last executing test programs: 5m1.179833556s ago: executing program 3 (id=3429): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111b4000000000085000000580000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111b4000000000085000000580000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e", 0x63}, {&(0x7f0000000800)="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", 0x226}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319", 0x51}], 0x3}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) (async) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="8c030400000004030a20"]}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r4, 0x1, 0xc7, &(0x7f0000000080)=""/199) close(r2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) bind$can_raw(r8, &(0x7f0000000000), 0x10) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r9, 0xffffffffffffffff, 0x80000) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r10, 0x0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4004093}) io_uring_enter(r11, 0x75e7, 0x33ff, 0x0, 0x0, 0x0) (async) io_uring_enter(r11, 0x75e7, 0x33ff, 0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 5m0.906324034s ago: executing program 3 (id=3431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\a\x00'}, {0x20, '/)&'}, {}, {0x20, 'gre0\x00'}, {0x20, '*\xb1'}, {0x20, ']*@'}, {}], 0xa, "441e565eda2fd3a99cd62977eac6cdbb87505aac9090209c1c3504f837d8ffa501e709ea95e6a6"}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r4, 0x0, 0x2c, &(0x7f0000000000)='/psys/net/\x00\x00v4\x05\x00s/\x92ync_\x00le\xf44.\xab%\x91N\xd4\xa2\x88\x00\xd1l,\x00\x00\x00\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, 0xfffffffffffffffd, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f088219020f9d745266b9800000c00f326635008000000f30dad5b820010f00d8ea0000b8000f1474002e66262e64da5a00670f01c4", 0x36}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x1, 0x1, 0x3, 0x2, 0x7, 0x2, 0x33, 0x4, 0xc66c, 0x4000000000000000, 0x2, 0xfa, 0x10001, 0x3ff, 0x2], 0xeeee8000, 0x10800}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) getpid() (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\a\x00'}, {0x20, '/)&'}, {}, {0x20, 'gre0\x00'}, {0x20, '*\xb1'}, {0x20, ']*@'}, {}], 0xa, "441e565eda2fd3a99cd62977eac6cdbb87505aac9090209c1c3504f837d8ffa501e709ea95e6a6"}, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r4, 0x0, 0x2c, &(0x7f0000000000)='/psys/net/\x00\x00v4\x05\x00s/\x92ync_\x00le\xf44.\xab%\x91N\xd4\xa2\x88\x00\xd1l,\x00\x00\x00\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) fchdir(r5) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) getdents(r6, 0xfffffffffffffffd, 0x58) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f088219020f9d745266b9800000c00f326635008000000f30dad5b820010f00d8ea0000b8000f1474002e66262e64da5a00670f01c4", 0x36}], 0x1, 0x7e, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x1, 0x1, 0x3, 0x2, 0x7, 0x2, 0x33, 0x4, 0xc66c, 0x4000000000000000, 0x2, 0xfa, 0x10001, 0x3ff, 0x2], 0xeeee8000, 0x10800}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 5m0.42813567s ago: executing program 3 (id=3434): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c", 0x6d}, {&(0x7f00000038c0)="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", 0x609}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) 4m59.933561027s ago: executing program 3 (id=3436): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) syz_usb_connect(0x0, 0x64, &(0x7f0000000940)=ANY=[@ANYBLOB="1201100107dbe208480b0320a6d4010203010902520002050930020904230a03ece6a2cac18571af0052020102052404040907240501c3451d072408039c0d0809050a1008000008f809050e01ff0303020809050503000240bf08090404c000e663e880"], 0x0) r2 = memfd_create(&(0x7f0000000a00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xf7\x8e\xea\x1dZ(\xd7\x17\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\xd5U\x01h\xbb\x14O\ba\xca\xa6*{\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5a=\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000340)=[{&(0x7f0000000380)=""/13, 0xd}, {&(0x7f00000001c0)=""/70, 0x46}], 0x2}}], 0x1, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) (rerun: 64) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/vmcoreinfo', 0x101980, 0x8) sendfile(r2, r4, &(0x7f0000000240)=0x23, 0x3) (async) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="3030302e4c0000000200"/21], 0x15) (async, rerun: 64) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r12 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r12, 0x1000006) fcntl$addseals(r12, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r12, 0x1, 0x0, 0x1000000}) write$binfmt_misc(r2, &(0x7f0000000180)="e502", 0x2) 4m59.391891959s ago: executing program 3 (id=3442): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x4000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080180000000000000000b7080000ffffff807baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400000080ffffb70200001700000018230000", @ANYRES32=r3, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r6, 0x0, 0x1) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x0) recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) getdents64(0xffffffffffffffff, 0x0, 0x18) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4m57.87455193s ago: executing program 3 (id=3450): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r0, r0, 0x0, 0x400000000003f) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x200) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e1ba1d41622182f5fb0ba90304000000000000000000000000000c"], 0x0) r2 = fanotify_init(0x200, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000600)="f7882b494b443c8ef5653d326c801ab7fd21af9fd4c201cf0783e16e4b58f32a77c805d636e45f1a65cb752202b34db3b28600e0772d0e760cffcbed0f0eb69122cfc7ad25207a4ca1351f5e20230290caf270ecc132babce12b7f45bd1be7ca349f62d900bb83d5de61a44f64bbe110d1a7e34aba1b8f7f22277014292139aa693a6f4e7f9307ecd2f2c2208fe3837eabe10a72d78f5c045bf4f64e971f26868a9c01255742950dd50d4b1fc8375886ecc35516d93457100c0fe1380b30bb099421d36ac712fd86ea8f46d64df8dadaf6ea26c35e782b56bf6b0ab5317711f6e73043693d9c2535cfc6beea9c472ec25127dff62c", 0xf5}, {&(0x7f0000000700)="07d3138341805f3abf302e723df8d6538c32223e590c01576ba029e2fb7835e9220a61e197b75739b5d37e944e1a1838b38e6c5b2b025ac4efb529d0d467ac517c30ca1b73d987e62e6a3c09098cb5a8a85aa4d71edbd08f4509dd4edae42b6ca5ff1339420a0c9dee20285ecaf69715d5a48cfb375c0f0ce5392813281032f7bebdb9fa0cd35c5643eea5d924721a109b1c47a831d46e0f8eee1a3cf38d2277a43033c982000d64f7919617db83b84c934a9ade53242bc05ac751a29cda5d614d74e24dab4ce3cd6229fdb0baecbeb80e9af582c31c562ef7ca2c6c355fa15577358094", 0xe4}], 0x2) r4 = syz_io_uring_setup(0x32b8, &(0x7f0000000840)={0x0, 0x9595, 0x400, 0x3, 0xdb, 0x0, r3}, &(0x7f00000008c0), &(0x7f0000000900)) r5 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0xffffffff, 0xe1, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6, 0x25, 0xfb, 0x10, 0xc52, 0x2212, 0x1ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x2, 0xb0, 0x7a, 0x67, 0x0, [], [{{0x9, 0x5, 0xa, 0xc, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r11, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10030000", @ANYRES16=r11, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x2}, 0x4004009) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m42.715072654s ago: executing program 32 (id=3450): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r0, r0, 0x0, 0x400000000003f) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x200) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e1ba1d41622182f5fb0ba90304000000000000000000000000000c"], 0x0) r2 = fanotify_init(0x200, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000600)="f7882b494b443c8ef5653d326c801ab7fd21af9fd4c201cf0783e16e4b58f32a77c805d636e45f1a65cb752202b34db3b28600e0772d0e760cffcbed0f0eb69122cfc7ad25207a4ca1351f5e20230290caf270ecc132babce12b7f45bd1be7ca349f62d900bb83d5de61a44f64bbe110d1a7e34aba1b8f7f22277014292139aa693a6f4e7f9307ecd2f2c2208fe3837eabe10a72d78f5c045bf4f64e971f26868a9c01255742950dd50d4b1fc8375886ecc35516d93457100c0fe1380b30bb099421d36ac712fd86ea8f46d64df8dadaf6ea26c35e782b56bf6b0ab5317711f6e73043693d9c2535cfc6beea9c472ec25127dff62c", 0xf5}, {&(0x7f0000000700)="07d3138341805f3abf302e723df8d6538c32223e590c01576ba029e2fb7835e9220a61e197b75739b5d37e944e1a1838b38e6c5b2b025ac4efb529d0d467ac517c30ca1b73d987e62e6a3c09098cb5a8a85aa4d71edbd08f4509dd4edae42b6ca5ff1339420a0c9dee20285ecaf69715d5a48cfb375c0f0ce5392813281032f7bebdb9fa0cd35c5643eea5d924721a109b1c47a831d46e0f8eee1a3cf38d2277a43033c982000d64f7919617db83b84c934a9ade53242bc05ac751a29cda5d614d74e24dab4ce3cd6229fdb0baecbeb80e9af582c31c562ef7ca2c6c355fa15577358094", 0xe4}], 0x2) r4 = syz_io_uring_setup(0x32b8, &(0x7f0000000840)={0x0, 0x9595, 0x400, 0x3, 0xdb, 0x0, r3}, &(0x7f00000008c0), &(0x7f0000000900)) r5 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0xffffffff, 0xe1, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6, 0x25, 0xfb, 0x10, 0xc52, 0x2212, 0x1ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x2, 0xb0, 0x7a, 0x67, 0x0, [], [{{0x9, 0x5, 0xa, 0xc, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r11, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10030000", @ANYRES16=r11, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x2}, 0x4004009) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21.407605105s ago: executing program 4 (id=4324): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009021200013fff88fbeed6000000000904000000020600002aef00a54438ba1f2fe7ac7a2ee0735a97c5d9326764b654e9b8aa3f44a60a3765823708196e15a1c62da0d17e3a0000000000000000000000000000c527b08d1fad403ded188cae7437f504f358ac5454dd26"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="000004000000a7100c77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.266039621s ago: executing program 4 (id=4335): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x800) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x3f, &(0x7f0000000200)=0x6302, 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000400)=0x2, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x161, 0x40000867, r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) ptrace$pokeuser(0x6, r2, 0x110, 0x40000089) 17.744052428s ago: executing program 4 (id=4340): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) syz_clone(0x42280280, 0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/199, 0xc7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xb53e, 0x10100, 0x0, 0x262}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x79a5, 0x2, 0x46, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES32], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r8) 16.754524241s ago: executing program 2 (id=4344): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, 0x0, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in={0x2, 0x4e22, @local}], 0x3c) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4c401, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_io_uring_setup(0x100024fa, &(0x7f0000000b80)={0x0, 0x3, 0x100, 0xffffffff, 0x3bd}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES64=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16, @ANYRES8=r9, @ANYRESHEX=r0, @ANYRES16=r7, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, 0x0}) io_uring_enter(r6, 0x2d42, 0x2, 0x60, 0x0, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) 14.199312997s ago: executing program 4 (id=4351): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket(0x1e, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x1, 0xb, 0x1, {{0xd, 0x4, 0x0, 0xf, 0x34, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x12, 0x1, [{0x7, 0x3, '\''}, {0x1, 0x2}, {0x2, 0x7, "6fe1d4e349"}]}, @lsrr={0x83, 0xb, 0x75, [@local, @loopback]}]}}}}}) sendmsg$nl_route_sched(r0, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/raw6\x00') preadv(r6, 0x0, 0x0, 0x8000, 0x5) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f0000000480)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', r4, 0x10, 0xf810, 0x2, 0x4, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @local}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 12.985277566s ago: executing program 2 (id=4354): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) statx(r0, 0x0, 0x1000, 0xcf3433d97aab2983, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109021200"/36], 0x0) read$FUSE(r6, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r5, 0xff08, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 12.141426681s ago: executing program 0 (id=4358): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005c80)={@map, 0xffffffffffffffff, 0x1d, 0x201e, 0xffffffffffffffff, @value}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x8) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x8000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2d32000}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x10101, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 10.592994638s ago: executing program 4 (id=4359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0xfffffffc) fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 10.38547841s ago: executing program 0 (id=4362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300), 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2160, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf250100000005000400020000000900010073797a30030000000500040002000000140002006e69637666300000000000040000000005000400010000000900030073797a31000000001400020076657468305f746f5f6272696467650005000400010000000500040001000000"], 0x7c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x400c840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00002d3000/0x9000)=nil, 0x9000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0) mlock2(&(0x7f000030c000/0x1000)=nil, 0x1000, 0x1) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000041000/0x4000)=nil, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x38}}, 0x20000850) 10.06392359s ago: executing program 1 (id=4364): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002730f08f905ffffedbc0102030109025300"/36], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f38826e376464f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0x1, 0x11, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$P9_RREAD(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="c5000000750200ba00000093f0f92b792d996234dc7685c1bf9b2b7d74610d0ccc118da9e6af21d9125fa28931d0048edfeaf95eb52e69380465e565101acf67ce3ae0a9e2d0ebce201b7fad56ae702d3a3e04ca462728362ab653a0c734aa53e0ce9824a0978ddf129e1f697ba3567813cd741858e417eddd3726c66839d75c7e7f369036f75ac623fd77c371d8c48a72cd1ba909fce7ba5a08f36be8b07686416398afb45c9b8776db0a1f9dc8983e5bbd4d6b92dfd2df3f5dd2698cde4aea729a664b9c"], 0xc5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYRES16=r2, @ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f7ff00"/28], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1, &(0x7f0000000100)=0x6, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000500)={0x80000000, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000480)={r9, &(0x7f0000000140), &(0x7f00000016c0)}) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0x17) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES32=r5, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x4, @local}, {0xa, 0x0, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r13}}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r11}, 0x38) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 9.93869964s ago: executing program 2 (id=4366): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9cbb391344f381568349cdf0a953dfe834adc5943029adecdc7755eeaf0da77290f1c9f7df6312920ab8c490d18239ad7331e9df779ac1ac33d2411601a3657e55be22054775cb57b63e6bc36a8216d400e5307ba7dee8938a787dc3d97c4f13768a779831f7", 0x66, 0x40884, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x81000, @local}, 0x1c) syz_open_dev$hidraw(&(0x7f0000000100), 0x8001, 0x20000) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000180)={0x2, 0x18, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x0, 0x1000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={@empty, 0x63, r3}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@int=0x90b7, 0x4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x490001) bind$alg(r5, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x6, 0x2, 0x5, 0x4, 0xa, 0x5, 0xfffffffffffffc01, 0x1, 0x9c3, 0x5, 0xd2, 0xffffffff00000001, 0x3, 0xd, 0x1ff, 0x4], 0x5000, 0x10000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x7, &(0x7f00000004c0)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @jmp={0x5, 0x1, 0x1, 0x2, 0x5, 0x40, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}], &(0x7f0000000500)='GPL\x00', 0xd, 0xa, &(0x7f0000000540)=""/10, 0x41100, 0x22, '\x00', r3, @fallback=0x2f, r4, 0x8, &(0x7f0000000580)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x9, 0x3, 0x3ff}, 0x10, r6, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000640)=[{0x5, 0x4, 0xe, 0x8}, {0x5, 0x2, 0x8, 0x9}, {0x2, 0x2, 0xa, 0x7}, {0x0, 0x3, 0xe, 0xc}, {0x0, 0x3, 0xf, 0x8}, {0x2, 0x2, 0x5, 0xa}, {0x1, 0x5, 0x8, 0x9}, {0x3, 0x1, 0xc, 0x9}], 0x10, 0x2, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup(r0) io_setup(0x9, &(0x7f0000000780)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, &(0x7f00000007c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r8, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000b00)=""/149, &(0x7f0000000bc0)=0x95) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={0x1, 0xffffffffffffffff}, 0x4) close_range(r7, r9, 0x2) write$proc_mixer(r5, &(0x7f0000000c40)=[{'LINE', @val={' \'', 'CD Capture Switch'}}, {'IMIX', @void}], 0x33) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000c80)=0x4000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x18}, 0x18) syz_usb_connect(0x0, 0xa9c, &(0x7f0000000d40)={{0x12, 0x1, 0x300, 0xa3, 0xbb, 0x90, 0x8, 0x10c4, 0x819f, 0x5812, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8a, 