [ 461.146734][ T7492] do_syscall_64+0xfa/0xfa0 [ 461.146760][ T7492] ? lockdep_hardirqs_on+0x9c/0x150 [ 461.146783][ T7492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.146800][ T7492] ? clear_bhb_loop+0x60/0xb0 [ 461.146822][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.146840][ T7492] RIP: 0033:0x7f805bf8f6c9 [ 461.146857][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.146873][ T7492] RSP: 002b:00007f805cf01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.146894][ T7492] RAX: ffffffffffffffda RBX: 00007f805c1e5fa0 RCX: 00007f805bf8f6c9 [ 461.146908][ T7492] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 461.146919][ T7492] RBP: 00007f805c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.146931][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.146942][ T7492] R13: 00007f805c1e6038 R14: 00007f805c1e5fa0 R15: 00007f805c30fa28 [ 461.146974][ T7492] [ 461.644602][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.662451][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 461.772023][ T7492] Mem-Info: [ 461.775187][ T7492] active_anon:22745 inactive_anon:0 isolated_anon:0 [ 461.775187][ T7492] active_file:18308 inactive_file:39955 isolated_file:0 [ 461.775187][ T7492] unevictable:768 dirty:93 writeback:0 [ 461.775187][ T7492] slab_reclaimable:10508 slab_unreclaimable:99716 [ 461.775187][ T7492] mapped:32608 shmem:17749 pagetables:1330 [ 461.775187][ T7492] sec_pagetables:0 bounce:0 [ 461.775187][ T7492] kernel_misc_reclaimable:0 [ 461.775187][ T7492] free:1284856 free_pcp:18435 free_cma:0 [ 461.849335][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 461.858654][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.870281][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 461.879864][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.891310][ T9] usb 5-1: config 0 descriptor?? [ 461.898780][ T7492] Node 0 active_anon:90980kB inactive_anon:0kB active_file:73232kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130432kB dirty:372kB writeback:0kB shmem:69460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12228kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 461.931041][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.937657][ T7492] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 461.967584][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.973834][ T7492] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.004228][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.014524][ T7492] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 462.020887][ T7492] Node 0 DMA32 free:1235352kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91004kB inactive_anon:0kB active_file:73232kB inactive_file:159628kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:49900kB local_pcp:26116kB free_cma:0kB [ 462.054379][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.060477][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 462.065200][ T7492] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.094797][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 462.099967][ T7492] Node 1 Normal free:3893060kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20192kB local_pcp:8896kB free_cma:0kB [ 462.133564][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.139726][ T7492] lowmem_reserve[]: 0 0 0 0 0 [ 462.144602][ T7492] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.157783][ T7492] Node 0 DMA32: 403*4kB (UME) 455*8kB (UME) 627*16kB (UME) 574*32kB (UME) 320*64kB (UME) 173*128kB (UM) 110*256kB (UME) 44*512kB (UM) 29*1024kB (UME) 22*2048kB (UME) 253*4096kB (UM) = 1238004kB [ 462.176999][ T7492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.242888][ T7492] Node 1 Normal: 213*4kB (U) 62*8kB (UME) 42*16kB (UME) 85*32kB (UME) 35*64kB (UME) 8*128kB (UME) 6*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3893060kB [ 462.264096][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.306485][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 462.325853][ T7492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.357493][ T7492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.370265][ T30] audit: type=1400 audit(1762430901.530:243): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7605 comm="syz.2.411" [ 462.373626][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.398527][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.406983][ T7492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.495746][ T7492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.507766][ T7492] 76010 total pagecache pages [ 462.516082][ T7492] 0 pages in swap cache [ 462.520836][ T7492] Free swap = 124996kB [ 462.525009][ T7492] Total swap = 124996kB [ 462.529519][ T7492] 2097051 pages RAM [ 462.533353][ T7492] 0 pages HighMem/MovableOnly [ 462.538120][ T7492] 424117 pages reserved [ 462.543221][ T7492] 0 pages cma reserved [ 463.005701][ T7618] team0: Device ipip0 is of different type [ 463.396039][ T7629] Cannot find add_set index 0 as target [ 463.749604][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 463.755647][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 463.874807][ T9] usb 5-1: USB disconnect, device number 21 [ 464.505626][ T7645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.420'. [ 465.242669][ T5925] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 465.399281][ T5925] usb 2-1: device descriptor read/64, error -71 [ 465.659142][ T5925] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 465.919794][ T5925] usb 2-1: device descriptor read/64, error -71 [ 466.151813][ T5925] usb usb2-port1: attempt power cycle [ 466.364413][ T7640] syz.4.419 (7640): drop_caches: 2 [ 466.502043][ T5925] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 466.539666][ T5925] usb 2-1: device descriptor read/8, error -71 [ 466.919212][ T5925] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 466.933674][ T7669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.960319][ T5925] usb 2-1: device descriptor read/8, error -71 [ 467.079185][ T5925] usb usb2-port1: unable to enumerate USB device [ 467.384026][ T7661] delete_channel: no stack [ 467.653896][ T7678] fuse: Unknown parameter 'f[Y:' [ 468.209183][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 468.309871][ T5925] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 468.361370][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.371918][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 468.383522][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 468.396015][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 468.406707][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 468.422331][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 468.431543][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 468.439790][ T9] usb 2-1: Product: syz [ 468.443964][ T9] usb 2-1: Manufacturer: syz [ 468.448567][ T9] usb 2-1: SerialNumber: syz [ 468.465520][ T9] usb 2-1: config 0 descriptor?? [ 468.475823][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 468.491078][ T5925] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 468.512193][ T5925] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 468.529823][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.540161][ T5925] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 468.567819][ T5925] usb 5-1: config 0 has no interface number 0 [ 468.584256][ T5925] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.638710][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.653397][ T5925] usb 5-1: config 0 interface 150 has no altsetting 0 [ 468.655212][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.663486][ T5925] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 468.677268][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.691026][ T5925] usb 5-1: config 0 descriptor?? [ 468.705157][ T9] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 468.713628][ T9] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 468.785517][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.435'. [ 468.898699][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.911721][ T9] radio-si470x 2-1:0.0: software version 191, hardware version 174 [ 468.923765][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.939212][ T9] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 468.963197][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.982182][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.006584][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.017855][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.030693][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.041192][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.055451][ T7685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.066675][ T7685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.113015][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 469.157124][ T5925] usb 5-1: USB disconnect, device number 22 [ 469.163555][ T9] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 469.166271][ T7692] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 469.184771][ T9] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 469.205612][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 469.241764][ T9] usb 2-1: USB disconnect, device number 33 [ 469.989302][ T5932] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 470.139150][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 470.146368][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 470.157437][ T5932] usb 2-1: can't read configurations, error -61 [ 470.179109][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 470.299455][ T5932] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 470.348977][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.358347][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.449382][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 470.456980][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 470.465194][ T5932] usb 2-1: can't read configurations, error -61 [ 470.478214][ T5932] usb usb2-port1: attempt power cycle [ 470.831021][ T5932] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 470.859779][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 470.870701][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 470.881471][ T5932] usb 2-1: can't read configurations, error -61 [ 471.019441][ T5932] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 471.059672][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 471.067243][ T5932] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 471.091287][ T5932] usb 2-1: can't read configurations, error -61 [ 471.109634][ T5932] usb usb2-port1: unable to enumerate USB device [ 471.230800][ T7717] binder: 7714:7717 ioctl c0306201 200000000180 returned -14 [ 472.033723][ T7720] loop6: detected capacity change from 0 to 7 [ 472.042139][ T5881] Dev loop6: unable to read RDB block 7 [ 472.047754][ T5881] loop6: AHDI p1 p2 p3 [ 472.052009][ T5881] loop6: partition table partially beyond EOD, truncated [ 472.059915][ T5881] loop6: p1 start 184549376 is beyond EOD, truncated [ 472.066630][ T5881] loop6: p2 start 83886080 is beyond EOD, truncated [ 472.076005][ T7720] Dev loop6: unable to read RDB block 7 [ 472.084690][ T7720] loop6: AHDI p1 p2 p3 [ 472.088959][ T7720] loop6: partition table partially beyond EOD, truncated [ 472.101525][ T7720] loop6: p1 start 184549376 is beyond EOD, truncated [ 472.108296][ T7720] loop6: p2 start 83886080 is beyond EOD, truncated [ 472.178901][ T7722] loop6: detected capacity change from 0 to 7 [ 472.188797][ T7722] Dev loop6: unable to read RDB block 7 [ 472.195535][ T7722] loop6: unable to read partition table [ 472.203596][ T7722] loop6: partition table beyond EOD, truncated [ 472.210234][ T7722] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 472.860712][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 472.879126][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 472.886740][ T9] usb 5-1: can't read configurations, error -71 [ 473.099894][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 474.570506][ T7762] loop6: detected capacity change from 0 to 7 [ 474.578875][ T5881] Dev loop6: unable to read RDB block 7 [ 474.584953][ T5881] loop6: AHDI p1 p2 p3 [ 474.589631][ T5881] loop6: partition table partially beyond EOD, truncated [ 474.597476][ T5881] loop6: p1 start 184549376 is beyond EOD, truncated [ 474.617054][ T5881] loop6: p2 start 83886080 is beyond EOD, truncated [ 474.636833][ T7762] Dev loop6: unable to read RDB block 7 [ 474.656650][ T7762] loop6: AHDI p1 p2 p3 [ 474.666802][ T7762] loop6: partition table partially beyond EOD, truncated [ 474.690060][ T7762] loop6: p1 start 184549376 is beyond EOD, truncated [ 474.709670][ T7762] loop6: p2 start 83886080 is beyond EOD, truncated [ 474.729330][ T5932] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 474.891349][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 474.898406][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.925509][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 474.935391][ T7770] loop5: detected capacity change from 0 to 7 [ 474.945856][ T7770] loop5: [POWERTEC] p1 p2 p3 [ 474.951599][ T7770] loop5: p1 size 4294967295 extends beyond EOD, truncated [ 474.969492][ T7770] loop5: p2 start 8192 is beyond EOD, truncated [ 474.975820][ T7770] loop5: p3 size 1986356271 extends beyond EOD, truncated [ 475.161272][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.179519][ T5932] usb 2-1: Product: syz [ 475.190547][ T5932] usb 2-1: Manufacturer: syz [ 475.247473][ T5932] usb 2-1: SerialNumber: syz [ 475.263594][ T7776] cgroup: fork rejected by pids controller in /syz0 [ 475.282137][ T5932] usb 2-1: config 0 descriptor?? [ 475.298963][ T5932] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 475.322964][ T5932] gspca_stv06xx: st6422 sensor detected [ 475.886532][ T5932] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 475.908105][ T5932] usb 2-1: USB disconnect, device number 38 [ 476.192729][ T5918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.236520][ T7791] binder: BINDER_SET_CONTEXT_MGR already set [ 476.255705][ T7791] binder: 7790:7791 ioctl 4018620d 2000000002c0 returned -16 [ 476.760414][ T5918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.780013][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 476.892086][ T5918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.939280][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 476.948701][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.963395][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 477.035985][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 477.088008][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.127040][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.160318][ T5918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.171541][ T9] usb 2-1: Product: syz [ 477.181582][ T9] usb 2-1: Manufacturer: syz [ 477.193251][ T9] usb 2-1: SerialNumber: syz [ 477.223250][ T7795] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.557622][ T5918] bridge_slave_1: left allmulticast mode [ 477.564082][ T5918] bridge_slave_1: left promiscuous mode [ 477.572304][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.609860][ T5918] bridge_slave_0: left allmulticast mode [ 477.615695][ T5918] bridge_slave_0: left promiscuous mode [ 477.626177][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.657673][ T7800] loop6: detected capacity change from 0 to 7 [ 477.692071][ T7800] Dev loop6: unable to read RDB block 7 [ 477.712412][ T7800] loop6: AHDI p1 p2 p3 [ 477.760202][ T7800] loop6: partition table partially beyond EOD, truncated [ 477.778155][ T7800] loop6: p1 start 184549376 is beyond EOD, truncated [ 477.798448][ T7800] loop6: p2 start 83886080 is beyond EOD, truncated [ 477.819716][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.839846][ T9] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 477.845940][ T9] cdc_ncm 2-1:1.0: bind() failure [ 477.860925][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.861118][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.878012][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.915189][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 477.975095][ T9] cdc_ncm 2-1:1.1: bind() failure [ 478.020363][ T9] usb 2-1: USB disconnect, device number 39 [ 478.491402][ T5918] bond1 (unregistering): (slave gretap1): Releasing active interface [ 478.502053][ T5918] gretap1 (unregistering): left allmulticast mode [ 478.564823][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.575630][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.584764][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.596726][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.604835][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.637072][ T5918] dvmrp8 (unregistering): left allmulticast mode [ 478.847017][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.877226][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.952860][ T7823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.045130][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.065367][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.091157][ T5918] bond0 (unregistering): Released all slaves [ 479.220851][ T5918] bond1 (unregistering): Released all slaves [ 479.263484][ T7827] syzkaller0: entered promiscuous mode [ 479.282409][ T7827] syzkaller0: entered allmulticast mode [ 479.638810][ T5918] hsr_slave_0: left promiscuous mode [ 479.649275][ T5918] hsr_slave_1: left promiscuous mode [ 479.655496][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.665703][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.683408][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.691258][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.726157][ T5918] veth1_macvtap: left promiscuous mode [ 479.732605][ T5918] veth0_macvtap: left promiscuous mode [ 479.738475][ T5918] veth1_vlan: left promiscuous mode [ 479.744673][ T5918] veth0_vlan: left promiscuous mode [ 480.140428][ T30] audit: type=1326 audit(1762430919.290:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.206521][ T30] audit: type=1326 audit(1762430919.290:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.274386][ T30] audit: type=1326 audit(1762430919.300:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.299218][ T5925] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 480.349454][ T30] audit: type=1326 audit(1762430919.300:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.371637][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.411435][ T30] audit: type=1326 audit(1762430919.300:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.459093][ T30] audit: type=1326 audit(1762430919.320:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.495818][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 480.505197][ T5925] usb 5-1: not running at top speed; connect to a high speed hub [ 480.515528][ T5925] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 480.531034][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.541614][ T5925] usb 5-1: config 1 has no interface number 0 [ 480.547870][ T5925] usb 5-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.561228][ T30] audit: type=1326 audit(1762430919.320:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.561273][ T30] audit: type=1326 audit(1762430919.320:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.561349][ T30] audit: type=1326 audit(1762430919.340:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.605944][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.656398][ T5875] Bluetooth: hci1: command tx timeout [ 480.666375][ T5925] usb 5-1: config 1 interface 138 has no altsetting 0 [ 480.718312][ T30] audit: type=1326 audit(1762430919.340:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7841 comm="syz.1.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 480.740801][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.758837][ T5925] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 480.774300][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.804566][ T5925] usb 5-1: Product: syz [ 480.825569][ T5925] usb 5-1: Manufacturer: syz [ 480.841889][ T5925] usb 5-1: SerialNumber: syz [ 481.092761][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 481.171817][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 481.632660][ T5925] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.754936][ T5925] usb 5-1: USB disconnect, device number 25 [ 481.943718][ T7865] loop6: detected capacity change from 0 to 7 [ 481.966680][ T7865] Dev loop6: unable to read RDB block 7 [ 481.992241][ T7865] loop6: AHDI p1 p2 p3 [ 481.997083][ T7865] loop6: partition table partially beyond EOD, truncated [ 482.012780][ T7865] loop6: p1 start 184549376 is beyond EOD, truncated [ 482.035091][ T7865] loop6: p2 start 83886080 is beyond EOD, truncated [ 482.600928][ T5932] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 482.719465][ T5875] Bluetooth: hci1: command tx timeout [ 482.761432][ T7820] chnl_net:caif_netlink_parms(): no params data found [ 482.819242][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 482.839645][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.946170][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.079415][ T5932] usb 5-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 483.160506][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.383190][ T5932] usb 5-1: config 0 descriptor?? [ 483.409797][ T7892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.494961][ T7902] IPVS: Scheduler module ip_vs_ not found [ 483.698904][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.487'. [ 483.961017][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.970910][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.103038][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.109803][ T5932] topre 0003:0853:0146.0005: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.4-1/input0 [ 484.129850][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.163062][ T7820] bridge_slave_0: entered allmulticast mode [ 484.272343][ T7820] bridge_slave_0: entered promiscuous mode [ 484.333107][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.409165][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.555361][ T7820] bridge_slave_1: entered allmulticast mode [ 484.562882][ T7820] bridge_slave_1: entered promiscuous mode [ 484.806653][ T5875] Bluetooth: hci1: command tx timeout [ 485.327576][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.388004][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.424359][ T9] usb 5-1: USB disconnect, device number 26 [ 485.600526][ T7820] team0: Port device team_slave_0 added [ 485.620064][ T7820] team0: Port device team_slave_1 added [ 485.881197][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.932087][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.979984][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.009862][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.090523][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.143368][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.384047][ T7820] hsr_slave_0: entered promiscuous mode [ 486.402399][ T7820] hsr_slave_1: entered promiscuous mode [ 486.420009][ T7820] debugfs: 'hsr0' already exists in 'hsr' [ 486.431435][ T7820] Cannot create hsr debugfs directory [ 486.511410][ T7964] loop5: detected capacity change from 0 to 7 [ 486.539305][ T7964] loop5: [POWERTEC] p1 p2 p3 [ 486.544250][ T7964] loop5: p1 size 4294967295 extends beyond EOD, truncated [ 486.581913][ T7964] loop5: p2 start 8192 is beyond EOD, truncated [ 486.619083][ T7964] loop5: p3 size 1986356271 extends beyond EOD, truncated [ 486.879649][ T5875] Bluetooth: hci1: command tx timeout [ 487.056383][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.498'. [ 487.130695][ T7979] capability: warning: `syz.2.498' uses deprecated v2 capabilities in a way that may be insecure [ 487.896081][ T7990] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 487.927536][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 487.927569][ T30] audit: type=1400 audit(1762430927.080:330): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7982 comm="syz.3.499" [ 487.969381][ T7990] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 488.014282][ T7990] team0: Port device netdevsim0 added [ 488.020781][ T7987] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 488.308147][ T7987] team0: Port device netdevsim0 removed [ 488.348847][ T7987] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 488.400180][ T5932] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 488.593779][ T5932] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 488.602926][ T5932] usb 2-1: config 7 has no interface number 0 [ 488.614484][ T5932] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 488.653469][ T5932] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 488.678322][ T5932] usb 2-1: config 7 interface 252 has no altsetting 0 [ 488.713178][ T5932] usb 2-1: string descriptor 0 read error: -22 [ 488.721717][ T5932] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 488.753048][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.788073][ T5932] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 488.989638][ T5932] usb 2-1: USB disconnect, device number 40 [ 489.138690][ T7820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 489.208965][ T7820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 489.253417][ T7820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 489.371759][ T7820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 489.581597][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 490.184091][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.217409][ T8037] binder_alloc: 8034: pid 8034 spamming oneway? 1 buffers allocated for a total size of 4096 [ 490.250634][ T7820] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.269265][ T8037] binder_alloc: 8034: pid 8034 spamming oneway? 2 buffers allocated for a total size of 5120 [ 490.302768][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.310156][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.333391][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.340690][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.226909][ T8067] loop5: detected capacity change from 0 to 7 [ 491.239427][ T8067] loop5: [POWERTEC] p1 p2 p3 [ 491.244757][ T8067] loop5: p1 size 4294967295 extends beyond EOD, truncated [ 491.267508][ T8067] loop5: p2 start 8192 is beyond EOD, truncated [ 491.276733][ T8067] loop5: p3 size 1986356271 extends beyond EOD, truncated [ 491.294948][ T24] dvb-usb: did not find the firmware file 'dvb-usb-opera-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 491.329246][ T24] opera1 3-1:166.23: probe with driver opera1 failed with error -22 [ 491.488298][ T24] usb 3-1: USB disconnect, device number 17 [ 492.329245][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 492.486701][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.500374][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.532871][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.566853][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.616545][ T8072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 492.642880][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 492.858222][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.359437][ T5925] usb 5-1: USB disconnect, device number 27 [ 493.396307][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.507873][ T8083] loop5: detected capacity change from 0 to 7 [ 493.522101][ T8083] loop5: [POWERTEC] p1 p2 p3 [ 493.527740][ T8083] loop5: p1 size 4294967295 extends beyond EOD, truncated [ 493.542119][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.566436][ T7820] veth0_vlan: entered promiscuous mode [ 493.644830][ T7820] veth1_vlan: entered promiscuous mode [ 493.689347][ T8086] syz.3.514 (8086): /proc/8084/oom_adj is deprecated, please use /proc/8084/oom_score_adj instead. [ 493.708718][ T7820] veth0_macvtap: entered promiscuous mode [ 493.733225][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.736432][ T7820] veth1_macvtap: entered promiscuous mode [ 493.792853][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.810776][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.833377][ T8083] loop5: p2 start 8192 is beyond EOD, truncated [ 493.843516][ T8083] loop5: p3 size 1986356271 extends beyond EOD, truncated [ 493.854163][ T7820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.010061][ T5918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.042585][ T5918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.073531][ T5918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.104794][ T5918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.354392][ T8095] pim6reg: entered allmulticast mode [ 494.829995][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.878410][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.185528][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.199612][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.320798][ T5925] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 496.509178][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 496.517465][ T5925] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 496.536789][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.567852][ T5925] usb 5-1: Product: syz [ 496.581081][ T5925] usb 5-1: Manufacturer: syz [ 496.603475][ T5925] usb 5-1: SerialNumber: syz [ 496.630856][ T5925] usb 5-1: config 0 descriptor?? [ 496.650046][ T5925] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 497.749119][ T30] audit: type=1326 audit(1762430936.900:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 497.840153][ T30] audit: type=1326 audit(1762430936.970:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 497.862299][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.954895][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.524'. [ 498.010061][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.020505][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.076204][ T30] audit: type=1326 audit(1762430936.970:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.098462][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.107757][ T30] audit: type=1326 audit(1762430936.970:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.130049][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.162021][ T30] audit: type=1326 audit(1762430936.990:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.789072][ T5925] gspca_sonixj: i2c_w8 err -110 [ 498.811017][ T30] audit: type=1326 audit(1762430936.990:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.846077][ T30] audit: type=1326 audit(1762430936.990:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.868891][ T30] audit: type=1326 audit(1762430936.990:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.909155][ T5925] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 498.940366][ T30] audit: type=1326 audit(1762430936.990:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 498.962443][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.980113][ T30] audit: type=1326 audit(1762430937.050:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x7ffc0000 [ 499.949349][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 500.122084][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 500.133870][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.144020][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.156731][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.168515][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.185473][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.195520][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.413720][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 500.420771][ T24] usbtmc 3-1:16.0: can't read capabilities [ 500.969256][ T5955] usb 5-1: USB disconnect, device number 28 [ 501.041085][ T5925] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 501.127220][ T9] usb 3-1: USB disconnect, device number 18 [ 501.246234][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.258890][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.347946][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.383257][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.392763][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.401014][ T5955] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 501.427485][ T5925] usb 2-1: config 0 descriptor?? [ 501.531687][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.538736][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.585262][ T5955] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 501.602356][ T5955] usb 5-1: config 1 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 32, setting to 8 [ 501.625189][ T5955] usb 5-1: config 1 interface 0 has no altsetting 0 [ 501.720093][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 501.726172][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 501.782056][ T5925] usb 2-1: USB disconnect, device number 41 [ 501.809202][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 501.947588][ T8232] binder: 8230:8232 ioctl c0306201 200000000080 returned -14 [ 502.058642][ T8238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.539'. [ 502.069465][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 502.076445][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 502.088856][ T9] usb 3-1: config 0 has no interface number 0 [ 502.095167][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 502.106351][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 502.121422][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.142536][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 502.165994][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 502.192804][ T5925] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 502.209129][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.248474][ T9] usb 3-1: config 0 descriptor?? [ 502.350449][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 502.359509][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 502.372294][ T5925] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 502.407773][ T5925] usb 2-1: config 0 has no interface number 0 [ 502.452187][ T5925] usb 2-1: New USB device found, idVendor=1d50, idProduct=413b, bcdDevice= 0.35 [ 502.491027][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.522835][ T5925] usb 2-1: Product: syz [ 502.529967][ T5925] usb 2-1: Manufacturer: syz [ 502.535337][ T5925] usb 2-1: SerialNumber: syz [ 502.584296][ T5925] usb 2-1: config 0 descriptor?? [ 502.637631][ T5956] usb 3-1: USB disconnect, device number 19 [ 502.678895][ T5956] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 502.833011][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 503.889410][ T5932] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 504.043355][ T5955] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.40 [ 504.052980][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.063118][ T5932] usb 3-1: no configurations [ 504.073209][ T5955] usb 5-1: Product: Ъ [ 504.087779][ T5932] usb 3-1: can't read configurations, error -22 [ 504.105035][ T5955] usb 5-1: Manufacturer: ష⤇⯐랳㎐뜯㗼ᄇꖝ̊찇멷벱⫱嗀ܔ钖샕덥쑞ᚌ켮븆αⰏ꯮绳⊭픟孮࿓贖㶁樮ሜꏓ㎪凩ㅤじ렰㸢﹧ㄛ㧀♧ꝇ郲춑ﭱ懢烑ࢵ厕㡕⺴ [ 504.236013][ T5955] usb 5-1: can't set config #1, error -71 [ 504.257996][ T5955] usb 5-1: USB disconnect, device number 29 [ 504.289209][ T5932] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 504.465244][ T5932] usb 3-1: no configurations [ 504.527353][ T5932] usb 3-1: can't read configurations, error -22 [ 504.585475][ T5932] usb usb3-port1: attempt power cycle [ 504.787166][ T5955] usb 2-1: USB disconnect, device number 42 [ 504.846918][ T8278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.547'. [ 504.929147][ T5932] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 504.951466][ T5932] usb 3-1: no configurations [ 504.959664][ T5932] usb 3-1: can't read configurations, error -22 [ 505.112253][ T5932] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 505.152732][ T5932] usb 3-1: no configurations [ 505.157369][ T5932] usb 3-1: can't read configurations, error -22 [ 505.173951][ T5932] usb usb3-port1: unable to enumerate USB device [ 505.183642][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 505.183743][ T30] audit: type=1326 audit(1762430944.340:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a1d8f6c9 code=0x7ffc0000 [ 505.215760][ T30] audit: type=1326 audit(1762430944.340:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a1d8f6c9 code=0x7ffc0000 [ 506.239201][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 506.597204][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 506.725117][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 506.765625][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.833490][ T9] usb 2-1: Product: syz [ 506.857987][ T9] usb 2-1: Manufacturer: syz [ 506.885658][ T9] usb 2-1: SerialNumber: syz [ 506.921406][ T9] usb 2-1: config 0 descriptor?? [ 507.059369][ T5956] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 507.209444][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 507.216667][ T5956] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 507.226080][ T5956] usb 3-1: config 0 has no interface number 0 [ 507.232741][ T5956] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 507.253542][ T5956] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 507.283729][ T5956] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 507.293598][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.330745][ T5956] usb 3-1: Product: syz [ 507.369609][ T5956] usb 3-1: Manufacturer: syz [ 507.399316][ T5956] usb 3-1: SerialNumber: syz [ 507.451828][ T5956] usb 3-1: config 0 descriptor?? [ 507.487276][ T8324] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 507.717518][ T8324] syzkaller1: entered promiscuous mode [ 507.723895][ T8324] syzkaller1: entered allmulticast mode [ 507.812038][ T8329] fuse: Unknown parameter '1fd' [ 507.937968][ T5956] usb 3-1: USB disconnect, device number 24 [ 508.319459][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 508.572051][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 508.629112][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.737696][ T9] usb 5-1: Product: syz [ 508.750830][ T9] usb 5-1: Manufacturer: syz [ 508.769695][ T9] usb 5-1: SerialNumber: syz [ 508.794070][ T9] usb 5-1: config 0 descriptor?? [ 509.007498][ T9] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 509.365900][ T5955] usb 2-1: USB disconnect, device number 43 [ 509.410631][ T9] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 509.574743][ T8359] loop6: detected capacity change from 0 to 7 [ 509.666342][ T8359] Dev loop6: unable to read RDB block 7 [ 509.708890][ T8359] loop6: unable to read partition table [ 509.755114][ T8359] loop6: partition table beyond EOD, truncated [ 509.806250][ T8359] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 509.959065][ T5955] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 510.132705][ T5955] usb 2-1: config 4 has an invalid interface number: 39 but max is 1 [ 510.141010][ T5955] usb 2-1: config 4 has an invalid interface number: 49 but max is 1 [ 510.164647][ T5955] usb 2-1: config 4 has no interface number 0 [ 510.356965][ T5955] usb 2-1: config 4 has no interface number 1 [ 510.392272][ T5955] usb 2-1: config 4 interface 39 has no altsetting 0 [ 510.400313][ T5955] usb 2-1: config 4 interface 49 has no altsetting 0 [ 510.414244][ T5955] usb 2-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 510.435279][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.452802][ T5955] usb 2-1: Product: syz [ 510.457222][ T5955] usb 2-1: Manufacturer: syz [ 510.461963][ T5955] usb 2-1: SerialNumber: syz [ 511.118010][ T5932] usb 5-1: USB disconnect, device number 30 [ 512.600054][ T5932] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 512.777932][ T5955] usb 2-1: USB disconnect, device number 44 [ 512.889097][ T5932] usb 3-1: device descriptor read/64, error -71 [ 513.180700][ T5932] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 513.419283][ T5932] usb 3-1: device descriptor read/64, error -71 [ 513.518217][ T8395] pim6reg: entered allmulticast mode [ 513.565699][ T5932] usb usb3-port1: attempt power cycle [ 513.631784][ T8381] pim6reg: left allmulticast mode [ 513.635422][ T8405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.657493][ T8405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.673998][ T8405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.702067][ T8405] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 513.759843][ T8405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.843786][ T8405] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 513.919583][ T5932] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 513.938605][ T8405] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 513.954403][ T5932] usb 3-1: device descriptor read/8, error -71 [ 514.210138][ T5932] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 514.313715][ T5932] usb 3-1: device descriptor read/8, error -71 [ 514.449951][ T5932] usb usb3-port1: unable to enumerate USB device [ 514.505874][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.590'. [ 514.689106][ T7377] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 514.889549][ T7377] usb 2-1: Using ep0 maxpacket: 16 [ 514.910189][ T7377] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 514.918577][ T7377] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 514.945499][ T7377] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 514.974250][ T7377] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 515.002924][ T7377] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 515.026716][ T7377] usb 2-1: config 0 has no interface number 0 [ 515.042935][ T7377] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 515.081541][ T7377] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 515.115571][ T7377] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 515.155170][ T7377] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.195095][ T7377] usb 2-1: config 0 interface 125 has no altsetting 0 [ 515.217440][ T7377] usb 2-1: config 0 interface 125 has no altsetting 2 [ 515.250269][ T7377] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 515.259884][ T7377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.269448][ T7377] usb 2-1: Product: syz [ 515.273642][ T7377] usb 2-1: Manufacturer: syz [ 515.302981][ T7377] usb 2-1: SerialNumber: syz [ 515.334408][ T8435] loop6: detected capacity change from 0 to 7 [ 515.360596][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.361201][ T7377] usb 2-1: config 0 descriptor?? [ 515.379403][ T8435] Dev loop6: unable to read RDB block 7 [ 515.387200][ T7377] usb 2-1: selecting invalid altsetting 2 [ 515.410649][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.420644][ T8435] loop6: unable to read partition table [ 515.426509][ T8435] loop6: partition table beyond EOD, truncated [ 515.459176][ T8435] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 515.582517][ T8437] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 515.623955][ T8438] netlink: 'syz.4.596': attribute type 8 has an invalid length. [ 515.639086][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 515.657696][ T8438] bond0: entered promiscuous mode [ 515.682774][ T8438] bond_slave_0: entered promiscuous mode [ 515.692395][ T8438] bond_slave_1: entered promiscuous mode [ 515.699365][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 515.705457][ T5875] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.709092][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.728061][ T8438] bond0: left promiscuous mode [ 515.747929][ T8438] bond_slave_0: left promiscuous mode [ 515.761744][ T8438] bond_slave_1: left promiscuous mode [ 515.768178][ T5873] Bluetooth: hci4: command 0x0c1a tx timeout [ 515.839307][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 516.019280][ T30] audit: type=1326 audit(1762430955.170:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.4.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x0 [ 516.094748][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 516.122736][ T8452] syz.4.599 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 516.301512][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 516.331311][ T8448] input: syz0 as /devices/virtual/input/input17 [ 516.819140][ T7377] get_1284_register timeout [ 516.823818][ T7377] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 516.823894][ C1] usb 2-1: async_complete: urb error -104 [ 516.837595][ C1] usb 2-1: async_complete: urb error -104 [ 516.843471][ C1] usb 2-1: async_complete: urb error -104 [ 517.427603][ T24] usb 2-1: USB disconnect, device number 45 [ 517.527617][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.582105][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.927216][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.973885][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 518.341231][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 518.371148][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 518.399045][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.458876][ T24] usb 5-1: config 0 descriptor?? [ 518.541900][ T24] pwc: Logitech QuickCam Zoom USB webcam detected. [ 518.548454][ T24] pwc: Warning: more than 1 configuration available. [ 519.432575][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 519.999114][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.349755][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 520.407743][ T8507] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 520.511684][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 520.535329][ T24] pwc: Failed to set LED on/off time (-71) [ 520.550262][ T24] pwc: send_video_command error -71 [ 520.563570][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 520.587923][ T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 520.626287][ T24] usb 5-1: USB disconnect, device number 31 [ 523.167723][ T8567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.401580][ T8567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.499110][ T5955] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 523.948742][ T5955] usb 3-1: device descriptor read/64, error -71 [ 524.140504][ T8573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.630'. [ 524.199129][ T5955] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 524.360437][ T5955] usb 3-1: device descriptor read/64, error -71 [ 524.489126][ T5925] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 524.497033][ T5955] usb usb3-port1: attempt power cycle [ 524.669062][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 524.698732][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 524.732650][ T5925] usb 5-1: config 4 interface 0 has no altsetting 0 [ 524.784893][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 524.808870][ T5925] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 524.841803][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.851133][ T5955] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 524.900393][ T5955] usb 3-1: device descriptor read/8, error -71 [ 524.919765][ T5925] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 524.958216][ T5925] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 525.018608][ T5925] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 525.189119][ T5925] usb 5-1: media controller created [ 525.230645][ T5955] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 525.305655][ T5955] usb 3-1: device descriptor read/8, error -71 [ 525.319377][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.392390][ T5925] zl10353_read_register: readreg error (reg=127, ret==0) [ 525.405192][ T8597] 8021q: VLANs not supported on ipvlan1 [ 525.422492][ T8596] 8021q: VLANs not supported on ipvlan1 [ 525.439465][ T5955] usb usb3-port1: unable to enumerate USB device [ 525.493667][ T5925] usb 5-1: USB disconnect, device number 32 [ 525.921454][ T8611] Cannot find del_set index 0 as target [ 528.808910][ T982] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 528.959350][ T5932] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 528.991762][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 529.009439][ T982] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 529.039074][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.069334][ T8654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.653'. [ 529.078609][ T8653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.653'. [ 529.109298][ T982] usb 2-1: config 0 descriptor?? [ 529.110009][ T8638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.334469][ T5932] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 529.342222][ T8659] syz_tun: entered allmulticast mode [ 529.410850][ T5932] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.484385][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.537637][ T982] bigben 0003:146B:0902.0006: unexpected rdesc, please submit for review [ 529.563447][ T982] bigben 0003:146B:0902.0006: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 529.642455][ T5932] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 529.658042][ T982] bigben 0003:146B:0902.0006: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 529.694161][ T5932] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 529.714461][ T982] bigben 0003:146B:0902.0006: no output report found [ 529.850166][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.862701][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.881852][ T8649] fuse: Bad value for 'user_id' [ 529.886814][ T8649] fuse: Bad value for 'user_id' [ 530.368217][ T8675] loop6: detected capacity change from 0 to 7 [ 530.390338][ T8675] Dev loop6: unable to read RDB block 7 [ 530.396277][ T8675] loop6: unable to read partition table [ 530.403706][ T8675] loop6: partition table beyond EOD, truncated [ 530.427365][ T8675] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 530.749404][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 530.909152][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 530.919551][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 530.928176][ T24] usb 3-1: config 0 has no interface number 0 [ 530.943593][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 530.982336][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 531.032552][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.072659][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.115112][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 531.149587][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.183240][ T24] usb 3-1: config 0 descriptor?? [ 531.214064][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 531.347567][ T24] usb 2-1: USB disconnect, device number 46 [ 531.418939][ T5956] usb 3-1: USB disconnect, device number 33 [ 531.430295][ T8679] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -19 [ 531.447778][ T5956] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 532.503474][ T982] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 532.522201][ T5925] usb 5-1: USB disconnect, device number 33 [ 532.663602][ T982] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 532.673401][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.692677][ T982] usb 3-1: config 0 has no interface number 0 [ 532.700753][ T982] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 532.711424][ T982] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.728009][ T8700] xt_TCPMSS: Only works on TCP SYN packets [ 532.733804][ T982] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 532.744922][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.759856][ T982] usb 3-1: Product: syz [ 532.769116][ T982] usb 3-1: Manufacturer: syz [ 532.773893][ T982] usb 3-1: SerialNumber: syz [ 532.850001][ T982] usb 3-1: config 0 descriptor?? [ 533.229422][ T5956] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 533.284048][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.284261][ T982] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 533.293657][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.346803][ T982] usb 3-1: USB disconnect, device number 34 [ 533.407620][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 533.431532][ T5956] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 533.457068][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.481917][ T5956] usb 5-1: config 0 descriptor?? [ 533.494703][ T8703] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 533.714637][ T5956] cherry 0003:046A:0027.0007: item fetching failed at offset 2/5 [ 533.724308][ T5956] cherry 0003:046A:0027.0007: probe with driver cherry failed with error -22 [ 533.809166][ T982] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 533.942552][ T5956] usb 5-1: USB disconnect, device number 34 [ 533.969145][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 533.991804][ T982] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 534.000055][ T982] usb 2-1: config 0 has no interface number 0 [ 534.018370][ T982] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 534.036710][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.073543][ T982] usb 2-1: Product: syz [ 534.077749][ T982] usb 2-1: Manufacturer: syz [ 534.099327][ T982] usb 2-1: SerialNumber: syz [ 534.120243][ T982] usb 2-1: config 0 descriptor?? [ 534.125087][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.148943][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.151987][ T982] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 534.350468][ T982] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 534.362689][ T982] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 534.379210][ T5956] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 534.567899][ T5956] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 534.603558][ T5956] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 534.613943][ T5956] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 534.624161][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.636046][ T8719] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 534.664284][ T5956] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 534.763034][ T30] audit: type=1326 audit(1762430973.920:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8713 comm="syz.1.672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f805bf8f6c9 code=0x0 [ 535.232547][ T8742] loop6: detected capacity change from 0 to 7 [ 535.246948][ T8742] Dev loop6: unable to read RDB block 7 [ 535.257544][ T8742] loop6: AHDI p1 p2 p3 [ 535.262810][ T8742] loop6: partition table partially beyond EOD, truncated [ 535.272188][ T8742] loop6: p1 start 184549376 is beyond EOD, truncated [ 535.279224][ T8742] loop6: p2 start 83886080 is beyond EOD, truncated [ 535.511883][ T8744] syzkaller1: entered promiscuous mode [ 535.568009][ T8744] syzkaller1: entered allmulticast mode [ 536.138045][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.149701][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.203489][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.215969][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.469262][ T5925] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 536.515616][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 536.517287][ T5932] usb 2-1: USB disconnect, device number 47 [ 536.537149][ T5932] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 536.563829][ T5932] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 536.586794][ T5932] quatech2 2-1:0.51: device disconnected [ 536.620617][ T5925] usb 5-1: device descriptor read/64, error -71 [ 536.716985][ T30] audit: type=1326 audit(1762430975.870:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8760 comm="syz.1.