0x3, 0x3, 0x5, 0x20, 0xd1, [{{0x9, 0x4, 0x48, 0x3, 0xf, 0x2c, 0xee, 0xc, 0x1, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x2, 0x6, 0x7, [@generic={0x60, 0x23, "20c3f39828457cee3615f7ae68e5b7158a70bd0bf5177edcd5cda722def64c9217bebb3ac93d7f04d9cdf379b306af0284b931c2e840ad5d69ee94d2b128c62040ae9525d08d10715b65bbc3085ab40083acb1a090a5ef0a0ef01e0af3cb"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x9, 0x5, 0xbf}}, {{0x9, 0x5, 0x4, 0x10, 0x1b7, 0x40, 0x0, 0x9, [@generic={0xb4, 0x9, "1a072a8383bdb9b7bccadd2793423d4e8c07a992b45bea3356f9061bfccbde5278c56044f73647c83b2853c348e3aa54168e8cacd56beda37046a383e950a3898b3b3951e308c2dfcc8d93ef03e63ba582838cc9b799faa33887bb3d813a29e0ceb3a08fd0df54e6eabc5f53f65a6482957c28d5d8f3be0c0e1d93917d1da2a8463b9427c3b54a9a9cf3979c2aa57a8fc128d6a99f25c7a0340894ed2db0ac475f4e448072deb9fdaeaea2a6407ad575e43c"}, @generic={0x78, 0x30, "c8651508d37a29682e6e78b47b400159656a0bde04d47ad9babc875486708cb632a04ebefaef6804ce96898aa8d2fa37b90101ff3af40bdbfa30c87b4e05034f8c7c1e98b05f3881b36cf67b1090dae39d2ddf60753e988cde049d51cb35d052a5739cd271ebb1ffe7cc5e2688782d64ae18da4296ef"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x5, 0x79, 0x2, [@generic={0xdf, 0x4, "a12507134b7ddfdcc6762f5882da571b2372ca073e614f170e8e2ca18ac6630e82900fd57e4c1d8b220c6464ee643f7ad20b7c0829c17dbe941808393babd4eee2609bf8537a79cff0e77233e0b31d7e4a5ab97dca87bbeb7bcd0a52e76cc5eeccef13a55c0a8cf79060e5a2489a05dc4d08b1f2e3a75c619bea38e5a2f8abf7b8540ef4d21871bae0898eab9ba3fd35b2ef5f2089e4c814de3b9efe299f2399fb0437b6fac15bb500bea1bd7b8ad6b8865df6225a7f477ca184d2e4f101de8920925dbd3fb2064b8e0321c8447d8ef8852b34fe097705be1ea2c6a4d2"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xc, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xed34}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x8, 0x7, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x3, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8}, @generic={0x55, 0x22, "e126cd0c66adf5925547a591fdbeeb49a1b164553bc9c4d5e6f7f30db695755c3d89e37f9b7edd97aab2d95c3a3c312ae5fa45abd9fc089dd11ebf886f881bf6caec015369b55aca22ebc3284b900b2008dcdc"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xc, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x100}, @generic={0x35, 0x22, "f5e9f81ef79cf7522ff1e18ab19458d7b03009db5265a5495ebeba7cde1ae8fd7ec21dbead1d95638aee68c0779455a48a3f91"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x4, 0x4, [@generic={0xb, 0xa, "caedda54b3708aeb8a"}, @generic={0xbb, 0xd, "0b7145c6ceaae48d2bbf17de88fdde8acb72b69b61cf65654f07021f5917121a6178e15490562d4d9b200bccaed3bcd5921872b9131e8e63c27ac9a11042668f714f44894bcdaa500ee4e932cc910f8743e0b0b549104ec40266e5d023062faf8ff9fe616eafd816bddb99057194afb3787f82008404c7326a4a676d143a4d85d0355ef53ce795f34ce8f168673b5b39b6b7f593f29a733db4b31b20fb760f619ada0b8cf322c233446e22fe83ed1ae63b1a854ab41c1588ba"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0xf, 0x2, 0x83}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x9}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x8, 0x4, 0x6}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x0, 0x5e, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}, @generic={0xdb, 0xe, "daabf26e1dfe646e749fa6369348632be4db052cfdbcf5a7f4f3c3f77ea8ba9a854f13461309b44847d56afcba3f21dfdcc952c430046bb33c8ce79a6f50862422934d36a1e490b3fe30c4b833c5243b3617c56211b404906656150d855b8fff2d1f8ccaf66b06ec9ab2c5fe7c2712425d45557966bb805bc232dd2b4fa642e9a97d695e7ccd9b7bc058bc5344ea9faf89bf4a0f90738109231ec4ad3aadfbd596707cc433fa59b9c00b64644012d5c89bee39cc0f22fe83ce5180c811a4aadac4548d05e51935195c595d03f79ccb7d2e71443478e37f44c8"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x7, 0x3, 0x2, [@generic={0x5e, 0x22, "c72020d927720d226545ce82b7ee6b084390a5dc613fd2d78a7c3a8fb5ffcf44050b869b4b8284fbed1f8e759d49374b2011929eb38748590ce8d82b7c6e5c6563cebf3509c3f01e2fe2358049f5fe093637a85339b8f1b4a3d47981"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x10, 0x9}}]}}, {{0x9, 0x4, 0xbb, 0x9, 0x6, 0xfe, 0xc4, 0xe4, 0x7, [@generic={0x13, 0x23, "c7d0773797ab51e4d8a21533c32e6e5acc"}, @hid_hid={0x9, 0x21, 0xfff8, 0xff, 0x1, {0x22, 0x627}}], [{{0x9, 0x5, 0x4, 0x1, 0x200, 0x7f, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8d, 0x5}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x5, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x68, 0x9}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0x9, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x92, 0x8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x7, 0xb7, 0xb, [@generic={0xd4, 0x21, "09e248f7be35dbdb9b35378aa66b48a95dc3dfb54e56027f443621fe5cba3e9f1a7986a5e6c25f3213ffbf2c333cd67062e05fadfce4631254675382a8fd1ae54e81ce063a1a5733db9e14318fcdb1ebe824747286c50501d2c9379b7d79ea30461f07606e5d6877a9af5e9efdbc0e96a3b9fd34b99a58581eff9d5e230197160ec6762a5b8c59de9821c4d45f0dd0bbf0a5869ed4740f60871c287756a0b2ce6ad0034c764c02e9fa63278314f9b241c9e83c970e9adf168ed448ab25316a63c87d3ee9ae224a6278108345aac95faf55c3"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4a, 0xfff9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x7f, 0x6, [@generic={0xb8, 0xf, "6a2192791ee654eb1313fbfa923e1fc8481818c0e82591f7bc0cabbad12b4465a2b1e66643c632bf8ee91e6fccd24901cf46cf5ec3d35b53cb8fdcb83571b1a7645ea8bbde414d257c42b6e13a5011a86d597d8522790e13f7cec96a7acab76e3540f57c8e75e2d08871f81b8af2e0b0f9e51e88560830c4a05c31a16c5dfab15bd2608edbcc7c97b3d0a20ba305f022b3d2bf7bfce099200a3628572b1477a7f6282decf513f515059fc1262795e0031d7280e5c680"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff}]}}]}}, {{0x9, 0x4, 0xc8, 0x3, 0xf, 0x3, 0xec, 0x2, 0x8, [@generic={0x51, 0xb, "fbd6ae6bba27e59ecbaf0d01a69628ddf97fe26bbadff160d1ff4fe38d38f7286d1b3090a14772eb26d18618f28bec60f9f1f7e262183c9ebb6dbd063f12a5c4c3fd9cc9ca6e88b5f2e886560663cf"}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x97, 0x2, 0x1}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0xd, 0xff, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x3df, 0x6, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x49, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x10}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0xc, 0x10, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x57, 0x7, 0x6f}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x0, 0x2, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xeb, 0x9a}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x7, 0xe, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0xd, 0xfe, [@generic={0xf7, 0x9, "8ef3b73d77467c57805a2450b5a2211f7432a6a03583b1554bdb38dfd8c7a5b3b2ac71279d0ff1d0aa8e476aded65a14513c7089fc21509af8441fa7862b0e55008b041ee9429a951929329c1669a0bb2dcdba3e899eb352081515f2e7dd2b31df9d033219f474adc5e278cb0bea32deaec9f79589b603a8309177fe9ddc8fcec7da4f9d9c85032dfa47aca191ac28b38d99b4bb1adc88072980239cbda477bf55862f93f064fcb517af49707bdb617819f92eb0a906f526f6ed50f6097f22fe8c5a8a9095762c3d4d7d815c29147245bf7fb481456a4ad07b2b0469101f822f4ada9dc12b6ff17dd979dca79ad06405eecf9b7c1c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x3a, 0x55, 0x1}}, {{0x9, 0x5, 0xa, 0x5, 0x3ff, 0x80, 0x40, 0x25}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x5, 0x8, 0x7, [@generic={0x5c, 0x22, "126df7d8164bd1f4949fb5ef347a98270906e3eaf897f7fa0cc4c7580f982cf00fba32c238567de65efd17b67243ac71b2f81fabe4869524288e3572a8db4d14246d76faf9d0ce1279da5d60fd13da179fe0d7d2fe1dd31e626d"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0x84, 0x8, 0x200, 0xba, 0x5, 0xff, [@generic={0x56, 0x199b6eae47914ec9, "1e2daf6cd2a1332ca07ab3857aadc051382fc0a8bbe336ca1efca1e83fbd43339ed91178ea00fe0438923f64330166f134b56c1e2c9267aab7601ec3318b750151e005b76d62fb293ff50a44bd565894112f90bc"}]}}, {{0x9, 0x5, 0x6dcb074670ced81b, 0x3, 0x40, 0x7f, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0xff, 0x3ff}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x110, 0x8, 0xa0, 0x2, 0x40, 0xd}, 0x8, &(0x7f0000001840)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x40b}}, {0x7b, &(0x7f0000001940)=@string={0x7b, 0x3, "ae86c8983c01b375d82d8ed6c63f9e3ea22d79ca70d834861371ff03d4644cf0b29d8c240a9d9fa4601b92d79e50adf92c2cc3c216a7f1d3f82f1d7b4da105673a97b810894772646bc1ac43bd5b41c3c49ec02fa883bc3eaddd0d8c041a720dfc2de3c6dd6e4e5addb0d6ba94272968fe1c0da71dd9458cd0"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x412}}, {0xad, &(0x7f0000001a00)=@string={0xad, 0x3, "221db3f825196174c1c2b0d566346c1c03e80b88b6fe97fef78be19d535586ee8b40cd001f7d105d5b93fb0eb2463e1b7b4c2bdf40a67b37858347c757887dd465803d611ff710d375e2e5eab7a4dcfa7759bf4f8cd6e1e04c4bf399ee75fc5736d56f369e5142c5358219992a6a273845a77e037889f40ed7fa2bb7eaf16b40c7ac4be27051c9e2c91800759e89d4dcbdaa77ad6ea9fba04fa19cfe3bb608916a50af078431441e66416b"}}, {0x8f, &(0x7f0000001ac0)=@string={0x8f, 0x3, "bc193f9ecd3c3b16094f241d2aa459ebcba72a79f0070cbecbb6b5d774b9f731bcd5a07b5683e37421a6783fa89fa99bae17e8e4cc35d7105fdbd3e1e877328b3e8be119f6abcf036901f9cb9b2bbc875ba254f34c2252f9d1976e01313c85f2460a5d703c58b83b8539acb1d46a6dfe5b671c0deea7324d6b15b87405fd0ce70d4e72597621cef16213015d0a"}}]}) 9.347917576s ago: executing program 5 (id=4368): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$dri(&(0x7f0000000540), 0xb, 0x8002) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000680)={0x0, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000000001030000000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100008da4520600000000000000010c0002800500010000000000"], 0x50}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a5167"], 0x0) 8.84459098s ago: executing program 0 (id=4369): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket(0x1e, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x1, 0xb, 0x1, {{0xd, 0x4, 0x0, 0xf, 0x34, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x12, 0x1, [{0x7, 0x3, '\''}, {0x1, 0x2}, {0x2, 0x7, "6fe1d4e349"}]}, @lsrr={0x83, 0xb, 0x75, [@local, @loopback]}]}}}}}) sendmsg$nl_route_sched(r0, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/raw6\x00') preadv(r6, 0x0, 0x0, 0x8000, 0x5) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f0000000480)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', r4, 0x10, 0xf810, 0x2, 0x4, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @local}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 8.176189012s ago: executing program 1 (id=4370): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093", 0x53}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a", 0x16}, {&(0x7f00000001c0)}], 0x4, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 7.16392589s ago: executing program 1 (id=4371): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x225c17d03, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.310430427s ago: executing program 2 (id=4372): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005c80)={@map, 0xffffffffffffffff, 0x1d, 0x201e, 0xffffffffffffffff, @value}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x8) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x8000) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x2d73000}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x10101, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 6.018256145s ago: executing program 4 (id=4373): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001002d585405cafd4c49cba6adbd", @ANYRES32=0x0, @ANYBLOB="4321000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="14001680100001800c0009000200000007000000"], 0x50}, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0xffffff78}, @TCA_HTB_DIRECT_QLEN={0x3}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@getchain={0x5c, 0x66, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xf}, {0x11, 0x4}, {0xe, 0x10}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0xc5af}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x224a8c00abc1a494}, 0x40040) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.965422128s ago: executing program 0 (id=4374): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x7bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x4], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001340)=[@in={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5.348244713s ago: executing program 5 (id=4375): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000881) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRES64=r1, @ANYRES16=r1, @ANYRES64=0x0], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x400000000000003, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0xfffffffe) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x1) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file1', [{0x20, 'cpuset.effective_cpus\x00'}, {0x20, '.~%\xcd\xf2\xba\t\x19@s/binder0\x00'}]}, 0x36) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3b4b6ff9c5927062, 0x80010, 0xffffffffffffffff, 0x4fb64000) fallocate(r6, 0x1, 0x3, 0x2d22) fanotify_mark(r6, 0x40, 0x8001038, r6, &(0x7f0000000280)='./file1\x00') r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) r9 = dup3(r8, r7, 0x80000) ioctl$VIDIOC_G_ENC_INDEX(r9, 0x8818564c, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fallocate(r12, 0x0, 0x100000000, 0x200400) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000300)=@generic={0x2, 0x2, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11, {0x6}}, './file0\x00'}) 4.404318061s ago: executing program 5 (id=4376): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005000400000000000900020073797a31"], 0x28}}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) 4.151537536s ago: executing program 5 (id=4377): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, "37bb54f0"}}) ppoll(&(0x7f0000000340)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x8) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xf9fd, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000080), &(0x7f0000000340)) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r3, &(0x7f0000000180)={0xa8, 0x0, r4, [{0x5, 0x5, 0x8, 0x4, 'notrack\x00'}, {0x5, 0xd, 0x1, 0x1, '%'}, {0x2, 0xc22, 0x5, 0x7f, '\\**\xae\''}, {0x0, 0x3, 0x5, 0x6, 'syz0\x00'}, {0x1, 0x8, 0x0, 0x7}]}, 0xa8) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet6_sctp(0xa, 0xa, 0x84) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x801c) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r1, &(0x7f0000002440)=@ethernet={0x0, @broadcast}, &(0x7f0000000100)=0x80) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x134, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0xfd, 0x7, 0x1, 0x0, "546e53ed93e8716e84028c33735b9073d28572ebeb73cecd54f7bf58a3fd79b67f8520887925023c7b55f38de9a7e0948cf51df8c184c9da8146028b71b82c130feffbc918f4759b9a7ba4f4055547b28c9694c72c840e6dd55a01e384a269b82ff99f098e3cadfff1f6594f31462e167072cfddb1ab95bec133c694519bc2b3c44e9b086b6c11ce2b061479248dcc319b8184e47c25efd207d092a69334a5ac71b7a5afdabe1bb4729ed599e0d8ed43c57275b556c9a116393da9c0905ceff901edd519e73ce3f7ebcb5d9a6ad725133aa7b23896fc28d569214ee8e4b06fc595738d8f633d94c5ec40b2ded0f4f66cdf35729d9e4b00c1f7"}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x1a8}}, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES64], 0x0) syz_usb_control_io(r7, 0x0, 0x0) 3.979188941s ago: executing program 1 (id=4378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) (async) r4 = syz_io_uring_setup(0x23d, &(0x7f00000000c0)={0x0, 0x1, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc010) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {0x0, 0xfff1}, {0x0, 0x7}}}, 0x24}}, 0x4044040) (async) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4}}}}}]}}]}}, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa500, 0x0) ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f00000000c0)=""/61) syz_usb_control_io(r10, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async) syz_usb_control_io$hid(r10, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220d0000005b020a141b7ab8e917d03408ac8fd4af14c22c5af973381d5db08e75965e23eed178385805571d113d2e5fad3fcbe20b524af9a678b684b152e974ef2f8f399c701522cd9191fd7d41c519285d9f35ee1b29f4e4a129c12d92c5"], 0x0}, 0x0) 3.544200545s ago: executing program 1 (id=4379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6(0xa, 0x80002, 0x88) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000540)="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", 0x0, &(0x7f0000001540), &(0x7f0000000100), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4, 0x0, 0xc00000000000000}, 0x38) 2.70681403s ago: executing program 2 (id=4380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.197801598s ago: executing program 0 (id=4381): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000000740)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a3b83000000000000000005000008fd00024000000002040006000900010073797a310000000014"], 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x3, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7c, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x80000000, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x9, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x7, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x5, 0x7, 0x7fff, 0x5a80, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x8, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc46, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x8, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x2, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x738, 0x1, 0x6c1b, 0x80, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000200)={0x3, @vbi={0x6, 0x8, 0x3, 0x34363248, [0x6, 0x2], [0x4, 0x38], 0x1}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 2.095927557s ago: executing program 1 (id=4382): r0 = gettid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x10, 0xf, 0xdf, 0x41, 0xa17c, 0xfd}, &(0x7f0000000040)=0x9c) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="100a0600090901000c"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e20, @multicast1}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e21, @multicast1}, 'macvlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x40d, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x10, 0x12108}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x10000}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4805}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000004c0)={0x0, 0xf7, "d0dd12de3f400553982b7eec4ce6524c10425d7afccac374a75acb82a708e98ec5cadc70db922cda0314fce665383ebe292e5a1540b5a43d3dde0181c6ad4b6fff870ea4c1e407ca81baf7344075147a42331dbd98ef4be5268d71615798b52b9156a544789f915763532bc1cb6380afebce6846be81fb2fc73054f1294fd23b4373b30ad303ecafceff7ff226f8386a109b89f27f8b59888823065be78eb5977bce2f921ee903e221c9271c1b11858a0374d40f34ee429a925a53a2ec35927c9d33e8fe8880a8cee35e856e6c747c7cc594eb010db33cd6115072b13eca4490ad07c59e09c6b5e9471e4c1f03a919f04e697d7184cb4c"}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000100)=0x202, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r9, &(0x7f0000002680)='-1\x00', 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000200)=0x7ff, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) recvmmsg(r10, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00003a8000/0x4000)=nil, 0x4000, 0x1) gettid() 1.641452366s ago: executing program 0 (id=4383): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0xfffffffc) fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 1.305190013s ago: executing program 2 (id=4384): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket(0x1e, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x1, 0xb, 0x1, {{0xd, 0x4, 0x0, 0xf, 0x34, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x12, 0x1, [{0x7, 0x3, '\''}, {0x1, 0x2}, {0x2, 0x7, "6fe1d4e349"}]}, @lsrr={0x83, 0xb, 0x75, [@local, @loopback]}]}}}}}) sendmsg$nl_route_sched(r0, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/raw6\x00') preadv(r6, 0x0, 0x0, 0x8000, 0x5) ioctl$VHOST_VDPA_GET_VQS_COUNT(r6, 0x8004af80, &(0x7f0000000480)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000012c0)=@ipv6_newrule={0x1c, 0x20, 0x239262f87517baa9, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl1\x00', r4, 0x10, 0xf810, 0x2, 0x4, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @local}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 419.899905ms ago: executing program 5 (id=4385): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac", 0x5}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) symlink(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') readlink(&(0x7f0000000180)='./file0\x00', 0x0, 0x2f) bind$inet(r1, &(0x7f0000000240)={0x2, 0x3, @remote}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x8000d, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007"], 0x18}}], 0x2, 0x844) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001800110101000000000000000a0080000002ff080020000006001500060008000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 0s ago: executing program 5 (id=4386): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x27, 0x800000000004}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/4, 0x4}], 0x1}, 0x3}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r3, &(0x7f00000009c0)=[{&(0x7f0000001680)='0', 0x1}], 0x1) r4 = syz_pidfd_open(r2, 0x0) process_madvise(r4, 0x0, 0x0, 0x18, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020a86f34010fcffffffffffffff01090212000100e9500909046204e543cff905"], 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYRES16=r3], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[], 0x20) sendmmsg$sock(r0, &(0x7f00000044c0), 0x0, 0x40000) recvfrom(r1, &(0x7f0000000100)=""/61, 0x3d, 0x40, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)=':', 0x1, 0xc0, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) kernel console output (not intermixed with test programs): of length 0, skipping remainder of the config [ 1184.920753][ T8104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 1184.961226][ T8104] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1184.984571][ T8104] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1185.004293][ T43] usb 1-1: device descriptor read/64, error -71 [ 1185.032003][ T8104] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1185.040089][ T8104] usb 6-1: Manufacturer: syz [ 1185.068059][ T8104] usb 6-1: config 0 descriptor?? [ 1185.220341][T20693] AppArmor: change_hat: Invalid input '0x' [ 1185.226797][T20693] tipc: Failed to remove unknown binding: 66,1,1/0:448354024/448354026 [ 1185.242007][T20693] tipc: Failed to remove unknown binding: 66,1,1/0:448354024/448354026 [ 1185.286857][ T43] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 1185.657820][ T43] usb 1-1: device descriptor read/64, error -71 [ 1185.738464][T13548] usb 6-1: USB disconnect, device number 38 [ 1185.778544][T20697] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 1186.043763][ T43] usb usb1-port1: attempt power cycle [ 1186.093670][T20697] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 1186.401864][ T43] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 1186.421331][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028b28000: rx timeout, send abort [ 1186.430507][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028b28000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1186.432469][ T43] usb 1-1: device descriptor read/8, error -71 [ 1186.452506][ T5896] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1186.628673][ T5896] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1186.661359][ T5896] usb 3-1: config 0 has no interface number 0 [ 1186.681607][ T5896] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20 [ 1186.702646][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.720838][ T5896] usb 3-1: Product: syz [ 1186.725206][ T5895] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1186.741837][ T5896] usb 3-1: Manufacturer: syz [ 1186.746744][ T5896] usb 3-1: SerialNumber: syz [ 1186.768793][ T5896] usb 3-1: config 0 descriptor?? [ 1186.774323][ T43] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 1186.806538][ T5896] s2255 3-1:0.83: Could not find bulk-in endpoint [ 1186.821913][ T5896] Sensoray 2255 driver load failed: 0xfffffff4 [ 1186.832104][ T5896] s2255 3-1:0.83: probe with driver s2255 failed with error -12 [ 1186.840429][ T43] usb 1-1: device descriptor read/8, error -71 [ 1186.933612][ T5895] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1186.952463][ T43] usb usb1-port1: unable to enumerate USB device [ 1186.959121][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.988985][ T5895] usb 5-1: config 0 has no interface number 0 [ 1186.998789][ T5895] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1187.007320][T17171] usb 3-1: USB disconnect, device number 117 [ 1187.010521][ T5895] usb 5-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1187.044076][ T5895] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1187.055750][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.082762][ T5895] usb 5-1: config 0 descriptor?? [ 1187.106953][ T5895] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1187.141744][T20713] fuse: Unknown parameter '00000000000000000003' [ 1187.145274][T20714] fuse: Unknown parameter '00000000000000000003' [ 1187.327852][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'. [ 1187.496389][T13548] usb 5-1: USB disconnect, device number 109 [ 1187.662919][T20725] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3986'. [ 1190.407585][T20754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1190.417078][T20764] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1190.451452][T20764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1190.474233][T20754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1190.799507][T20754] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3992'. [ 1190.812021][ T5895] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1190.971884][ T5895] usb 1-1: device descriptor read/64, error -71 [ 1191.200246][ T5896] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1191.434411][ T5895] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1191.576713][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1191.587368][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1191.600045][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1191.621856][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1191.640127][ T5895] usb 1-1: device descriptor read/64, error -71 [ 1191.654581][ T5896] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1191.664476][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.675147][ T5896] usb 3-1: Product: syz [ 1191.679443][ T5896] usb 3-1: Manufacturer: syz [ 1191.684552][ T5896] usb 3-1: SerialNumber: syz [ 1191.748599][ T5896] usb 3-1: config 0 descriptor?? [ 1191.755817][ T5895] usb usb1-port1: attempt power cycle [ 1191.780744][ T5896] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1191.974863][T20773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.990073][T20773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.055091][ T5896] scsi host1: usb-storage 3-1:0.0 [ 1192.112011][ T5895] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1192.146378][ T5895] usb 1-1: device descriptor read/8, error -71 [ 1192.265133][T20792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.290328][T20773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.291592][T20792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.302134][T20773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.400281][ T5896] usb 3-1: USB disconnect, device number 118 [ 1192.412284][ T5895] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1192.458641][ T5895] usb 1-1: device descriptor read/8, error -71 [ 1192.577234][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4006'. [ 1192.618629][ T5895] usb usb1-port1: unable to enumerate USB device [ 1193.012117][T13548] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1193.161976][T13548] usb 3-1: Using ep0 maxpacket: 16 [ 1193.204685][T13548] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.321110][T13548] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1193.368394][T13548] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1193.444691][T13548] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1193.501693][T13548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.558816][T13548] usb 3-1: Product: syz [ 1193.581146][T13548] usb 3-1: Manufacturer: syz [ 1193.602758][T13548] usb 3-1: SerialNumber: syz [ 1193.961936][ T5917] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1194.108245][T13548] usb-storage 3-1:1.2: USB Mass Storage device detected [ 1194.132597][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1194.147783][ T5917] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1194.171931][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.190555][ T5917] usb 6-1: Product: syz [ 1194.200448][ T5917] usb 6-1: Manufacturer: syz [ 1194.214710][ T5917] usb 6-1: SerialNumber: syz [ 1194.263637][ T5917] usb 6-1: config 0 descriptor?? [ 1194.272177][T13548] usb 3-1: USB disconnect, device number 119 [ 1194.514412][ T5917] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1194.718686][T20819] veth0_to_batadv: entered promiscuous mode [ 1195.365581][T20841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1196.678321][T20867] netlink: 'syz.0.4029': attribute type 1 has an invalid length. [ 1196.766579][T20867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1196.784829][T20867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1196.983315][T20869] bond1: (slave gretap1): making interface the new active one [ 1197.120692][T20869] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1197.692000][ T5896] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1197.842992][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1197.940129][ T5917] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1198.318229][ T5917] usb 6-1: USB disconnect, device number 39 [ 1198.482463][ T5896] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1198.511257][T20894] loop8: detected capacity change from 0 to 7 [ 1198.522503][ T6057] Dev loop8: unable to read RDB block 7 [ 1198.535495][ T6057] loop8: unable to read partition table [ 1198.541614][ T6057] loop8: partition table beyond EOD, truncated [ 1198.556149][T20894] Dev loop8: unable to read RDB block 7 [ 1198.563057][T20894] loop8: unable to read partition table [ 1198.569165][T20894] loop8: partition table beyond EOD, truncated [ 1198.576570][T20894] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1198.633708][ T5896] usb 2-1: device descriptor read/64, error -71 [ 1198.772520][ T5896] usb usb2-port1: attempt power cycle [ 1198.794977][T20898] FAULT_INJECTION: forcing a failure. [ 1198.794977][T20898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.849930][T20898] CPU: 1 UID: 0 PID: 20898 Comm: syz.5.4040 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1198.849960][T20898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.849972][T20898] Call Trace: [ 1198.849980][T20898] [ 1198.849989][T20898] dump_stack_lvl+0x189/0x250 [ 1198.850023][T20898] ? __pfx____ratelimit+0x10/0x10 [ 1198.850051][T20898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.850079][T20898] ? __pfx__printk+0x10/0x10 [ 1198.850101][T20898] ? __might_fault+0xb0/0x130 [ 1198.850132][T20898] should_fail_ex+0x414/0x560 [ 1198.850158][T20898] _copy_from_iter+0x1db/0x16f0 [ 1198.850191][T20898] ? rcu_is_watching+0x15/0xb0 [ 1198.850220][T20898] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1198.850241][T20898] ? __pfx__copy_from_iter+0x10/0x10 [ 1198.850270][T20898] ? __build_skb_around+0x257/0x3e0 [ 1198.850296][T20898] ? netlink_sendmsg+0x642/0xb30 [ 1198.850315][T20898] ? skb_put+0x11b/0x210 [ 1198.850340][T20898] netlink_sendmsg+0x6b2/0xb30 [ 1198.850373][T20898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.850399][T20898] ? aa_sock_msg_perm+0x94/0x160 [ 1198.850425][T20898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1198.850450][T20898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1198.850473][T20898] __sock_sendmsg+0x219/0x270 [ 1198.850505][T20898] ____sys_sendmsg+0x505/0x830 [ 1198.850534][T20898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.850568][T20898] ? import_iovec+0x74/0xa0 [ 1198.850591][T20898] ___sys_sendmsg+0x21f/0x2a0 [ 1198.850617][T20898] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.850680][T20898] ? __fget_files+0x2a/0x420 [ 1198.850700][T20898] ? __fget_files+0x3a0/0x420 [ 1198.850733][T20898] __x64_sys_sendmsg+0x19b/0x260 [ 1198.850759][T20898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.850793][T20898] ? __pfx_ksys_write+0x10/0x10 [ 1198.850809][T20898] ? rcu_is_watching+0x15/0xb0 [ 1198.850841][T20898] ? do_syscall_64+0xbe/0x3b0 [ 1198.850863][T20898] do_syscall_64+0xfa/0x3b0 [ 1198.850878][T20898] ? lockdep_hardirqs_on+0x9c/0x150 [ 1198.850904][T20898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.850930][T20898] ? clear_bhb_loop+0x60/0xb0 [ 1198.850959][T20898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.850977][T20898] RIP: 0033:0x7f12e018e929 [ 1198.850995][T20898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.851012][T20898] RSP: 002b:00007f12e1053038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.851034][T20898] RAX: ffffffffffffffda RBX: 00007f12e03b5fa0 RCX: 00007f12e018e929 [ 1198.851048][T20898] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 1198.851061][T20898] RBP: 00007f12e1053090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.851079][T20898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.851091][T20898] R13: 0000000000000000 R14: 00007f12e03b5fa0 R15: 00007f12e04dfa28 [ 1198.851122][T20898] [ 1199.136018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.282085][ T1067] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1199.443776][ T5896] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1199.445246][ T1067] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1199.462530][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1199.469991][ T1067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.537623][ T1067] usb 5-1: config 0 descriptor?? [ 1199.564533][ T1067] pwc: Samsung MPC-C10 USB webcam detected. [ 1199.712094][ T5896] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1199.736472][ T5896] usb 2-1: device descriptor read/8, error -71 [ 1199.760581][ T1067] pwc: send_video_command error -71 [ 1199.770014][ T1067] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1199.779199][ T1067] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1199.793913][ T1067] usb 5-1: USB disconnect, device number 110 [ 1199.852479][ T5896] usb usb2-port1: unable to enumerate USB device [ 1200.232175][ T5896] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1200.397397][ T5896] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1200.502284][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.637689][T20924] loop8: detected capacity change from 0 to 7 [ 1200.646354][ T5896] usb 5-1: config 0 descriptor?? [ 1200.647667][T20924] Dev loop8: unable to read RDB block 7 [ 1200.658868][T20924] loop8: unable to read partition table [ 1200.708284][ T5896] pwc: Samsung MPC-C10 USB webcam detected. [ 1200.714719][T20924] loop8: partition table beyond EOD, truncated [ 1200.772914][T20929] FAULT_INJECTION: forcing a failure. [ 1200.772914][T20929] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.786116][T20929] CPU: 1 UID: 0 PID: 20929 Comm: syz.2.4053 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1200.786152][T20929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1200.786169][T20929] Call Trace: [ 1200.786179][T20929] [ 1200.786187][T20929] dump_stack_lvl+0x189/0x250 [ 1200.786221][T20929] ? __pfx____ratelimit+0x10/0x10 [ 1200.786248][T20929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.786277][T20929] ? __pfx__printk+0x10/0x10 [ 1200.786304][T20929] ? ref_tracker_alloc+0x318/0x460 [ 1200.786331][T20929] should_fail_ex+0x414/0x560 [ 1200.786360][T20929] should_failslab+0xa8/0x100 [ 1200.786383][T20929] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1200.786413][T20929] ? skb_clone+0x212/0x3a0 [ 1200.786442][T20929] skb_clone+0x212/0x3a0 [ 1200.786471][T20929] __netlink_deliver_tap+0x404/0x850 [ 1200.786507][T20929] ? netlink_deliver_tap+0x2e/0x1b0 [ 1200.786530][T20929] netlink_deliver_tap+0x19c/0x1b0 [ 1200.786552][T20929] netlink_unicast+0x72f/0x8d0 [ 1200.786583][T20929] netlink_sendmsg+0x805/0xb30 [ 1200.786614][T20929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.786639][T20929] ? aa_sock_msg_perm+0x94/0x160 [ 1200.786663][T20929] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1200.786685][T20929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.786709][T20929] __sock_sendmsg+0x219/0x270 [ 1200.786741][T20929] ____sys_sendmsg+0x505/0x830 [ 1200.786772][T20929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.786806][T20929] ? import_iovec+0x74/0xa0 [ 1200.786831][T20929] ___sys_sendmsg+0x21f/0x2a0 [ 1200.786857][T20929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.786921][T20929] ? __fget_files+0x2a/0x420 [ 1200.786940][T20929] ? __fget_files+0x3a0/0x420 [ 1200.786974][T20929] __x64_sys_sendmsg+0x19b/0x260 [ 1200.787001][T20929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1200.787036][T20929] ? __pfx_ksys_write+0x10/0x10 [ 1200.787051][T20929] ? rcu_is_watching+0x15/0xb0 [ 1200.787086][T20929] ? do_syscall_64+0xbe/0x3b0 [ 1200.787108][T20929] do_syscall_64+0xfa/0x3b0 [ 1200.787124][T20929] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.787157][T20929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.787175][T20929] ? clear_bhb_loop+0x60/0xb0 [ 1200.787196][T20929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.787211][T20929] RIP: 0033:0x7f9d3538e929 [ 1200.787230][T20929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.787246][T20929] RSP: 002b:00007f9d361ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.787265][T20929] RAX: ffffffffffffffda RBX: 00007f9d355b5fa0 RCX: 00007f9d3538e929 [ 1200.787279][T20929] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 1200.787291][T20929] RBP: 00007f9d361ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.787303][T20929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.787312][T20929] R13: 0000000000000000 R14: 00007f9d355b5fa0 R15: 00007f9d356dfa28 [ 1200.787337][T20929] [ 1200.795519][T20924] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1200.851687][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804eb57800: rx timeout, send abort [ 1201.099804][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804eb57800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1201.630919][ T5896] pwc: send_video_command error -71 [ 1201.675546][ T5896] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1201.686961][T20922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1201.788750][ T5896] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1201.964234][ T5896] usb 5-1: USB disconnect, device number 111 [ 1201.981901][T18005] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1202.173568][T18005] usb 3-1: device descriptor read/64, error -71 [ 1202.232088][T13548] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1202.414465][T18005] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1202.427186][T13548] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1202.438729][T13548] usb 2-1: config 0 has no interface number 0 [ 1202.456947][T13548] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1202.469490][T13548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.473067][T20948] netlink: 'syz.0.4060': attribute type 1 has an invalid length. [ 1202.487554][T13548] usb 2-1: Product: syz [ 1202.496390][T13548] usb 2-1: Manufacturer: syz [ 1202.501122][T13548] usb 2-1: SerialNumber: syz [ 1202.519214][T20948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1202.523411][T13548] usb 2-1: config 0 descriptor?? [ 1202.535777][T20946] netlink: 'syz.4.4059': attribute type 13 has an invalid length. [ 1202.568321][T20946] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:4096 [ 1202.587340][T18005] usb 3-1: device descriptor read/64, error -71 [ 1202.657528][T20958] loop4: detected capacity change from 0 to 1 [ 1202.669081][T20958] Dev loop4: unable to read RDB block 1 [ 1202.675592][T20958] loop4: unable to read partition table [ 1202.681445][T20958] loop4: partition table beyond EOD, truncated [ 1202.688226][T20958] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 1202.702355][T18005] usb usb3-port1: attempt power cycle [ 1202.711914][ T8104] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1202.747941][T13548] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1202.774934][T13548] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1202.797630][T13548] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1202.810240][T13548] usb 2-1: media controller created [ 1202.849352][T13548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1202.896265][ T8104] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.907569][ T8104] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1202.914567][ T8104] usb 6-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 1202.923982][ T8104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.936541][ T8104] usb 6-1: config 0 descriptor?? [ 1203.004653][T13548] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 1203.011409][T20962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.022061][T20962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.092011][T18005] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1203.124509][T18005] usb 3-1: device descriptor read/8, error -71 [ 1203.156147][T13548] usb 2-1: USB disconnect, device number 122 [ 1203.177639][T20950] xt_l2tp: v2 sid > 0xffff: 262144 [ 1203.402122][T18005] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1203.434205][ T8104] hid-generic 0003:0463:1215.0051: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.5-1/input0 [ 1203.453057][T18005] usb 3-1: device descriptor read/8, error -71 [ 1203.475660][T20966] loop8: detected capacity change from 0 to 7 [ 1203.484784][ T6057] Dev loop8: unable to read RDB block 7 [ 1203.490414][ T6057] loop8: unable to read partition table [ 1203.498264][ T6057] loop8: partition table beyond EOD, truncated [ 1203.506848][T20966] Dev loop8: unable to read RDB block 7 [ 1203.517293][T20966] loop8: unable to read partition table [ 1203.524533][T20966] loop8: partition table beyond EOD, truncated [ 1203.541187][T20966] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1203.575481][T18005] usb usb3-port1: unable to enumerate USB device [ 1203.615372][T13548] usb 6-1: USB disconnect, device number 40 [ 1204.072093][T20977] sctp: [Deprecated]: syz.1.4068 (pid 20977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1204.072093][T20977] Use struct sctp_sack_info instead [ 1204.433438][T13548] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1204.693769][T13548] usb 2-1: Using ep0 maxpacket: 16 [ 1204.703549][T13548] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1204.718548][T13548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.810255][T13548] usb 2-1: config 0 descriptor?? [ 1205.017591][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804da78c00: rx timeout, send abort [ 1205.026312][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804da78c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1205.454431][T13548] usbhid 2-1:0.0: can't add hid device: -71 [ 1205.471971][T13548] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1205.542215][T13548] usb 2-1: USB disconnect, device number 123 [ 1205.717573][T20998] netlink: 'syz.0.4073': attribute type 1 has an invalid length. [ 1205.889797][T20998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1206.260131][T21035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4080'. [ 1206.621977][T13548] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1209.405190][T21069] netlink: 'syz.4.4087': attribute type 1 has an invalid length. [ 1209.462355][T21069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1209.630285][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804f20d000: rx timeout, send abort [ 1209.639079][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804f20d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1209.715854][T21082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4090'. [ 1209.811951][ T5917] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1209.971919][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1209.996007][ T5917] usb 1-1: config 0 has an invalid interface number: 149 but max is 0 [ 1210.027111][ T5917] usb 1-1: config 0 has no interface number 0 [ 1210.051166][ T5917] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 1210.097229][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.106323][ T5917] usb 1-1: Product: syz [ 1210.110536][ T5917] usb 1-1: Manufacturer: syz [ 1210.125981][ T5917] usb 1-1: SerialNumber: syz [ 1210.131899][T13548] usb 3-1: device descriptor read/64, error -71 [ 1210.151034][ T5917] usb 1-1: config 0 descriptor?? [ 1210.382832][T13548] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1210.408251][ T5917] peak_usb 1-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 1210.427330][ T5917] peak_usb 1-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 1210.513431][ T5917] peak_usb 1-1:0.149: probe with driver peak_usb failed with error -71 [ 1210.526885][ T5917] usb 1-1: USB disconnect, device number 100 [ 1210.551897][T13548] usb 3-1: Using ep0 maxpacket: 8 [ 1210.567833][T13548] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1210.580240][T13548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.617322][T13548] usb 3-1: Product: syz [ 1210.696334][T13548] usb 3-1: Manufacturer: syz [ 1210.701001][T13548] usb 3-1: SerialNumber: syz [ 1210.758946][T13548] usb 3-1: config 0 descriptor?? [ 1210.788472][T13548] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1211.202829][T21105] bridge0: entered promiscuous mode [ 1211.302422][T21105] bond0: entered promiscuous mode [ 1211.307598][T21105] bond_slave_0: entered promiscuous mode [ 1211.314306][T21105] bond_slave_1: entered promiscuous mode [ 1211.537875][T21105] hsr1: entered allmulticast mode [ 1211.544610][T21105] bridge0: entered allmulticast mode [ 1211.552552][T21105] bond0: entered allmulticast mode [ 1211.559249][T21105] bond_slave_0: entered allmulticast mode [ 1211.568586][T21105] bond_slave_1: entered allmulticast mode [ 1211.652241][ T8104] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1211.765567][T21116] AppArmor: change_hat: Invalid input '0x' [ 1211.780874][T21116] tipc: Failed to remove unknown binding: 66,1,1/2131856816:3829710033/3829710035 [ 1211.797560][T21116] tipc: Failed to remove unknown binding: 66,1,1/2131856816:3829710033/3829710035 [ 1211.838617][T21081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.850385][T21081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.911997][ T8104] usb 6-1: Using ep0 maxpacket: 8 [ 1211.963045][ T8104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1211.973040][ T8104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1212.021569][ T8104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1212.158126][T13548] gspca_sonixj: reg_w1 err -110 [ 1212.202032][T13548] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1212.316733][ T8104] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1212.381201][ T8104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.514300][ T8104] usb 6-1: Product: syz [ 1212.696657][ T8104] usb 6-1: Manufacturer: syz [ 1212.739607][ T8104] usb 6-1: SerialNumber: syz [ 1212.769644][ T8104] usb 6-1: config 0 descriptor?? [ 1213.547019][T13548] usb 3-1: USB disconnect, device number 125 [ 1214.507443][ T30] kauditd_printk_skb: 323 callbacks suppressed [ 1214.507462][ T30] audit: type=1326 audit(1750747748.545:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21133 comm="syz.4.4105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f166af8e929 code=0x0 [ 1214.612010][ T8104] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1214.998843][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880298d5400: rx timeout, send abort [ 1215.007755][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880298d5400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1215.234518][ T8104] usb 3-1: config 0 has no interfaces? [ 1215.246574][ T8104] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1215.291331][ T8104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.366346][T13548] usb 6-1: USB disconnect, device number 41 [ 1215.417525][ T8104] usb 3-1: Product: syz [ 1215.436696][ T8104] usb 3-1: Manufacturer: syz [ 1215.441364][ T8104] usb 3-1: SerialNumber: syz [ 1215.538430][ T8104] usb 3-1: config 0 descriptor?? [ 1215.612842][ T43] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1215.772000][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1215.790662][ T43] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1215.804278][ T43] usb 1-1: config 0 has no interface number 0 [ 1215.830464][ T43] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1215.867587][ T43] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1215.877380][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.887648][ T43] usb 1-1: Product: syz [ 1215.892031][ T43] usb 1-1: Manufacturer: syz [ 1215.903888][ T43] usb 1-1: SerialNumber: syz [ 1215.925961][T21134] ptrace attach of "./syz-executor exec"[16233] was attempted by "./syz-executor exec"[21134] [ 1215.970426][ T43] usb 1-1: config 0 descriptor?? [ 1216.124576][T21157] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1216.371936][ T5895] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1216.531857][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1216.590525][ T5895] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1216.616612][ T5895] usb 2-1: config 0 has no interface number 0 [ 1216.702654][ T5896] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1216.743613][ T5895] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1216.796947][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.828049][ T5895] usb 2-1: Product: syz [ 1216.850410][ T5895] usb 2-1: Manufacturer: syz [ 1216.890119][ T5895] usb 2-1: SerialNumber: syz [ 1216.913823][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1216.925749][ T5896] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1216.934996][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.972336][ T5896] usb 5-1: Product: syz [ 1216.978921][ T5896] usb 5-1: Manufacturer: syz [ 1217.012272][ T5895] usb 2-1: config 0 descriptor?? [ 1217.027500][ T5896] usb 5-1: SerialNumber: syz [ 1217.068616][ T1067] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1217.180336][ T5895] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1217.201177][ T5896] usb 5-1: config 0 descriptor?? [ 1217.263149][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1217.346428][ T1067] usb 6-1: Using ep0 maxpacket: 16 [ 1217.371305][ T1067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.390916][ T5895] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1217.424349][ T1067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.433215][ T5895] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1217.452669][ T1067] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1217.480875][ T43] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1217.490102][ T43] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1217.527576][ T1067] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1217.531913][ T43] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1217.563751][ T1067] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.622138][ T43] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1217.730959][ T43] usb 1-1: USB disconnect, device number 101 [ 1217.763699][ T1067] usb 6-1: config 0 descriptor?? [ 1217.796444][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1217.806384][ T5895] usb 2-1: USB disconnect, device number 124 [ 1217.872517][T17171] usb 3-1: USB disconnect, device number 126 [ 1217.872967][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1217.961816][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1217.985010][ T5895] quatech2 2-1:0.51: device disconnected [ 1218.634788][T21163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.025521][ T5896] gspca_sonixj: reg_w1 err -110 [ 1219.081997][T21163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.093311][ T5917] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1219.112038][ T5896] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1219.242028][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1219.482229][ T5917] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1219.762890][ T5917] usb 2-1: device descriptor read/64, error -71 [ 1219.908119][T21183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.993621][ T5917] usb usb2-port1: attempt power cycle [ 1220.152037][T13548] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1220.343197][ T5918] usb 5-1: USB disconnect, device number 112 [ 1220.402139][ T5917] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1220.423314][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1220.442532][T13548] usb 1-1: Using ep0 maxpacket: 8 [ 1220.478585][T13548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1220.500207][T13548] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 1220.510141][T13548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.525430][T13548] usb 1-1: Product: syz [ 1220.568471][T13548] usb 1-1: Manufacturer: syz [ 1220.621862][T13548] usb 1-1: SerialNumber: syz [ 1220.661930][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1220.693442][T13548] usb 1-1: config 0 descriptor?? [ 1220.732920][ T5917] usb 2-1: device descriptor read/8, error -71 [ 1220.768809][T13548] usb 1-1: invalid MIDI EP [ 1220.783256][T13548] usb 1-1: snd-bcd2000: error during probing [ 1220.811363][T13548] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1220.854632][ T5917] usb usb2-port1: unable to enumerate USB device [ 1221.846231][ T30] audit: type=1326 audit(1750747755.865:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1221.868130][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88806dd0a000: rx timeout, send abort [ 1221.877755][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806dd0a000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1222.072602][ T5917] usb 1-1: USB disconnect, device number 102 [ 1222.151541][ T30] audit: type=1326 audit(1750747755.865:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1222.355146][ T30] audit: type=1326 audit(1750747755.865:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1222.423234][ T30] audit: type=1326 audit(1750747755.865:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1222.772022][ T30] audit: type=1326 audit(1750747755.865:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1222.856460][ T30] audit: type=1326 audit(1750747755.865:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1222.987749][ T30] audit: type=1326 audit(1750747755.865:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1223.128234][ T30] audit: type=1326 audit(1750747755.865:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1223.250941][ T30] audit: type=1326 audit(1750747755.865:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1223.354152][ T1067] usbhid 6-1:0.0: can't add hid device: -32 [ 1223.385910][ T1067] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1223.412407][ T30] audit: type=1326 audit(1750747755.865:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21186 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1224.202098][ T1067] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1224.464826][T21210] AppArmor: change_hat: Invalid input '0x' [ 1224.469134][T21210] tipc: Failed to remove unknown binding: 66,1,1/2131856816:2413682557/2413682559 [ 1224.485784][T21210] tipc: Failed to remove unknown binding: 66,1,1/2131856816:2413682557/2413682559 [ 1225.636145][ T5895] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1225.832388][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 1225.854168][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1225.881820][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1225.900486][T21229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1225.912122][T21229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1225.961000][ T5895] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1226.036267][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.072376][ T1067] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1226.091870][ T5895] usb 1-1: Product: syz [ 1226.116852][ T5895] usb 1-1: Manufacturer: syz [ 1226.121704][ T5895] usb 1-1: SerialNumber: syz [ 1226.148237][ T5895] usb 1-1: config 0 descriptor?? [ 1226.191890][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1226.242058][ T1067] usb 5-1: Using ep0 maxpacket: 32 [ 1226.262785][ T1067] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1226.298427][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.393778][ T1067] usb 5-1: Product: syz [ 1226.398422][ T1067] usb 5-1: Manufacturer: syz [ 1226.410808][ T1067] usb 5-1: SerialNumber: syz [ 1226.437818][ T1067] usb 5-1: config 0 descriptor?? [ 1226.615587][ T5917] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1226.626605][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.638682][ T5917] usb 3-1: Product: syz [ 1226.648881][ T5917] usb 3-1: Manufacturer: syz [ 1226.660508][T21228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1226.667536][ T5917] usb 3-1: SerialNumber: syz [ 1226.690326][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1226.804216][ T5917] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1226.814032][T13548] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1226.856090][ T1067] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1226.866821][ T1067] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1227.580931][T21229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.596590][T21229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.642969][ T1067] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1227.700859][ T1067] usb 5-1: USB disconnect, device number 113 [ 1227.846934][T13548] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1227.861013][T13548] ath9k_htc: Failed to initialize the device [ 1228.017025][T13548] usb 3-1: ath9k_htc: USB layer deinitialized [ 1230.221644][ T5895] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1230.300539][ T5895] usb 1-1: USB disconnect, device number 103 [ 1230.478537][ T5917] usb 3-1: USB disconnect, device number 2 [ 1230.618153][T21255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1230.656330][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803395e400: rx timeout, send abort [ 1230.667863][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803395e400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1231.024547][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1231.171995][ T43] usb 3-1: device descriptor read/64, error -71 [ 1231.325468][T13548] usb 6-1: USB disconnect, device number 42 [ 1231.441973][ T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1231.585349][ T43] usb 3-1: device descriptor read/64, error -71 [ 1231.721973][ T43] usb usb3-port1: attempt power cycle [ 1231.745698][T21262] pim6reg1: entered promiscuous mode [ 1231.788245][T21262] pim6reg1: entered allmulticast mode [ 1231.794304][T21268] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4139'. [ 1232.094502][ T43] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1232.144615][ T43] usb 3-1: device descriptor read/8, error -71 [ 1232.397975][ T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1232.437702][ T43] usb 3-1: device descriptor read/8, error -71 [ 1232.552245][ T43] usb usb3-port1: unable to enumerate USB device [ 1232.883853][ T43] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1233.028963][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 1233.053479][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 1233.128869][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 1233.138087][T21281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 1233.251874][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1233.263682][ T43] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1233.273227][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.281425][ T43] usb 1-1: Product: syz [ 1233.287369][ T43] usb 1-1: Manufacturer: syz [ 1233.292722][ T43] usb 1-1: SerialNumber: syz [ 1233.316451][ T43] usb 1-1: config 0 descriptor?? [ 1233.411858][ T8104] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1233.535920][T21277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1233.588002][ T8104] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1233.601103][ T8104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.610119][ T8104] usb 2-1: Product: syz [ 1233.614470][ T8104] usb 2-1: Manufacturer: syz [ 1233.619066][ T8104] usb 2-1: SerialNumber: syz [ 1233.733307][ T8104] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1233.879479][ T5896] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1234.430179][T21281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.449604][T21292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1234.506008][T21281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.032248][ T5896] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1235.039563][ T5896] ath9k_htc: Failed to initialize the device [ 1235.141438][ T5896] usb 2-1: ath9k_htc: USB layer deinitialized [ 1235.966661][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1235.978818][T21300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1236.311852][ T1067] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1236.550065][ T1067] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1236.559294][ T1067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.569807][ T1067] usb 6-1: Product: syz [ 1236.619092][ T1067] usb 6-1: Manufacturer: syz [ 1236.628930][ T1067] usb 6-1: SerialNumber: syz [ 1236.656139][ T1067] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1236.734780][ T5917] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1237.147556][T21300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.158591][T21300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.367268][ T8104] usb 2-1: USB disconnect, device number 3 [ 1237.752117][ T5917] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1237.765823][ T5917] ath9k_htc: Failed to initialize the device [ 1237.817894][ T5917] usb 6-1: ath9k_htc: USB layer deinitialized [ 1238.807708][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.814170][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.025676][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804d76f400: rx timeout, send abort [ 1239.034360][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804d76f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1239.352289][ T43] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1239.360614][ T43] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1239.563490][ T43] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1239.578869][ T43] usb 1-1: USB disconnect, device number 104 [ 1239.589208][ T1067] usb 6-1: USB disconnect, device number 43 [ 1239.676448][T21310] netlink: 'syz.2.4151': attribute type 1 has an invalid length. [ 1239.807787][T21310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1239.897334][T21312] bond2: (slave gretap1): making interface the new active one [ 1239.912318][ T5917] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1239.944011][ T43] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 1239.996018][T21312] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1240.111421][ T5917] usb 5-1: config 0 has no interfaces? [ 1240.125078][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1240.135524][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1240.148732][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.157761][ T43] usb 1-1: Product: syz [ 1240.162446][ T5917] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1240.162474][ T43] usb 1-1: Manufacturer: syz [ 1240.162493][ T43] usb 1-1: SerialNumber: syz [ 1240.171641][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.221452][ T5917] usb 5-1: Product: syz [ 1240.228264][ T5917] usb 5-1: Manufacturer: syz [ 1240.242992][ T5917] usb 5-1: SerialNumber: syz [ 1240.257357][ T5917] usb 5-1: config 0 descriptor?? [ 1240.322136][ T8104] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1240.382453][ T43] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1240.502619][ T43] usb 1-1: USB disconnect, device number 105 [ 1240.654714][ T43] usblp0: removed [ 1240.666585][ T8104] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1240.690108][ T8104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.725027][ T8104] usb 2-1: config 0 descriptor?? [ 1240.738933][ T8104] cp210x 2-1:0.0: cp210x converter detected [ 1240.762290][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1240.962397][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 1240.980965][ T5917] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1240.992472][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.001048][ T5917] usb 3-1: Product: syz [ 1241.007301][ T5917] usb 3-1: Manufacturer: syz [ 1241.178390][T21335] IPv6: addrconf: prefix option has invalid lifetime [ 1241.185481][T21335] IPv6: addrconf: prefix option has invalid lifetime [ 1241.233099][T21336] IPv6: addrconf: prefix option has invalid lifetime [ 1241.239839][T21336] IPv6: addrconf: prefix option has invalid lifetime [ 1241.296645][ T5917] usb 3-1: SerialNumber: syz [ 1241.319076][ T5917] usb 3-1: config 0 descriptor?? [ 1241.576536][T21327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.642887][ T5917] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1241.662725][ T5917] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1241.825810][ T5917] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1242.562155][ T5917] usb 3-1: USB disconnect, device number 7 [ 1242.845323][T17171] usb 5-1: USB disconnect, device number 114 [ 1243.220458][T21351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4161'. [ 1243.764318][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4162'. [ 1243.796392][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4162'. [ 1244.151942][T18005] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1244.454420][ T8104] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1244.464977][ T8104] cp210x 2-1:0.0: querying part number failed [ 1244.509897][T18005] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1244.521199][ T8104] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1244.543261][T18005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.593409][ T8104] usb 2-1: USB disconnect, device number 4 [ 1244.599435][T18005] usb 3-1: Product: syz [ 1244.611209][T18005] usb 3-1: Manufacturer: syz [ 1244.620540][ T8104] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1244.634441][T18005] usb 3-1: SerialNumber: syz [ 1244.644238][ T8104] cp210x 2-1:0.0: device disconnected [ 1244.656052][T21367] netlink: 'syz.1.4165': attribute type 1 has an invalid length. [ 1244.671363][T18005] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1244.718332][ T43] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1244.883223][T21367] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1245.101863][T17171] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1245.151870][T21358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.163371][T21358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.321492][T17171] usb 6-1: Using ep0 maxpacket: 16 [ 1245.383524][T17171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.429498][T17171] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.551894][T17171] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 1245.579147][T17171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.625365][T17171] usb 6-1: config 0 descriptor?? [ 1245.832108][ T5896] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1245.840317][ T43] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1245.851376][ T43] ath9k_htc: Failed to initialize the device [ 1245.991833][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 1246.186160][ T5896] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1246.212260][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 1246.218552][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.257792][ T5896] usb 2-1: Product: syz [ 1246.271680][ T5896] usb 2-1: Manufacturer: syz [ 1246.278241][ T5896] usb 2-1: SerialNumber: syz [ 1246.292040][T13548] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1246.294101][ T5896] usb 2-1: config 0 descriptor?? [ 1246.384304][T21393] sctp: [Deprecated]: syz.0.4172 (pid 21393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1246.384304][T21393] Use struct sctp_sack_info instead [ 1246.406235][T21393] netlink: 'syz.0.4172': attribute type 6 has an invalid length. [ 1246.635456][T21380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1246.682906][T13548] usb 5-1: config 0 has no interfaces? [ 1246.720089][T13548] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1246.795616][T13548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.806454][T13548] usb 5-1: Product: syz [ 1246.810805][T13548] usb 5-1: Manufacturer: syz [ 1246.817329][T13548] usb 5-1: SerialNumber: syz [ 1246.818032][ T5896] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1246.845003][ T5896] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1246.891533][T13548] usb 5-1: config 0 descriptor?? [ 1247.062459][ T5896] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1247.087083][ T5896] usb 2-1: USB disconnect, device number 5 [ 1247.392281][T13548] usb 3-1: USB disconnect, device number 8 [ 1247.587618][T21407] netlink: 'syz.1.4177': attribute type 1 has an invalid length. [ 1247.788505][T17171] usbhid 6-1:0.0: can't add hid device: -71 [ 1247.832921][T17171] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1247.918783][T17171] usb 6-1: USB disconnect, device number 44 [ 1248.045913][T21407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1248.161417][T21422] AppArmor: change_hat: Invalid input '0x' [ 1248.165358][T21422] tipc: Failed to remove unknown binding: 66,1,1/0:3009308587/3009308589 [ 1248.212776][T21422] tipc: Failed to remove unknown binding: 66,1,1/0:3009308587/3009308589 [ 1248.235065][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1248.972119][T13548] usb 5-1: USB disconnect, device number 115 [ 1249.904084][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1249.915771][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1249.958720][ T5896] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1250.182533][ T5896] usb 5-1: config 2 has an invalid interface number: 10 but max is 0 [ 1250.190989][ T5896] usb 5-1: config 2 has an invalid interface descriptor of length 2, skipping [ 1250.200010][ T8104] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1250.220323][ T5896] usb 5-1: config 2 has no interface number 0 [ 1250.232336][ T5896] usb 5-1: config 2 interface 10 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 1250.251006][ T5896] usb 5-1: config 2 interface 10 altsetting 12 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1250.268801][ T5896] usb 5-1: config 2 interface 10 has no altsetting 0 [ 1250.286704][ T5896] usb 5-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0c [ 1250.374291][T13548] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1250.385413][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.430026][ T5896] usb 5-1: Product: syz [ 1250.438369][ T5896] usb 5-1: Manufacturer: syz [ 1250.459383][ T5896] usb 5-1: SerialNumber: syz [ 1250.464883][ T8104] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1250.480459][ T8104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.500257][ T8104] usb 1-1: Product: syz [ 1250.514682][ T8104] usb 1-1: Manufacturer: syz [ 1250.520817][ T8104] usb 1-1: SerialNumber: syz [ 1250.531957][T13548] usb 3-1: Using ep0 maxpacket: 32 [ 1250.567812][ T8104] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1250.600641][T13548] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1250.635923][T13548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.671965][T13548] usb 3-1: Product: syz [ 1250.680421][T13548] usb 3-1: Manufacturer: syz [ 1250.716929][ T5896] ums-isd200 5-1:2.10: USB Mass Storage device detected [ 1251.025272][T13548] usb 3-1: SerialNumber: syz [ 1251.052345][ T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1251.052475][T13548] usb 3-1: config 0 descriptor?? [ 1251.133021][ T5896] usb 5-1: USB disconnect, device number 116 [ 1251.319357][T21445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.369031][T13548] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1251.415041][T13548] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1251.504878][T21443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.524230][T21443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.594475][T13548] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1251.638349][T13548] usb 3-1: USB disconnect, device number 9 [ 1251.809421][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1252.212403][ T43] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1252.242291][ T43] ath9k_htc: Failed to initialize the device [ 1252.299136][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 1252.753009][ T1067] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1252.796880][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1253.101919][ T1067] usb 5-1: device descriptor read/64, error -32 [ 1253.344440][ T1067] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1253.455787][T21464] team0 (unregistering): Port device team_slave_0 removed [ 1253.504424][ T1067] usb 5-1: config 0 has no interfaces? [ 1253.515194][ T1067] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1253.549211][T21484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4197'. [ 1253.558204][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.756677][ T1067] usb 5-1: Product: syz [ 1253.776710][ T1067] usb 5-1: Manufacturer: syz [ 1253.812120][T21464] team0 (unregistering): Port device team_slave_1 removed [ 1253.819371][ T1067] usb 5-1: SerialNumber: syz [ 1254.077656][ T1067] usb 5-1: config 0 descriptor?? [ 1254.119649][T21464] team0 (unregistering): Port device geneve0 removed [ 1254.794995][T17171] usb 1-1: USB disconnect, device number 106 [ 1255.529062][T17171] usb 5-1: USB disconnect, device number 118 [ 1255.989922][T21513] netlink: 'syz.0.4208': attribute type 2 has an invalid length. [ 1256.032423][T21513] netlink: 'syz.0.4208': attribute type 11 has an invalid length. [ 1256.040619][T17171] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1256.058549][T21513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1256.262383][T17171] usb 5-1: Using ep0 maxpacket: 32 [ 1256.279156][T21521] AppArmor: change_hat: Invalid input '0x' [ 1256.281304][T21521] tipc: Failed to remove unknown binding: 66,1,1/2131856816:1339225999/1339226001 [ 1256.299381][T21521] tipc: Failed to remove unknown binding: 66,1,1/2131856816:1339225999/1339226001 [ 1256.336306][T17171] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1256.349555][T17171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.413523][T17171] usb 5-1: Product: syz [ 1256.418204][T17171] usb 5-1: Manufacturer: syz [ 1256.432349][T17171] usb 5-1: SerialNumber: syz [ 1256.456380][T17171] usb 5-1: config 0 descriptor?? [ 1256.584335][T21530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1256.593305][ T43] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1256.717386][T21506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1256.760477][T17171] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1256.781871][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1256.788862][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.853451][T17171] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1256.862779][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1256.888716][ T43] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1256.900387][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.921370][ T43] usb 6-1: config 0 descriptor?? [ 1256.940337][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1256.963656][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1257.394756][T17171] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1257.438854][T17171] usb 5-1: USB disconnect, device number 119 [ 1257.491501][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.504084][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.511319][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.522667][ T5896] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1257.551888][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.561219][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.571628][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.629611][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.679272][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.713957][ T5896] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1257.725722][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.741909][ T5896] usb 1-1: Product: syz [ 1257.747106][ T43] hid-rmi 0003:06CB:81A7.0052: unknown main item tag 0x0 [ 1257.828238][ T5896] usb 1-1: Manufacturer: syz [ 1257.861855][ T5896] usb 1-1: SerialNumber: syz [ 1257.900994][ T5896] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1257.935283][T18005] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1258.036424][ T43] hid-rmi 0003:06CB:81A7.0052: unbalanced collection at end of report description [ 1258.064105][ T43] hid-rmi 0003:06CB:81A7.0052: parse failed [ 1258.071483][ T43] hid-rmi 0003:06CB:81A7.0052: probe with driver hid-rmi failed with error -22 [ 1258.258924][ T43] usb 6-1: USB disconnect, device number 45 [ 1258.376487][T21534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.392647][T21534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.049159][T18005] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1259.078418][T18005] ath9k_htc: Failed to initialize the device [ 1259.163954][T18005] usb 1-1: ath9k_htc: USB layer deinitialized [ 1259.181908][ T1067] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1259.455441][ T1067] usb 5-1: config 0 has no interfaces? [ 1259.468949][ T1067] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1259.478225][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.537483][ T1067] usb 5-1: Product: syz [ 1259.567403][ T1067] usb 5-1: Manufacturer: syz [ 1259.592918][ T1067] usb 5-1: SerialNumber: syz [ 1259.620860][ T1067] usb 5-1: config 0 descriptor?? [ 1260.604828][T21557] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 1260.930043][T18005] usb 1-1: USB disconnect, device number 107 [ 1260.952538][T13548] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1261.091979][T13548] usb 3-1: device descriptor read/64, error -71 [ 1261.336548][T17171] usb 5-1: USB disconnect, device number 120 [ 1261.354064][T13548] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1261.424964][T18005] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1261.435148][T21570] netlink: 'syz.4.4226': attribute type 1 has an invalid length. [ 1261.461855][T21570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1261.493785][T13548] usb 3-1: device descriptor read/64, error -71 [ 1261.549176][T21574] netlink: 'syz.4.4227': attribute type 1 has an invalid length. [ 1261.582016][T18005] usb 1-1: Using ep0 maxpacket: 32 [ 1261.604618][T18005] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1261.613326][T13548] usb usb3-port1: attempt power cycle [ 1261.624879][T18005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.635210][T18005] usb 1-1: Product: syz [ 1261.639422][T18005] usb 1-1: Manufacturer: syz [ 1261.645144][T18005] usb 1-1: SerialNumber: syz [ 1261.655609][T18005] usb 1-1: config 0 descriptor?? [ 1261.793811][T17171] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1261.866839][T21568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.900437][T18005] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1261.934009][T21580] AppArmor: change_hat: Invalid input '0x' [ 1261.937194][T21580] tipc: Failed to remove unknown binding: 66,1,1/0:3806538205/3806538207 [ 1261.952491][T21580] tipc: Failed to remove unknown binding: 66,1,1/0:3806538205/3806538207 [ 1262.016110][T18005] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1262.042025][T13548] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1262.063873][T13548] usb 3-1: device descriptor read/8, error -71 [ 1262.063879][T18005] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1262.068293][T18005] usb 1-1: USB disconnect, device number 108 [ 1262.070560][T17171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.102152][T17171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.113269][T17171] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1262.122502][T17171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.243164][T17171] usb 5-1: config 0 descriptor?? [ 1262.331929][T13548] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1262.352789][T13548] usb 3-1: device descriptor read/8, error -71 [ 1262.462308][T13548] usb usb3-port1: unable to enumerate USB device [ 1262.952551][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1263.542382][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'. [ 1263.555090][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'. [ 1263.814181][T18005] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1264.044659][T18005] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1264.064787][T18005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.089366][T18005] usb 6-1: Product: syz [ 1264.100331][T18005] usb 6-1: Manufacturer: syz [ 1264.126691][T18005] usb 6-1: SerialNumber: syz [ 1264.241846][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1264.265970][T18005] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1264.318662][ T8104] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1264.454631][ T43] usb 3-1: config 0 has no interfaces? [ 1264.466521][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1264.476051][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.493247][ T43] usb 3-1: Product: syz [ 1264.569491][ T43] usb 3-1: Manufacturer: syz [ 1264.588295][ T43] usb 3-1: SerialNumber: syz [ 1264.599033][T17171] usbhid 5-1:0.0: can't add hid device: -71 [ 1264.605951][T17171] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1264.620906][ T43] usb 3-1: config 0 descriptor?? [ 1264.733670][T21601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.753122][T21601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.903731][T17171] usb 5-1: USB disconnect, device number 121 [ 1265.520174][ T8104] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1265.527547][ T8104] ath9k_htc: Failed to initialize the device [ 1265.572107][ T8104] usb 6-1: ath9k_htc: USB layer deinitialized [ 1266.051946][T18005] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1266.213423][T18005] usb 1-1: Using ep0 maxpacket: 32 [ 1266.229895][T18005] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1266.241082][T18005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.253560][T18005] usb 1-1: Product: syz [ 1266.257984][T18005] usb 1-1: Manufacturer: syz [ 1266.264837][T18005] usb 1-1: SerialNumber: syz [ 1266.285785][T18005] usb 1-1: config 0 descriptor?? [ 1266.411936][T17171] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1266.462565][T13548] usb 6-1: USB disconnect, device number 46 [ 1266.523793][T21622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.562218][T17171] usb 5-1: Using ep0 maxpacket: 8 [ 1266.579550][T18005] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1266.590405][T17171] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1266.606448][T21628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4243'. [ 1266.606961][T18005] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1266.617271][T17171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.641466][T17171] usb 5-1: Product: syz [ 1266.651424][T17171] usb 5-1: Manufacturer: syz [ 1266.660194][T17171] usb 5-1: SerialNumber: syz [ 1266.669545][T17171] usb 5-1: config 0 descriptor?? [ 1266.684260][T18005] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1266.719818][T18005] usb 1-1: USB disconnect, device number 109 [ 1266.845284][T21632] AppArmor: change_hat: Invalid input '0x' [ 1266.859955][T21632] tipc: Failed to remove unknown binding: 66,1,1/0:1154825614/1154825616 [ 1266.878730][T21632] tipc: Failed to remove unknown binding: 66,1,1/0:1154825614/1154825616 [ 1266.924274][T17171] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1266.933115][ T1067] usb 3-1: USB disconnect, device number 14 [ 1266.969352][T21636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4245'. [ 1267.179197][T21640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4248'. [ 1267.382297][ T1067] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1267.403443][T17171] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1267.453017][T17171] usb 5-1: USB disconnect, device number 122 [ 1267.562067][ T8104] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1267.606170][ T1067] usb 3-1: Using ep0 maxpacket: 8 [ 1267.655409][ T1067] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1267.694945][ T1067] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1267.712211][ T8104] usb 1-1: device descriptor read/64, error -71 [ 1267.715440][ T1067] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1267.734546][ T1067] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1267.744911][ T1067] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1267.849771][ T1067] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1267.887247][ T1067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.962131][ T8104] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1268.058042][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1268.103563][ T8104] usb 1-1: device descriptor read/64, error -71 [ 1268.168588][ T1067] usb 3-1: usb_control_msg returned -32 [ 1268.189945][ T1067] usbtmc 3-1:16.0: can't read capabilities [ 1268.222637][ T8104] usb usb1-port1: attempt power cycle [ 1268.701872][ T8104] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1268.767044][ T8104] usb 1-1: device descriptor read/8, error -71 [ 1269.011990][ T8104] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1269.042877][ T8104] usb 1-1: device descriptor read/8, error -71 [ 1269.172310][ T8104] usb usb1-port1: unable to enumerate USB device [ 1269.424019][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4253'. [ 1269.434287][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4253'. [ 1269.761907][ T1067] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1269.943842][ T1067] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1269.990660][ T1067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.024217][ T1067] usb 6-1: Product: syz [ 1270.028452][ T1067] usb 6-1: Manufacturer: syz [ 1270.072491][ T1067] usb 6-1: SerialNumber: syz [ 1270.127908][ T5896] usb 3-1: USB disconnect, device number 15 [ 1270.390020][ T1067] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1270.496759][T17171] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1270.695188][T21674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1270.801915][ T1067] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1270.912673][T21662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.923042][T21662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.023911][ T1067] usb 1-1: config 0 has no interfaces? [ 1271.061857][T18005] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1271.205833][ T1067] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1271.215612][ T1067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.255272][ T1067] usb 1-1: Product: syz [ 1271.260316][ T1067] usb 1-1: Manufacturer: syz [ 1271.265514][T18005] usb 5-1: Using ep0 maxpacket: 32 [ 1271.266555][ T1067] usb 1-1: SerialNumber: syz [ 1271.343891][ T1067] usb 1-1: config 0 descriptor?? [ 1271.356147][T18005] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1271.376152][T18005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.407893][T18005] usb 5-1: Product: syz [ 1271.427900][T18005] usb 5-1: Manufacturer: syz [ 1271.440093][T18005] usb 5-1: SerialNumber: syz [ 1271.465942][T18005] usb 5-1: config 0 descriptor?? [ 1271.600397][T17171] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1271.608226][T17171] ath9k_htc: Failed to initialize the device [ 1271.651036][T17171] usb 6-1: ath9k_htc: USB layer deinitialized [ 1271.690732][T21676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1271.740015][T18005] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1271.779348][T18005] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1272.215250][T18005] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1272.227786][T18005] usb 5-1: USB disconnect, device number 123 [ 1272.329278][T21687] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1272.343789][T21687] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1272.353872][T21687] netlink: 'syz.2.4262': attribute type 6 has an invalid length. [ 1272.366509][T21687] netlink: 'syz.2.4262': attribute type 5 has an invalid length. [ 1272.375358][T21687] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1272.689039][ T30] kauditd_printk_skb: 392 callbacks suppressed [ 1272.689060][ T30] audit: type=1326 audit(1750747806.725:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1272.801083][ T30] audit: type=1326 audit(1750747806.725:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1273.037259][T21695] AppArmor: change_hat: Invalid input '0x' [ 1273.047972][T21695] tipc: Failed to remove unknown binding: 66,1,1/0:2558222719/2558222721 [ 1273.063375][ T30] audit: type=1326 audit(1750747806.765:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1273.108509][T18005] usb 6-1: USB disconnect, device number 47 [ 1273.163097][ T30] audit: type=1326 audit(1750747806.775:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1273.205285][T21695] tipc: Failed to remove unknown binding: 66,1,1/0:2558222719/2558222721 [ 1273.256408][ T30] audit: type=1326 audit(1750747806.775:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1273.278881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.376788][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4264'. [ 1273.421416][T18005] usb 1-1: USB disconnect, device number 114 [ 1273.594911][ T30] audit: type=1326 audit(1750747806.775:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1273.692424][T21710] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4266'. [ 1273.779362][ T30] audit: type=1326 audit(1750747806.775:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1273.986590][ T30] audit: type=1326 audit(1750747806.775:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1274.009333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.046770][ T30] audit: type=1326 audit(1750747806.775:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1274.072342][ T30] audit: type=1326 audit(1750747806.775:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21686 comm="syz.2.