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f805bf8f6c9 code=0x0 [ 536.842554][ T9] usb 3-1: USB disconnect, device number 35 [ 536.869065][ T5925] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 536.946907][ T8768] netlink: 14 bytes leftover after parsing attributes in process `syz.3.689'. [ 537.009850][ T5932] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 537.049104][ T5925] usb 5-1: device descriptor read/64, error -71 [ 537.149767][ T8768] bond0 (unregistering): (slave 70): Releasing backup interface [ 537.160064][ T5925] usb usb5-port1: attempt power cycle [ 537.168456][ T8768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.211603][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 537.218603][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.237374][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 537.323301][ T5932] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 537.335522][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.344283][ T8768] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 537.353151][ T5932] usb 2-1: SerialNumber: syz [ 537.364696][ T5932] usb 2-1: config 0 descriptor?? [ 537.374978][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.382292][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.403905][ T8768] bond0 (unregistering): Released all slaves [ 537.410721][ T5932] hso 2-1:0.0: Can't find BULK IN endpoint [ 537.455842][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 537.499075][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 537.520311][ T5925] usb 5-1: device descriptor read/8, error -71 [ 537.789097][ T5925] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 537.839626][ T5925] usb 5-1: device descriptor read/8, error -71 [ 537.925193][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 537.970352][ T5925] usb usb5-port1: unable to enumerate USB device [ 538.634620][ T24] usb 3-1: config 160 has an invalid descriptor of length 139, skipping remainder of the config [ 538.665337][ T24] usb 3-1: config 160 has 0 interfaces, different from the descriptor's value: 1 [ 538.692635][ T24] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 538.702109][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.710589][ T24] usb 3-1: Product: syz [ 538.715024][ T24] usb 3-1: Manufacturer: syz [ 538.723105][ T24] usb 3-1: SerialNumber: syz [ 539.453392][ T8790] FAULT_INJECTION: forcing a failure. [ 539.453392][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.519342][ T8790] CPU: 0 UID: 0 PID: 8790 Comm: syz.4.694 Not tainted syzkaller #0 PREEMPT(full) [ 539.519367][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.519379][ T8790] Call Trace: [ 539.519386][ T8790] [ 539.519393][ T8790] dump_stack_lvl+0x189/0x250 [ 539.519419][ T8790] ? __pfx____ratelimit+0x10/0x10 [ 539.519440][ T8790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.519461][ T8790] ? __pfx__printk+0x10/0x10 [ 539.519488][ T8790] should_fail_ex+0x414/0x560 [ 539.519514][ T8790] _copy_to_user+0x31/0xb0 [ 539.519536][ T8790] simple_read_from_buffer+0xe1/0x170 [ 539.519564][ T8790] proc_fail_nth_read+0x1b3/0x220 [ 539.519587][ T8790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.519610][ T8790] ? rw_verify_area+0x2a6/0x4d0 [ 539.519630][ T8790] ? __lock_acquire+0xab9/0xd20 [ 539.519645][ T8790] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.519667][ T8790] vfs_read+0x200/0xa30 [ 539.519688][ T8790] ? fdget_pos+0x247/0x320 [ 539.519709][ T8790] ? __pfx___mutex_lock+0x10/0x10 [ 539.519732][ T8790] ? __pfx_vfs_read+0x10/0x10 [ 539.519755][ T8790] ? __fget_files+0x2a/0x420 [ 539.519775][ T8790] ? __fget_files+0x3a0/0x420 [ 539.519790][ T8790] ? __fget_files+0x2a/0x420 [ 539.519815][ T8790] ksys_read+0x145/0x250 [ 539.519837][ T8790] ? __pfx_ksys_read+0x10/0x10 [ 539.519862][ T8790] ? do_syscall_64+0xbe/0xfa0 [ 539.519887][ T8790] do_syscall_64+0xfa/0xfa0 [ 539.519907][ T8790] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.519928][ T8790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.519945][ T8790] ? clear_bhb_loop+0x60/0xb0 [ 539.519966][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.519982][ T8790] RIP: 0033:0x7fd910f8e0dc [ 539.519999][ T8790] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 539.520013][ T8790] RSP: 002b:00007fd911dbd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.520033][ T8790] RAX: ffffffffffffffda RBX: 00007fd9111e5fa0 RCX: 00007fd910f8e0dc [ 539.520046][ T8790] RDX: 000000000000000f RSI: 00007fd911dbd0a0 RDI: 0000000000000005 [ 539.520058][ T8790] RBP: 00007fd911dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 539.520069][ T8790] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 539.520079][ T8790] R13: 00007fd9111e6038 R14: 00007fd9111e5fa0 R15: 00007fd91130fa28 [ 539.520109][ T8790] [ 539.929669][ T7377] usb 2-1: USB disconnect, device number 48 [ 540.167480][ T24] usb 3-1: USB disconnect, device number 36 [ 540.495462][ T30] audit: type=1326 audit(1762430979.580:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 540.646500][ T30] audit: type=1326 audit(1762430979.580:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 540.708590][ T30] audit: type=1326 audit(1762430979.580:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 540.775781][ T30] audit: type=1326 audit(1762430979.580:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.080448][ T7377] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 541.189423][ T30] audit: type=1326 audit(1762430979.580:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.237031][ T30] audit: type=1326 audit(1762430979.580:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.303970][ T30] audit: type=1326 audit(1762430979.580:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.334706][ T7377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.336887][ T30] audit: type=1326 audit(1762430979.580:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.370514][ T30] audit: type=1326 audit(1762430979.580:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.379034][ T7377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.393198][ T30] audit: type=1326 audit(1762430979.580:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.4.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 541.450027][ T7377] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 541.533136][ T7377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.579947][ T7377] usb 2-1: config 0 descriptor?? [ 541.658360][ T8819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.859534][ T7377] usbhid 2-1:0.0: can't add hid device: -71 [ 541.892835][ T7377] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 541.937598][ T7377] usb 2-1: USB disconnect, device number 49 [ 542.399119][ T7377] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 542.581977][ T7377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 542.590583][ T7377] usb 2-1: not running at top speed; connect to a high speed hub [ 542.599425][ T7377] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.609740][ T7377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.621833][ T7377] usb 2-1: string descriptor 0 read error: -22 [ 542.628084][ T7377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.637956][ T7377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.711434][ T7377] usb 2-1: 0:2 : does not exist [ 543.587930][ T7377] usb 2-1: 5:0: bogus dB values (-9931/-9623), disabling dB reporting [ 543.623211][ T7377] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 543.634058][ T7377] usb 2-1: Warning! Unlikely big volume range (=790), cval->res is probably wrong. [ 543.649363][ T7377] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = -25425/-24635/1 [ 543.696527][ T7377] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 543.733318][ T7377] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 543.814257][ T7377] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 543.838400][ T7377] usb 2-1: USB disconnect, device number 50 [ 544.989339][ T7377] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 545.127960][ T8872] loop6: detected capacity change from 0 to 7 [ 545.151401][ T8872] Dev loop6: unable to read RDB block 7 [ 545.166209][ T8872] loop6: AHDI p1 p2 p3 [ 545.191045][ T7377] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 545.226917][ T7377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.231238][ T8872] loop6: partition table partially beyond EOD, truncated [ 545.244238][ T8872] loop6: p1 start 184549376 is beyond EOD, truncated [ 545.251795][ T8872] loop6: p2 start 83886080 is beyond EOD, truncated [ 545.289868][ T7377] usb 3-1: config 0 descriptor?? [ 545.318288][ T8874] loop6: detected capacity change from 0 to 7 [ 545.329088][ T8874] Dev loop6: unable to read RDB block 7 [ 545.334847][ T8874] loop6: AHDI p1 p2 p3 p4 [ 545.359783][ T8874] loop6: partition table partially beyond EOD, truncated [ 545.380910][ T8874] loop6: p1 start 3099783474 is beyond EOD, truncated [ 545.398914][ T8874] loop6: p2 start 668120390 is beyond EOD, truncated [ 545.406974][ T8874] loop6: p3 start 1886353253 is beyond EOD, truncated [ 545.526191][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.569484][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.668459][ T7377] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 545.703833][ T6026] udevd[6026]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 545.733399][ T7377] [drm:udl_init] *ERROR* Selecting channel failed [ 545.804285][ T7377] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 545.820744][ T7377] [drm] Initialized udl on minor 2 [ 545.879328][ T5956] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 546.112431][ T7377] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 546.268937][ T7377] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 546.275622][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 546.289729][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 546.315796][ T5956] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.354293][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 546.376328][ T5956] usb 2-1: config 0 has no interface number 0 [ 546.382801][ T7377] usb 3-1: USB disconnect, device number 37 [ 546.424206][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 546.433506][ T5956] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.471954][ T5956] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.617180][ T5956] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.631398][ T5956] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.657726][ T5956] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.667252][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.708765][ T5956] usb 2-1: config 0 descriptor?? [ 546.745468][ T5956] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 546.912056][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 546.928853][ T982] usb 2-1: USB disconnect, device number 51 [ 546.944080][ T982] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 546.995687][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.024799][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.047024][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.067263][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.083630][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.092152][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.100097][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.107640][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.116027][ T5956] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 547.133664][ T5956] hid-generic 009C:0008:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 547.264840][ T8911] fido_id[8911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 548.294261][ T8938] macvlan2: entered promiscuous mode [ 548.299770][ T8938] vlan0: entered promiscuous mode [ 548.479907][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 548.479927][ T30] audit: type=1400 audit(1762430987.580:435): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8939 comm="syz.1.737" [ 549.497325][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.514758][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.929112][ T5956] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 550.089808][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 550.101887][ T5956] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 550.111149][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.120555][ T5956] usb 5-1: Product: syz [ 550.124923][ T5956] usb 5-1: Manufacturer: syz [ 550.131697][ T5956] usb 5-1: SerialNumber: syz [ 550.141977][ T5956] r8152-cfgselector 5-1: Unknown version 0x0000 [ 550.148294][ T5956] r8152-cfgselector 5-1: config 0 descriptor?? [ 550.219371][ T7377] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 550.469339][ T7377] usb 2-1: Using ep0 maxpacket: 8 [ 550.478867][ T8976] loop8: detected capacity change from 0 to 7 [ 550.494085][ T7377] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 550.528386][ T8976] Dev loop8: unable to read RDB block 7 [ 550.530445][ T7377] usb 2-1: config 0 has no interface number 0 [ 550.536552][ T8976] loop8: unable to read partition table [ 550.540496][ T7377] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 550.648465][ T7377] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 550.719080][ T7377] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.428265][ T8978] syzkaller0: entered promiscuous mode [ 551.428708][ T8976] loop8: partition table beyond EOD, truncated [ 551.470808][ T8978] syzkaller0: entered allmulticast mode [ 551.491095][ T7377] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 551.513780][ T8976] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 551.533592][ T7377] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 551.549074][ T7377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.586319][ T7377] usb 2-1: config 0 descriptor?? [ 551.651831][ T7377] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 551.841833][ T9] usb 2-1: USB disconnect, device number 52 [ 551.896282][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 552.202581][ T8992] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 552.695481][ T9000] loop6: detected capacity change from 0 to 7 [ 552.869042][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 553.049075][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 553.061475][ T24] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 553.074946][ T24] usb 3-1: config 0 has no interface number 0 [ 553.088078][ T24] usb 3-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 553.098826][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.107888][ T24] usb 3-1: Product: syz [ 553.116459][ T24] usb 3-1: Manufacturer: syz [ 553.122782][ T24] usb 3-1: SerialNumber: syz [ 553.155642][ T7377] r8152-cfgselector 5-1: USB disconnect, device number 39 [ 553.260214][ T24] usb 3-1: config 0 descriptor?? [ 553.267706][ T24] io_ti 3-1:0.215: required endpoints missing [ 553.295344][ T9000] Dev loop6: unable to read RDB block 7 [ 553.333974][ T9000] loop6: AHDI p1 p2 p3 [ 553.376209][ T9000] loop6: partition table partially beyond EOD, truncated [ 553.384637][ T9000] loop6: p1 start 184549376 is beyond EOD, truncated [ 553.392594][ T9000] loop6: p2 start 83886080 is beyond EOD, truncated [ 553.994626][ T9012] netlink: 20 bytes leftover after parsing attributes in process `syz.4.751'. [ 554.302151][ T9024] fuse: Bad value for 'fd' [ 554.376148][ T24] usb 3-1: USB disconnect, device number 38 [ 554.391959][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.444739][ T9024] ipip0: entered promiscuous mode [ 554.450224][ T9024] ipip0: entered allmulticast mode [ 554.503104][ T9031] netlink: 84 bytes leftover after parsing attributes in process `syz.1.756'. [ 554.684763][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.029100][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 555.169321][ T24] usb 3-1: device descriptor read/64, error -71 [ 555.250382][ T9043] loop6: detected capacity change from 0 to 7 [ 555.271358][ T9043] Dev loop6: unable to read RDB block 7 [ 555.289091][ T9043] loop6: AHDI p1 p2 p3 [ 555.293314][ T9043] loop6: partition table partially beyond EOD, truncated [ 555.308046][ T9043] loop6: p1 start 184549376 is beyond EOD, truncated [ 555.316232][ T9043] loop6: p2 start 83886080 is beyond EOD, truncated [ 555.391989][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.413678][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 555.441982][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.447806][ T9052] netlink: 'syz.1.766': attribute type 21 has an invalid length. [ 555.478293][ T9052] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 555.488126][ T9052] netlink: 144 bytes leftover after parsing attributes in process `syz.1.766'. [ 555.515768][ T9056] fuse: Unknown parameter '60sWD*DFlv$08as! [ 555.515768][ T9056] `Fmq{ec`y3[3؍-(f2M\ e(12fMUW_  HR.\LmG߈p1 FL-WiQD$|9r1 ' [ 555.559608][ T24] usb 3-1: device descriptor read/64, error -71 [ 555.666610][ T9062] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 555.675036][ T24] usb usb3-port1: attempt power cycle [ 555.688811][ T9062] netlink: 52 bytes leftover after parsing attributes in process `syz.1.769'. [ 556.259112][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 556.289879][ T24] usb 3-1: device descriptor read/8, error -71 [ 556.539100][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 556.579996][ T24] usb 3-1: device descriptor read/8, error -71 [ 556.692352][ T24] usb usb3-port1: unable to enumerate USB device [ 556.919168][ T5925] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 557.090083][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 557.105558][ T5925] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 557.120343][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.133096][ T5925] usb 5-1: Product: syz [ 557.142060][ T5925] usb 5-1: Manufacturer: syz [ 557.151285][ T5925] usb 5-1: SerialNumber: syz [ 557.163401][ T5925] usb 5-1: config 0 descriptor?? [ 557.175778][ T5925] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 557.474617][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 557.869339][ T982] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 558.049075][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 558.094675][ T982] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.129072][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 558.142630][ T982] usb 2-1: config 0 has no interface number 0 [ 558.153560][ T982] usb 2-1: too many endpoints for config 0 interface 1 altsetting 10: 44, using maximum allowed: 30 [ 558.169626][ T982] usb 2-1: config 0 interface 1 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 558.187583][ T982] usb 2-1: config 0 interface 1 has no altsetting 0 [ 558.208805][ T982] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 558.223819][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.238436][ T982] usb 2-1: Product: syz [ 558.243433][ T982] usb 2-1: Manufacturer: syz [ 558.253238][ T982] usb 2-1: SerialNumber: syz [ 558.262855][ T982] usb 2-1: config 0 descriptor?? [ 558.271872][ T982] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 558.320346][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 558.327818][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 19910, setting to 64 [ 558.340981][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 558.367152][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 558.377000][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.426464][ T24] usb 3-1: Product: syz [ 558.469370][ T9096] fuse: Unknown parameter 'f&bLΕ }?jY' [ 558.501181][ T5925] gspca_stk1135: reg_w 0xd err -71 [ 558.510358][ T24] usb 3-1: Manufacturer: syz [ 558.519805][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 558.526762][ T24] usb 3-1: SerialNumber: syz [ 558.529508][ T5925] gspca_stk1135: Sensor write failed [ 558.536720][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 558.572347][ T5925] gspca_stk1135: Sensor write failed [ 558.582673][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 558.593954][ T24] usb 3-1: config 0 descriptor?? [ 558.602797][ T5925] gspca_stk1135: Sensor read failed [ 558.611840][ T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 558.629068][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 558.655580][ T5925] gspca_stk1135: Sensor read failed [ 558.665738][ T5925] gspca_stk1135: Detected sensor type unknown (0x0) [ 558.686078][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 558.718617][ T5925] gspca_stk1135: Sensor read failed [ 558.735938][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 558.884939][ T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 559.133919][ T24] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 559.153665][ T5925] gspca_stk1135: Sensor read failed [ 559.215088][ T24] usb 3-1: USB disconnect, device number 43 [ 559.306074][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 559.336224][ T5925] gspca_stk1135: Sensor write failed [ 559.355265][ T5925] gspca_stk1135: serial bus timeout: status=0x00 [ 559.362656][ T5925] gspca_stk1135: Sensor write failed [ 559.365057][ T30] audit: type=1326 audit(1762430998.520:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.4.781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd910f8f6c9 code=0x0 [ 559.368918][ T5925] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 559.412015][ T5925] usb 5-1: USB disconnect, device number 40 [ 559.870457][ T9116] netlink: 'syz.3.784': attribute type 7 has an invalid length. [ 559.878240][ T9116] netlink: 'syz.3.784': attribute type 8 has an invalid length. [ 559.888510][ T9116] netlink: 'syz.3.784': attribute type 5 has an invalid length. [ 559.920722][ T9116] netlink: 324 bytes leftover after parsing attributes in process `syz.3.784'. [ 560.364256][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 560.459548][ T982] gspca_spca1528: reg_r err -110 [ 560.464917][ T982] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 560.783974][ T30] audit: type=1326 audit(1762430999.930:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 560.974072][ T9122] block device autoloading is deprecated and will be removed. [ 561.007690][ T30] audit: type=1326 audit(1762430999.930:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.030094][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.041814][ T9133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.054775][ T9133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.133317][ T30] audit: type=1326 audit(1762430999.930:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.166999][ T30] audit: type=1326 audit(1762430999.930:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.208298][ T30] audit: type=1326 audit(1762430999.930:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.230884][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.257990][ T30] audit: type=1326 audit(1762430999.930:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.281558][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.336860][ T5955] usb 2-1: USB disconnect, device number 53 [ 561.348134][ T30] audit: type=1326 audit(1762430999.930:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.420411][ T30] audit: type=1326 audit(1762430999.930:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.449382][ T30] audit: type=1326 audit(1762430999.930:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f177298f6c9 code=0x7ffc0000 [ 561.965369][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.791'. [ 562.727446][ T9176] loop6: detected capacity change from 0 to 7 [ 562.736065][ T6026] Dev loop6: unable to read RDB block 7 [ 562.742242][ T6026] loop6: unable to read partition table [ 562.749265][ T6026] loop6: partition table beyond EOD, truncated [ 562.777402][ T9176] Dev loop6: unable to read RDB block 7 [ 562.783719][ T9176] loop6: unable to read partition table [ 562.791038][ T9176] loop6: partition table beyond EOD, truncated [ 562.797667][ T9176] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 562.939440][ T7377] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 562.960675][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 562.999064][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.008426][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.149040][ T7377] usb 5-1: Using ep0 maxpacket: 32 [ 563.183105][ T7377] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 563.200042][ T7377] usb 5-1: config 0 has no interface number 1 [ 563.223696][ T7377] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 563.249056][ T7377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.257485][ T7377] usb 5-1: Product: syz [ 563.264804][ T7377] usb 5-1: Manufacturer: syz [ 563.376663][ T7377] usb 5-1: SerialNumber: syz [ 563.395863][ T7377] usb 5-1: config 0 descriptor?? [ 563.693094][ T9173] sctp: [Deprecated]: syz.4.798 (pid 9173) Use of int in max_burst socket option. [ 563.693094][ T9173] Use struct sctp_assoc_value instead [ 563.729383][ T5955] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 563.843459][ T7377] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 563.863599][ T7377] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 563.883238][ T7377] usb 5-1: USB disconnect, device number 41 [ 563.899108][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 563.907237][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.950704][ T5955] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 563.979530][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.000427][ T5955] usb 3-1: config 0 descriptor?? [ 564.012830][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 564.299093][ T5956] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 564.444554][ T5955] hid_parser_main: 5 callbacks suppressed [ 564.444568][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.457936][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.464943][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 564.465352][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.502589][ T9208] program syz.4.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.584153][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.591167][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.598383][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.600038][ T5956] usb 2-1: config 12 has an invalid interface number: 89 but max is 1 [ 564.615745][ T5956] usb 2-1: config 12 has an invalid descriptor of length 155, skipping remainder of the config [ 564.636812][ T5956] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 564.637371][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.647442][ T5956] usb 2-1: config 12 has no interface number 0 [ 564.687420][ T5956] usb 2-1: config 12 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 564.711705][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.740334][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.749341][ T5955] sony 0003:054C:0268.0009: unknown main item tag 0x0 [ 564.754639][ T5956] usb 2-1: New USB device found, idVendor=0586, idProduct=2000, bcdDevice=e7.5b [ 564.770279][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.791560][ T5956] usb 2-1: Product: 벨诧傸斒겐堎糥浓컬⛈辟ퟬꗽ샨ꪭ䊮쥶䩢丹︙ₒ䐧躚渿嗡菽જ䶝뵐䂳툩ݠ幧筐润鯝썁斤腷苑㊔ቴ褚섞뵑ᄎ圜䆂鐔‒㧫蹢Ꚃ︔轔䰜傡輇倒靠액骂흑µ쯚夈린亞᠁벰秫뭯葥啑❨ [ 564.793370][ T5955] sony 0003:054C:0268.0009: hiddev0,hidraw0: USB HID v80.09 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 564.817914][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.904896][ T5956] usb 2-1: Manufacturer: 栾傮燰睡ﵜ葿뽊ફᕩ덿伱酽紱븐쀝ᜨ躄톬莸鴙哗૘覚峚脜儩畳ັⳙồ䜊㋺緞陛֫娈뿒ꓶ몥메Ἳ垉앉魚磢⬄ꨥ䨬眐㶯Ⴓ塼λ횅눔腞䑠嵂᠓귴滨赙鹏ⱺ樷⸁ [ 564.949077][ T5955] sony 0003:054C:0268.0009: failed to claim input [ 565.016764][ T5956] usb 2-1: SerialNumber: 犆ꐉ⸘ [ 565.016905][ T5955] usb 3-1: USB disconnect, device number 44 [ 565.261502][ T5956] omninet 2-1:12.89: required endpoints missing [ 565.300591][ T5956] usb 2-1: USB disconnect, device number 54 [ 565.577151][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.808'. [ 566.564371][ T9228] loop6: detected capacity change from 0 to 7 [ 566.691802][ T9228] Dev loop6: unable to read RDB block 7 [ 566.715375][ T9228] loop6: unable to read partition table [ 566.800626][ T9230] bond0 (unregistering): Released all slaves [ 566.890628][ T9228] loop6: partition table beyond EOD, truncated [ 566.918459][ T9228] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 567.701243][ T5955] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 567.888472][ T5955] usb 2-1: device descriptor read/64, error -71 [ 568.159127][ T5955] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 568.309132][ T5955] usb 2-1: device descriptor read/64, error -71 [ 568.430623][ T5955] usb usb2-port1: attempt power cycle [ 568.789468][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 568.798567][ T9251] bridge_slave_1: left allmulticast mode [ 568.804370][ T9251] bridge_slave_1: left promiscuous mode [ 568.810471][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.930673][ T9251] bridge_slave_0: left allmulticast mode [ 568.936525][ T9251] bridge_slave_0: left promiscuous mode [ 568.943605][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.969067][ T5925] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 568.989171][ T5955] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 569.011008][ T5955] usb 2-1: device descriptor read/8, error -71 [ 569.147393][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 569.160000][ T5925] usb 5-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 569.170566][ T5925] usb 5-1: config 0 has no interfaces? [ 569.179734][ T5925] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 569.188877][ T5925] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 569.198029][ T5925] usb 5-1: Product: syz [ 569.202970][ T5925] usb 5-1: Manufacturer: syz [ 569.207656][ T5925] usb 5-1: SerialNumber: syz [ 569.216665][ T5925] usb 5-1: config 0 descriptor?? [ 569.280047][ T5955] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 569.308742][ T5955] usb 2-1: device descriptor read/8, error -71 [ 569.458834][ T5955] usb usb2-port1: unable to enumerate USB device [ 569.468709][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.502733][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.532521][ T5956] usb 5-1: USB disconnect, device number 42 [ 570.444377][ T9261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 570.451438][ T9261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 570.486061][ T9261] vhci_hcd vhci_hcd.0: Device attached [ 570.729059][ T5925] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 570.739138][ T982] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 570.813938][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.826372][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.019052][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 571.031276][ T982] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 571.152312][ T982] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 571.177544][ T982] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.199069][ T982] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 571.272810][ T982] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 571.289764][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.306153][ T982] usb 2-1: Product: syz [ 571.310856][ T982] usb 2-1: Manufacturer: syz [ 571.315542][ T982] usb 2-1: SerialNumber: syz [ 571.332474][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 571.347835][ T982] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input19 [ 571.549113][ T982] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 571.557763][ T982] (id 0x00) [ 571.859034][ T982] rc_core: IR keymap rc-imon-pad not found [ 571.868355][ T982] Registered IR keymap rc-empty [ 571.898001][ T982] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 571.909170][ T982] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 571.950724][ T982] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 571.963160][ T982] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input20 [ 571.995842][ T982] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:59> initialized [ 572.108891][ T9287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.138071][ T9287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.288521][ T9287] binder: 9284:9287 ioctl c0306201 200000000040 returned -14 [ 573.005885][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.030410][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.069567][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.072539][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.229569][ T9307] syz_tun: entered allmulticast mode [ 573.317529][ T9306] syz_tun: left allmulticast mode [ 574.079375][ T982] usb 2-1: USB disconnect, device number 59 [ 574.092902][ T9262] vhci_hcd: connection reset by peer [ 574.111242][ T5918] vhci_hcd: stop threads [ 574.141578][ T9328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.180838][ T5918] vhci_hcd: release socket [ 574.233801][ T9328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.251783][ T5918] vhci_hcd: disconnect device [ 574.693807][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 575.498476][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.517630][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.533121][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.542391][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.829456][ T5925] vhci_hcd: vhci_device speed not set [ 575.947065][ T5873] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 576.699692][ T9368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.850'. [ 577.073988][ T9377] syz_tun: entered allmulticast mode [ 577.139060][ T9376] syz_tun: left allmulticast mode [ 577.166063][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 578.321303][ T9360] syz.0.846 (9360): drop_caches: 2 [ 578.327634][ T5925] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 578.595956][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 578.648130][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.677066][ T5925] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 578.697639][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.720604][ T5925] usb 5-1: config 0 descriptor?? [ 579.351383][ T5925] kye 0003:0458:0138.000A: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 579.562738][ T5925] usb 5-1: USB disconnect, device number 43 [ 579.689822][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 579.689839][ T30] audit: type=1326 audit(1762431018.840:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 579.789268][ T30] audit: type=1326 audit(1762431018.840:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 579.862581][ T30] audit: type=1326 audit(1762431018.840:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 579.979791][ T30] audit: type=1326 audit(1762431018.840:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 580.045386][ T30] audit: type=1326 audit(1762431018.840:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 580.104940][ T30] audit: type=1326 audit(1762431018.850:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 580.149613][ T9422] ipt_rpfilter: unknown options [ 580.188264][ T30] audit: type=1326 audit(1762431018.850:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.0.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218f6c9 code=0x7ffc0000 [ 581.914286][ T5925] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 582.359135][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 582.382989][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.403461][ T5925] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.482891][ T5925] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.508121][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 582.519028][ T5925] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 582.548439][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.590701][ T5925] usb 5-1: config 0 descriptor?? [ 582.823062][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 583.068515][ T30] audit: type=1326 audit(1762431022.220:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 583.134637][ T30] audit: type=1326 audit(1762431022.220:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 583.153346][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.168994][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.685106][ T30] audit: type=1326 audit(1762431022.220:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.4.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd910f8f6c9 code=0x7ffc0000 [ 583.746731][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 583.752853][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 583.823192][ T5925] usb 5-1: USB disconnect, device number 44 [ 587.529905][ T9519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.075588][ T9520] macvlan2: entered promiscuous mode [ 588.081191][ T9520] macvlan2: entered allmulticast mode [ 588.678577][ T9530] gre1: entered allmulticast mode [ 588.797679][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.806840][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.198492][ T9538] program syz.0.