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1274.094809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.102068][T17171] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1274.300263][T21716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4268'. [ 1274.341900][T17171] usb 1-1: device descriptor read/64, error -71 [ 1274.975223][T17171] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1275.112062][T17171] usb 1-1: device descriptor read/64, error -71 [ 1275.222190][T17171] usb usb1-port1: attempt power cycle [ 1275.564254][T17171] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1275.593861][T17171] usb 1-1: device descriptor read/8, error -71 [ 1275.741864][ T5896] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1275.851861][T17171] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1275.862010][ T8104] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1275.872505][T17171] usb 1-1: device descriptor read/8, error -71 [ 1275.912210][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4275'. [ 1275.927711][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 1275.940395][ T5896] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1275.953216][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.963369][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4275'. [ 1275.974683][ T5896] usb 5-1: Product: syz [ 1275.979457][ T5896] usb 5-1: Manufacturer: syz [ 1275.985916][ T5896] usb 5-1: SerialNumber: syz [ 1275.996089][T17171] usb usb1-port1: unable to enumerate USB device [ 1275.997714][ T5896] usb 5-1: config 0 descriptor?? [ 1276.021944][ T8104] usb 3-1: Using ep0 maxpacket: 32 [ 1276.041648][ T8104] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1276.054495][ T8104] usb 3-1: config 0 has no interface number 0 [ 1276.061982][ T8104] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.075416][ T8104] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1276.085797][ T8104] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1276.097010][ T8104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.107079][ T8104] usb 3-1: Product: syz [ 1276.111376][ T8104] usb 3-1: Manufacturer: syz [ 1276.116193][ T8104] usb 3-1: SerialNumber: syz [ 1276.125926][ T8104] usb 3-1: config 0 descriptor?? [ 1276.218781][T21727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.289448][ T5896] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1276.299794][ T5896] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1276.301845][T17171] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1276.338372][T21729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.347912][T21729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.443548][ T5896] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 1276.458358][ T5896] usb 5-1: USB disconnect, device number 124 [ 1276.562043][T13548] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1276.627063][T17171] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1276.640722][T17171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.668273][T17171] usb 6-1: Product: syz [ 1276.676282][T17171] usb 6-1: Manufacturer: syz [ 1276.680931][T17171] usb 6-1: SerialNumber: syz [ 1276.735275][T13548] usb 2-1: config 0 has no interfaces? [ 1276.757932][T17171] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1276.770853][T13548] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1276.797361][T13548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.820269][ T8104] appletouch 3-1:0.85: Geyser mode initialized. [ 1276.827108][T13548] usb 2-1: Product: syz [ 1276.831346][T13548] usb 2-1: Manufacturer: syz [ 1276.853053][ T8104] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input70 [ 1276.918087][T13548] usb 2-1: SerialNumber: syz [ 1276.946019][T13548] usb 2-1: config 0 descriptor?? [ 1276.999872][ T1067] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1277.102289][ T8104] usb 3-1: USB disconnect, device number 16 [ 1277.287589][ T8104] appletouch 3-1:0.85: input: appletouch disconnected [ 1277.332627][T18005] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1277.412171][T21734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.421672][T21734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.462694][ T5896] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1277.501830][T18005] usb 1-1: Using ep0 maxpacket: 8 [ 1277.518465][T18005] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1277.541527][T18005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.567668][T18005] usb 1-1: Product: syz [ 1277.574799][T18005] usb 1-1: Manufacturer: syz [ 1277.585426][T18005] usb 1-1: SerialNumber: syz [ 1277.650608][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1277.662118][T18005] usb 1-1: config 0 descriptor?? [ 1277.694689][T18005] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1277.713616][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1277.724006][ T5896] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1277.735001][ T5896] usb 5-1: can't read configurations, error -22 [ 1277.952287][ T5896] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1277.984097][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4279'. [ 1278.071943][ T1067] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1278.097970][ T1067] ath9k_htc: Failed to initialize the device [ 1278.144492][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1278.160052][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1278.170851][ T5896] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1278.185253][ T5896] usb 5-1: can't read configurations, error -22 [ 1278.199711][ T5896] usb usb5-port1: attempt power cycle [ 1278.275981][ T1067] usb 6-1: ath9k_htc: USB layer deinitialized [ 1278.558737][ T5896] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1278.670077][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4280'. [ 1278.687091][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1278.722189][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1278.819331][ T5896] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1278.875332][ T5896] usb 5-1: can't read configurations, error -22 [ 1278.939564][T21742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.950703][T21742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.031883][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1279.112957][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 1279.125343][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1279.146111][ T5896] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 1279.217144][T17171] usb 2-1: USB disconnect, device number 7 [ 1279.222127][T18005] gspca_sonixj: reg_w1 err -110 [ 1279.261975][T18005] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1279.308681][ T5896] usb 5-1: can't read configurations, error -22 [ 1279.331877][ T5896] usb usb5-port1: unable to enumerate USB device [ 1279.428010][ T5896] usb 6-1: USB disconnect, device number 48 [ 1280.623759][ T5896] usb 1-1: USB disconnect, device number 119 [ 1280.792153][T17171] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1280.954334][T17171] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1280.971807][T17171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.982195][T17171] usb 3-1: config 0 descriptor?? [ 1280.994639][T17171] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1281.085016][ T5896] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1281.261826][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 1281.281469][ T5896] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1281.322799][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.330857][ T5896] usb 1-1: Product: syz [ 1281.339011][ T5896] usb 1-1: Manufacturer: syz [ 1281.345440][ T5896] usb 1-1: SerialNumber: syz [ 1281.360925][ T5896] usb 1-1: config 0 descriptor?? [ 1281.400085][T17171] gspca_sunplus: reg_w_riv err -71 [ 1281.414519][T17171] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1281.457203][T17171] usb 3-1: USB disconnect, device number 17 [ 1281.570991][T21770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1281.617632][ T5896] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1281.640185][ T5896] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1281.732458][ T5896] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1281.751865][T18005] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1281.764880][ T5896] usb 1-1: USB disconnect, device number 120 [ 1281.911983][ T8104] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1281.949659][T18005] usb 6-1: config 0 has no interfaces? [ 1281.965711][T18005] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1282.000318][T18005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.027220][T18005] usb 6-1: Product: syz [ 1282.036509][T18005] usb 6-1: Manufacturer: syz [ 1282.042204][T18005] usb 6-1: SerialNumber: syz [ 1282.053714][T18005] usb 6-1: config 0 descriptor?? [ 1282.114043][ T8104] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1282.132510][ T8104] usb 2-1: config 1 has no interface number 0 [ 1282.139946][ T8104] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.163328][ T8104] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1282.209993][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1282.256961][ T8104] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1282.360290][ T8104] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1282.423568][ T8104] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1282.439320][ T8104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.458397][ T8104] usb 2-1: Product: syz [ 1282.467542][ T8104] usb 2-1: Manufacturer: syz [ 1282.490347][ T8104] usb 2-1: SerialNumber: syz [ 1282.752115][ T8104] cdc_ncm 2-1:1.1: bind() failure [ 1282.874666][ T8104] usb 2-1: USB disconnect, device number 8 [ 1283.994009][T13548] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1284.152650][T17171] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1284.181911][T13548] usb 1-1: Using ep0 maxpacket: 8 [ 1284.190922][T13548] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1284.210388][T13548] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 1284.240198][ T8104] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1284.298216][T13548] usb 1-1: config 8 has an invalid interface number: 242 but max is 1 [ 1284.307105][T13548] usb 1-1: config 8 has no interface number 0 [ 1284.313732][T17171] usb 3-1: Using ep0 maxpacket: 32 [ 1284.325479][T13548] usb 1-1: config 8 has no interface number 1 [ 1284.333691][T13548] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 1284.348612][T17171] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1284.358622][T17171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.369231][T17171] usb 3-1: Product: syz [ 1284.531832][ T8104] usb 2-1: Using ep0 maxpacket: 16 [ 1284.541779][T13548] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1284.561814][T17171] usb 3-1: Manufacturer: syz [ 1284.570392][T17171] usb 3-1: SerialNumber: syz [ 1284.574487][T21795] usb 6-1: USB disconnect, device number 49 [ 1284.579245][T13548] usb 1-1: config 8 interface 24 has no altsetting 0 [ 1284.592423][T17171] usb 3-1: config 0 descriptor?? [ 1284.611042][T13548] usb 1-1: config 8 interface 242 has no altsetting 0 [ 1284.670482][T13548] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1284.697004][T13548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.724075][T13548] usb 1-1: Product: syz [ 1284.737628][T13548] usb 1-1: Manufacturer: syz [ 1284.768651][T13548] usb 1-1: SerialNumber: syz [ 1284.789743][T21836] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4310'. [ 1284.803148][T21836] openvswitch: netlink: Flow key attr not present in new flow. [ 1285.054472][T21827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.062831][T21817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1285.125250][T17171] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1285.161391][T17171] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1285.234156][T17171] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1285.253485][T17171] usb 3-1: USB disconnect, device number 18 [ 1285.280913][ T5955] udevd[5955]: setting mode of /dev/bus/usb/003/018 to 020664 failed: No such file or directory [ 1285.304551][ T5955] udevd[5955]: setting owner of /dev/bus/usb/003/018 to uid=0, gid=0 failed: No such file or directory [ 1285.681475][T21842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4311'. [ 1286.001955][T17171] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1286.321930][T17171] usb 5-1: device descriptor read/64, error -71 [ 1286.800172][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4313'. [ 1286.861873][T17171] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1286.952155][T13548] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 1286.977524][ T8104] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1286.998830][ T8104] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1287.018531][ T8104] usb 2-1: can't read configurations, error -71 [ 1287.024667][T17171] usb 5-1: device descriptor read/64, error -71 [ 1287.079729][T13548] vmk80xx 1-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 1287.125905][T13548] usb 1-1: USB disconnect, device number 121 [ 1287.132893][T17171] usb usb5-port1: attempt power cycle [ 1287.483472][T17171] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1287.508071][T17171] usb 5-1: device descriptor read/8, error -71 [ 1287.774528][T17171] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1287.849348][T17171] usb 5-1: device descriptor read/8, error -71 [ 1287.972397][T17171] usb usb5-port1: unable to enumerate USB device [ 1288.001848][T21795] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1288.277740][T21795] usb 6-1: config 0 has no interfaces? [ 1288.303121][T21795] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1288.314607][T21795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.323964][T21795] usb 6-1: Product: syz [ 1288.329606][T21795] usb 6-1: Manufacturer: syz [ 1288.335044][T21795] usb 6-1: SerialNumber: syz [ 1288.344776][T21795] usb 6-1: config 0 descriptor?? [ 1288.622097][T21881] C: renamed from team_slave_0 [ 1288.632120][T21881] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1288.783298][T21795] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1288.942137][T21795] usb 3-1: Using ep0 maxpacket: 32 [ 1288.958254][T21795] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1288.973227][T21795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.991466][T21795] usb 3-1: Product: syz [ 1289.000072][T21795] usb 3-1: Manufacturer: syz [ 1289.005779][T21795] usb 3-1: SerialNumber: syz [ 1289.016930][T21795] usb 3-1: config 0 descriptor?? [ 1289.082322][T13548] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1289.222327][T13548] usb 5-1: device descriptor read/64, error -71 [ 1289.232594][T21879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.346040][T21795] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1289.358077][T21795] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1289.403378][T21795] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1289.416735][T21795] usb 3-1: USB disconnect, device number 19 [ 1289.463287][ T8104] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1289.561933][T13548] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1289.632073][ T8104] usb 1-1: Using ep0 maxpacket: 16 [ 1289.701913][T13548] usb 5-1: device descriptor read/64, error -71 [ 1289.812258][T13548] usb usb5-port1: attempt power cycle [ 1289.952165][T21891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1289.967405][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1289.967426][ T30] audit: type=1326 audit(1750747824.005:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1290.141184][ T30] audit: type=1326 audit(1750747824.005:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.191838][ T30] audit: type=1326 audit(1750747824.005:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3538e929 code=0x7ffc0000 [ 1290.214728][T13548] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1290.228075][ T30] audit: type=1326 