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.985407][ T9559] loop6: detected capacity change from 0 to 7 [ 589.993126][ T9560] sg_write: data in/out 134217696/14 bytes for SCSI command 0x0-- guessing data in; [ 589.993126][ T9560] program syz.4.896 not setting count and/or reply_len properly [ 589.994072][ T9559] Dev loop6: unable to read RDB block 7 [ 590.060798][ T9559] loop6: unable to read partition table [ 590.096030][ T9559] loop6: partition table beyond EOD, truncated [ 590.357990][ T9559] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 590.871789][ T9579] loop6: detected capacity change from 0 to 7 [ 590.929279][ T9579] Dev loop6: unable to read RDB block 7 [ 590.962565][ T9579] loop6: unable to read partition table [ 591.020561][ T9579] loop6: partition table beyond EOD, truncated [ 591.056348][ T9579] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 591.122650][ T9588] xt_TCPMSS: Only works on TCP SYN packets [ 591.713297][ T5925] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 591.892994][ T5925] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 591.904424][ T5925] usb 5-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 591.933239][ T5925] usb 5-1: Product: syz [ 591.947769][ T5925] usb 5-1: Manufacturer: syz [ 591.995127][ T5925] usb 5-1: SerialNumber: syz [ 592.073872][ T5925] usb 5-1: config 0 descriptor?? [ 592.106194][ T5925] ch341 5-1:0.0: ch341-uart converter detected [ 592.306153][ T5925] usb 5-1: failed to receive control message: -121 [ 592.456737][ T9623] netlink: 676 bytes leftover after parsing attributes in process `syz.1.907'. [ 592.466794][ T9623] netlink: 676 bytes leftover after parsing attributes in process `syz.1.907'. [ 592.477624][ T5925] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 592.726759][ T9631] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 592.913692][ T9631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.142341][ T9643] veth0_to_team: entered promiscuous mode [ 593.192031][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 593.192048][ T30] audit: type=1326 audit(1762431032.350:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.0.910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd30218f6c9 code=0x0 [ 593.595076][ T982] usb 5-1: USB disconnect, device number 45 [ 593.602544][ T982] ch341 5-1:0.0: device disconnected [ 593.663191][ T9657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.914'. [ 593.991614][ T9663] loop5: detected capacity change from 0 to 7 [ 594.302500][ T9663] loop5: [POWERTEC] p1 p2 p3 [ 594.311920][ T9663] loop5: p1 size 4294967295 extends beyond EOD, truncated [ 594.445753][ T9663] loop5: p2 start 8192 is beyond EOD, truncated [ 594.479267][ T9663] loop5: p3 size 1986356271 extends beyond EOD, truncated [ 594.671321][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 594.711956][ T6026] udevd[6026]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 596.081168][ T9674] loop6: detected capacity change from 0 to 7 [ 596.110657][ T9674] Dev loop6: unable to read RDB block 7 [ 596.116652][ T9674] loop6: AHDI p1 p2 p3 p4 [ 596.150513][ T9674] loop6: partition table partially beyond EOD, truncated [ 596.157977][ T9674] loop6: p1 start 3099783474 is beyond EOD, truncated [ 596.186100][ T9674] loop6: p2 start 668120390 is beyond EOD, truncated [ 596.215615][ T9674] loop6: p3 start 1886353253 is beyond EOD, truncated [ 596.236822][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.251210][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.912099][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'. [ 596.922477][ T9695] syz_tun: entered allmulticast mode [ 596.933101][ T9694] syz_tun: left allmulticast mode [ 599.470395][ T31] INFO: task kworker/1:2:918 blocked for more than 143 seconds. [ 599.489849][ T31] Not tainted syzkaller #0 [ 599.611069][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.634694][ T31] task:kworker/1:2 state:D stack:21400 pid:918 tgid:918 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 599.697400][ T31] Workqueue: usb_hub_wq hub_event [ 599.727493][ T31] Call Trace: [ 599.752267][ T31] [ 599.755256][ T31] __schedule+0x1798/0x4cc0 [ 599.789309][ T31] ? __pfx___schedule+0x10/0x10 [ 599.821344][ T31] ? schedule+0x91/0x360 [ 599.855352][ T31] schedule+0x165/0x360 [ 599.869036][ T31] schedule_timeout+0x9a/0x270 [ 599.878120][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 599.994177][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.018381][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.091619][ T31] ? wait_for_completion+0x267/0x5d0 [ 600.101816][ T31] wait_for_completion+0x2bf/0x5d0 [ 600.106997][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 600.256733][ T31] i2c_del_adapter+0x581/0x6e0 [ 600.265927][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 600.271684][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 600.276637][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 600.282168][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 600.287485][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 600.293895][ T31] usb_probe_interface+0x668/0xc30 [ 600.299412][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 600.305079][ T31] really_probe+0x26d/0x9e0 [ 600.309980][ T31] __driver_probe_device+0x18c/0x2f0 [ 600.315403][ T31] driver_probe_device+0x4f/0x430 [ 600.321277][ T31] __device_attach_driver+0x2ce/0x530 [ 600.330292][ T31] bus_for_each_drv+0x251/0x2e0 [ 600.339523][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 600.349278][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 600.354797][ T31] __device_attach+0x2b8/0x400 [ 600.359731][ T31] ? __pfx___device_attach+0x10/0x10 [ 600.365214][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 600.370529][ T31] bus_probe_device+0x185/0x260 [ 600.379277][ T31] device_add+0x7b6/0xb50 [ 600.383674][ T31] usb_set_configuration+0x1a87/0x20e0 [ 600.389448][ T31] usb_generic_driver_probe+0x8d/0x150 [ 600.395171][ T31] usb_probe_device+0x1c4/0x390 [ 600.400242][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 600.405630][ T31] really_probe+0x26d/0x9e0 [ 600.415112][ T31] __driver_probe_device+0x18c/0x2f0 [ 600.432874][ T31] driver_probe_device+0x4f/0x430 [ 600.460337][ T31] __device_attach_driver+0x2ce/0x530 [ 600.465807][ T31] bus_for_each_drv+0x251/0x2e0 [ 600.489260][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 600.524053][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 600.542585][ T31] __device_attach+0x2b8/0x400 [ 600.580627][ T31] ? __pfx___device_attach+0x10/0x10 [ 600.585985][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 600.643828][ T31] bus_probe_device+0x185/0x260 [ 600.648755][ T31] device_add+0x7b6/0xb50 [ 600.732108][ T31] usb_new_device+0xa39/0x16f0 [ 600.758077][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 600.773951][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.785446][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.814239][ T31] hub_event+0x2958/0x4a20 [ 600.830623][ T31] ? __pfx_hub_event+0x10/0x10 [ 600.864836][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 600.898425][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.908717][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 600.919239][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 600.928093][ T31] process_scheduled_works+0xae1/0x17b0 [ 600.940486][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.974157][ T31] worker_thread+0x8a0/0xda0 [ 601.021362][ T31] kthread+0x711/0x8a0 [ 601.027837][ T31] ? __pfx_worker_thread+0x10/0x10 [ 601.061723][ T31] ? __pfx_kthread+0x10/0x10 [ 601.066374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.109798][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.132977][ T31] ? __pfx_kthread+0x10/0x10 [ 601.137654][ T31] ret_from_fork+0x4bc/0x870 [ 601.180068][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 601.200924][ T31] ? __switch_to_asm+0x39/0x70 [ 601.212665][ T31] ? __switch_to_asm+0x33/0x70 [ 601.223353][ T31] ? __pfx_kthread+0x10/0x10 [ 601.234638][ T31] ret_from_fork_asm+0x1a/0x30 [ 601.248464][ T31] [ 601.259270][ T31] [ 601.259270][ T31] Showing all locks held in the system: [ 601.268773][ T31] 1 lock held by khungtaskd/31: [ 601.279880][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 601.328223][ T31] 5 locks held by kworker/1:2/918: [ 601.345773][ T31] #0: ffff888020ebcd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 601.469498][ T31] #1: ffffc90003267ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 601.483895][ T31] #2: ffff888144bea198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 601.501423][ T31] #3: ffff88807a8fc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 601.546219][ T31] #4: ffff88814a31b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 601.569548][ T31] 3 locks held by kworker/0:2/982: [ 601.574703][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 601.622663][ T31] #1: ffffc9000371fba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 601.679146][ T31] #2: ffffffff8df42fc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 601.709123][ T31] 2 locks held by getty/5587: [ 601.713843][ T31] #0: ffff88814dc930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 601.748985][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 601.764259][ T31] 4 locks held by udevd/5880: [ 601.769145][ T31] #0: ffff888031fc78b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 601.778063][ T31] #1: ffff8880561d2488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 601.787789][ T31] #2: ffff888032e50f08 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 601.797650][ T31] #3: ffff88807a8fc198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 601.807199][ T31] 4 locks held by kworker/u8:1/5918: [ 601.812652][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 601.823714][ T31] #1: ffffc90004e67ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 601.834355][ T31] #2: ffffffff8f2be830 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 601.844304][ T31] #3: ffffffff8df42fc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 601.854444][ T31] 2 locks held by kworker/u8:2/5946: [ 601.859861][ T31] #0: ffff8881446bf948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 601.871369][ T31] #1: ffffc9000503fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 601.883812][ T31] 2 locks held by syz.2.925/9696: [ 601.888873][ T31] [ 601.895426][ T31] ============================================= [ 601.895426][ T31] [ 601.905140][ T31] NMI backtrace for cpu 0 [ 601.905157][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 601.905176][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.905186][ T31] Call Trace: [ 601.905193][ T31] [ 601.905200][ T31] dump_stack_lvl+0x189/0x250 [ 601.905230][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.905252][ T31] ? __pfx__printk+0x10/0x10 [ 601.905289][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 601.905313][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 601.905334][ T31] ? __pfx__printk+0x10/0x10 [ 601.905356][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 601.905384][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 601.905406][ T31] watchdog+0xf60/0xfa0 [ 601.905429][ T31] ? watchdog+0x1e2/0xfa0 [ 601.905452][ T31] kthread+0x711/0x8a0 [ 601.905477][ T31] ? __pfx_watchdog+0x10/0x10 [ 601.905494][ T31] ? __pfx_kthread+0x10/0x10 [ 601.905518][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 601.905539][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.905558][ T31] ? __pfx_kthread+0x10/0x10 [ 601.905581][ T31] ret_from_fork+0x4bc/0x870 [ 601.905597][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 601.905616][ T31] ? __switch_to_asm+0x39/0x70 [ 601.905629][ T31] ? __switch_to_asm+0x33/0x70 [ 601.905640][ T31] ? __pfx_kthread+0x10/0x10 [ 601.905660][ T31] ret_from_fork_asm+0x1a/0x30 [ 601.905690][ T31] [ 601.905696][ T31] Sending NMI from CPU 0 to CPUs 1: [ 602.056631][ C1] NMI backtrace for cpu 1 [ 602.056648][ C1] CPU: 1 UID: 0 PID: 9696 Comm: syz.2.925 Not tainted syzkaller #0 PREEMPT(full) [ 602.056665][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 602.056675][ C1] RIP: 0010:kasan_check_range+0x9f/0x2c0 [ 602.056696][ C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd [ 602.056709][ C1] RSP: 0018:ffffc90004e37388 EFLAGS: 00000246 [ 602.056724][ C1] RAX: ffffffff820b2301 RBX: ffffffffffffffff RCX: ffffffff820b23e6 [ 602.056736][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001971880 [ 602.056745][ C1] RBP: ffffc90004e37670 R08: ffffea0001971887 R09: 1ffffd400032e310 [ 602.056757][ C1] R10: dffffc0000000000 R11: fffff9400032e310 R12: 0000000000000001 [ 602.056768][ C1] R13: 00007f17723c3000 R14: fffff9400032e311 R15: 1ffffd400032e310 [ 602.056779][ C1] FS: 0000000000000000(0000) GS:ffff88812623d000(0000) knlGS:0000000000000000 [ 602.056792][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.056803][ C1] CR2: 00007fd3023b4198 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 602.056817][ C1] Call Trace: [ 602.056826][ C1] [ 602.056835][ C1] unmap_page_range+0x1fe6/0x4370 [ 602.056875][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 602.056894][ C1] ? mas_find+0xb0e/0xd30 [ 602.056912][ C1] ? unmap_vmas+0x144/0x580 [ 602.056928][ C1] unmap_vmas+0x399/0x580 [ 602.056946][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 602.056973][ C1] exit_mmap+0x240/0xb40 [ 602.056993][ C1] ? uprobe_clear_state+0x20f/0x290 [ 602.057017][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 602.057033][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 602.057059][ C1] ? __pfx_exit_aio+0x10/0x10 [ 602.057079][ C1] ? uprobe_clear_state+0x27c/0x290 [ 602.057096][ C1] __mmput+0x118/0x430 [ 602.057113][ C1] exit_mm+0x1da/0x2c0 [ 602.057133][ C1] ? __pfx_exit_mm+0x10/0x10 [ 602.057149][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 602.057167][ C1] ? rcu_is_watching+0x15/0xb0 [ 602.057186][ C1] do_exit+0x648/0x2300 [ 602.057210][ C1] ? __pfx_do_exit+0x10/0x10 [ 602.057235][ C1] do_group_exit+0x21c/0x2d0 [ 602.057254][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 602.057274][ C1] get_signal+0x1285/0x1340 [ 602.057300][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 602.057324][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 602.057345][ C1] ? __bad_area_nosemaphore+0x3fb/0x780 [ 602.057368][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 602.057385][ C1] irqentry_exit_to_user_mode+0x7e/0x110 [ 602.057405][ C1] exc_page_fault+0xab/0x100 [ 602.057424][ C1] asm_exc_page_fault+0x26/0x30 [ 602.057438][ C1] RIP: 0033:0x7f177298f6d1 [ 602.057451][ C1] Code: Unable to access opcode bytes at 0x7f177298f6a7. [ 602.057459][ C1] RSP: 002b:fffffffffffffef0 EFLAGS: 00010217 [ 602.057472][ C1] RAX: 0000000000000000 RBX: 00007f1772be5fa0 RCX: 00007f177298f6c9 [ 602.057482][ C1] RDX: 0000000000000000 RSI: fffffffffffffef0 RDI: 0000000000000200 [ 602.057492][ C1] RBP: 00007f1772a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 602.057502][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 602.057511][ C1] R13: 00007f1772be6038 R14: 00007f1772be5fa0 R15: 00007f1772d0fa28 [ 602.057531][ C1] [ 605.506614][ T5197] udevd[5197]: worker [5880] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time