audit(1750747824.005:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.265142][T13548] usb 5-1: device descriptor read/8, error -71 [ 1290.292339][ T30] audit: type=1326 audit(1750747824.005:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.368841][ T30] audit: type=1326 audit(1750747824.005:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.434407][ T30] audit: type=1326 audit(1750747824.005:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.461689][ T30] audit: type=1326 audit(1750747824.005:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.538665][ T30] audit: type=1326 audit(1750747824.005:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1290.581986][T13548] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1290.614509][T13548] usb 5-1: device descriptor read/8, error -71 [ 1290.711175][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'. [ 1290.729067][T21795] usb 6-1: USB disconnect, device number 50 [ 1290.747920][T13548] usb usb5-port1: unable to enumerate USB device [ 1290.820914][ T30] audit: type=1326 audit(1750747824.005:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21892 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9d3532ab19 code=0x7ffc0000 [ 1291.250050][T21906] loop8: detected capacity change from 0 to 7 [ 1291.307100][ T6057] Dev loop8: unable to read RDB block 7 [ 1291.338087][ T6057] loop8: unable to read partition table [ 1291.377535][ T6057] loop8: partition table beyond EOD, truncated [ 1291.406510][T21906] Dev loop8: unable to read RDB block 7 [ 1291.428772][T21906] loop8: unable to read partition table [ 1291.442295][T21906] loop8: partition table beyond EOD, truncated [ 1291.478234][T21906] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1291.955981][T21910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1292.025803][ T8104] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1292.040883][ T8104] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1292.058807][ T8104] usb 1-1: can't read configurations, error -71 [ 1292.431260][T21925] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 1292.603731][T21933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4339'. [ 1292.720875][ T8104] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1292.724639][T21925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1292.913120][ T8104] usb 1-1: Using ep0 maxpacket: 32 [ 1292.931369][ T8104] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1292.962154][T13548] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1292.993135][ T8104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.001210][ T8104] usb 1-1: Product: syz [ 1293.020244][ T8104] usb 1-1: Manufacturer: syz [ 1293.029569][ T8104] usb 1-1: SerialNumber: syz [ 1293.039519][T21944] syzkaller1: entered promiscuous mode [ 1293.048109][T21944] syzkaller1: entered allmulticast mode [ 1293.062557][ T8104] usb 1-1: config 0 descriptor?? [ 1293.065513][T21944] syzkaller1: left promiscuous mode [ 1293.073058][T21944] syzkaller1: left allmulticast mode [ 1293.132060][T21795] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1293.167050][T13548] usb 2-1: config 0 has no interfaces? [ 1293.189980][T13548] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1293.205063][T13548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.251613][T13548] usb 2-1: Product: syz [ 1293.268690][T13548] usb 2-1: Manufacturer: syz [ 1293.297356][T13548] usb 2-1: SerialNumber: syz [ 1293.324598][T21795] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1293.324673][T21923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.340489][T21795] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.359093][T13548] usb 2-1: config 0 descriptor?? [ 1293.387789][T21795] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1293.397306][T21795] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1293.409543][T21795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1293.428641][T21795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1293.488051][ T8104] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1293.520881][T21795] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1293.559633][T21948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.570088][ T8104] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1293.624821][T21795] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1293.646392][T21795] usb 5-1: Product: syz [ 1293.651019][T21795] usb 5-1: Manufacturer: syz [ 1293.670687][T21941] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1293.770097][T21795] cdc_wdm 5-1:1.0: skipping garbage [ 1293.779313][ T8104] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1293.804339][ T8104] usb 1-1: USB disconnect, device number 123 [ 1294.014141][T21795] cdc_wdm 5-1:1.0: skipping garbage [ 1294.051031][T21795] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1294.067389][T21795] cdc_wdm 5-1:1.0: Unknown control protocol [ 1294.147659][ T5895] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1294.232650][T13548] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1294.413232][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1294.421754][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.428505][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.434828][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.441480][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.447839][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.454458][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.460749][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.467370][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.473817][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.473975][T13548] usb 3-1: device descriptor read/64, error -71 [ 1294.480448][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.494460][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.501189][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.507816][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.514417][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.520675][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.527272][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.533628][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.540242][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.546496][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1294.553110][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1294.560545][ T5895] usb 6-1: config 6 has an invalid interface number: 122 but max is 0 [ 1294.568982][ T5895] usb 6-1: config 6 has no interface number 0 [ 1294.575427][ T5895] usb 6-1: config 6 interface 122 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1294.597579][ T5895] usb 6-1: config 6 interface 122 has no altsetting 0 [ 1294.610608][ T5895] usb 6-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=ca.87 [ 1294.619989][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.629008][ T5895] usb 6-1: Product: 㰊 [ 1294.640469][ T5895] usb 6-1: Manufacturer: 睼蝅ﳬꐄ [ 1294.660806][ T5895] usb 6-1: SerialNumber: syz [ 1294.981990][T13548] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1295.057300][ T1067] usb 5-1: USB disconnect, device number 11 [ 1295.115935][T13548] usb 3-1: device descriptor read/64, error -71 [ 1295.232384][T13548] usb usb3-port1: attempt power cycle [ 1295.243133][ T5895] appledisplay 6-1:6.122: Could not find int-in endpoint [ 1295.255683][ T5895] usbhid 6-1:6.122: couldn't find an input interrupt endpoint [ 1295.283661][ T5917] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 1295.495914][ T5917] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1295.514211][ T5895] usb 6-1: USB disconnect, device number 51 [ 1295.689904][ T5917] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1295.699328][ T1067] usb 2-1: USB disconnect, device number 11 [ 1295.729160][ T5917] usb 1-1: config 0 has no interface number 0 [ 1295.741844][T13548] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1295.759881][ T5917] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1295.802237][ T5917] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1295.811565][T13548] usb 3-1: device descriptor read/8, error -71 [ 1295.822424][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.838215][ T5917] usb 1-1: config 0 descriptor?? [ 1296.135038][T13548] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1296.278305][T13548] usb 3-1: device descriptor read/8, error -71 [ 1296.542507][T13548] usb usb3-port1: unable to enumerate USB device [ 1296.842893][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4351'. [ 1297.071897][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1297.071919][ T30] audit: type=1326 audit(1750747831.075:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.1.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02afd8e929 code=0x7ffc0000 [ 1297.313568][ T30] audit: type=1326 audit(1750747831.075:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.1.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02afd8e929 code=0x7ffc0000 [ 1297.466868][ T30] audit: type=1326 audit(1750747831.095:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.1.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f02afd8e929 code=0x7ffc0000 [ 1297.524831][ T30] audit: type=1326 audit(1750747831.095:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.1.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02afd8e929 code=0x7ffc0000 [ 1297.531896][ T5895] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1297.610443][ T30] audit: type=1326 audit(1750747831.095:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21973 comm="syz.1.4353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02afd8e929 code=0x7ffc0000 [ 1297.712868][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 1297.731325][ T5895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.744129][ T5895] usb 3-1: config 0 has no interfaces? [ 1297.764356][ T5895] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1297.790371][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.814401][ T5895] usb 3-1: Product: syz [ 1297.823592][ T5895] usb 3-1: Manufacturer: syz [ 1297.838172][ T5895] usb 3-1: SerialNumber: syz [ 1297.868606][ T5895] usb 3-1: config 0 descriptor?? [ 1297.873921][T18005] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1297.946716][ T5895] usb 1-1: USB disconnect, device number 124 [ 1298.032694][T18005] usb 2-1: Using ep0 maxpacket: 32 [ 1298.046544][T18005] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1298.066025][T18005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.087818][T18005] usb 2-1: Product: syz [ 1298.339206][T18005] usb 2-1: Manufacturer: syz [ 1298.629812][T18005] usb 2-1: SerialNumber: syz [ 1298.666348][T18005] usb 2-1: config 0 descriptor?? [ 1298.926702][T21983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1299.011542][T18005] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1299.057160][T18005] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1299.154080][T18005] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1299.198233][T18005] usb 2-1: USB disconnect, device number 12 [ 1300.162236][T13548] usb 3-1: USB disconnect, device number 24 [ 1300.240763][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.247315][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.317222][ T30] audit: type=1326 audit(1750747834.355:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22011 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e018e929 code=0x7ffc0000 [ 1300.332757][ T5917] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1300.407035][ T30] audit: type=1326 audit(1750747834.355:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22011 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e018e929 code=0x7ffc0000 [ 1300.485266][ T30] audit: type=1326 audit(1750747834.355:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22011 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f12e018e929 code=0x7ffc0000 [ 1300.523034][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 1300.531928][ T1067] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1300.563095][ T5917] usb 2-1: config index 0 descriptor too short (expected 83, got 18) [ 1300.569708][ T30] audit: type=1326 audit(1750747834.355:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22011 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e018e929 code=0x7ffc0000 [ 1300.605805][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.622349][T18005] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1300.646719][ T5917] usb 2-1: config 0 has no interfaces? [ 1300.661691][ T30] audit: type=1326 audit(1750747834.395:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22011 comm="syz.5.4365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12e018e929 code=0x7ffc0000 [ 1300.710282][ T5917] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=bc.ed [ 1300.729959][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.754588][ T5917] usb 2-1: Product: syz [ 1300.774627][ T5917] usb 2-1: Manufacturer: syz [ 1300.802235][T18005] usb 3-1: Using ep0 maxpacket: 8 [ 1300.808774][ T1067] usb 5-1: config 0 has no interfaces? [ 1300.811628][T18005] usb 3-1: config 3 has an invalid interface number: 72 but max is 2 [ 1300.814520][ T5917] usb 2-1: SerialNumber: syz [ 1300.830216][T18005] usb 3-1: config 3 has an invalid interface number: 161 but max is 2 [ 1300.891601][ T5917] usb 2-1: config 0 descriptor?? [ 1300.902260][T18005] usb 3-1: config 3 has an invalid interface number: 187 but max is 2 [ 1301.002365][T18005] usb 3-1: config 3 has an invalid interface number: 200 but max is 2 [ 1301.012320][T18005] usb 3-1: config 3 has 4 interfaces, different from the descriptor's value: 3 [ 1301.032673][T18005] usb 3-1: config 3 has no interface number 0 [ 1301.060612][T18005] usb 3-1: config 3 has no interface number 1 [ 1301.072078][T18005] usb 3-1: config 3 has no interface number 2 [ 1301.089406][T18005] usb 3-1: config 3 has no interface number 3 [ 1301.212056][T18005] usb 3-1: config 3 interface 72 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1301.235425][T18005] usb 3-1: config 3 interface 72 altsetting 3 endpoint 0x4 has invalid maxpacket 439, setting to 64 [ 1301.277464][T17171] usb 2-1: USB disconnect, device number 13 [ 1301.322636][T18005] usb 3-1: config 3 interface 72 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1301.359887][T18005] usb 3-1: config 3 interface 72 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 1301.368683][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4368'. [ 1301.402055][T18005] usb 3-1: config 3 interface 161 altsetting 37 has an invalid descriptor for endpoint zero, skipping [ 1301.402162][ T1067] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1301.402201][T18005] usb 3-1: config 3 interface 161 altsetting 37 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1301.491688][T22020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4368'. [ 1301.561579][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4369'. [ 1301.667873][T18005] usb 3-1: config 3 interface 161 altsetting 37 bulk endpoint 0xE has invalid maxpacket 32 [ 1301.682224][T18005] usb 3-1: config 3 interface 161 altsetting 37 has a duplicate endpoint with address 0xA, skipping [ 1301.685024][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.694039][T18005] usb 3-1: config 3 interface 161 altsetting 37 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1301.711883][ T1067] usb 5-1: Product: syz [ 1301.716618][ T1067] usb 5-1: Manufacturer: syz [ 1301.756011][ T1067] usb 5-1: SerialNumber: syz [ 1301.785151][ T1067] usb 5-1: config 0 descriptor?? [ 1301.824577][T18005] usb 3-1: config 3 interface 161 altsetting 37 has a duplicate endpoint with address 0x1, skipping [ 1301.841536][T18005] usb 3-1: config 3 interface 161 altsetting 37 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1301.912243][ T5917] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1301.954797][T18005] usb 3-1: config 3 interface 161 altsetting 37 has an invalid descriptor for endpoint zero, skipping [ 1301.983199][T18005] usb 3-1: config 3 interface 161 altsetting 37 has 11 endpoint descriptors, different from the interface descriptor's value: 7 [ 1302.029157][T18005] usb 3-1: config 3 interface 187 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1302.055651][T18005] usb 3-1: config 3 interface 187 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1302.075203][T18005] usb 3-1: config 3 interface 187 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1302.089405][T18005] usb 3-1: config 3 interface 187 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 1302.107826][T18005] usb 3-1: config 3 interface 187 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1302.119867][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1302.135317][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1302.148521][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1302.173724][T18005] usb 3-1: config 3 interface 200 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1302.186867][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1302.198510][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1302.230025][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1302.298275][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1302.320120][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 1302.421318][ T5917] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1302.431863][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.440308][ T5917] usb 6-1: Product: syz [ 1302.467756][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1302.488811][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1302.507779][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0x84, skipping [ 1302.509991][ T5917] usb 6-1: Manufacturer: syz [ 1302.528063][T18005] usb 3-1: config 3 interface 200 altsetting 3 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1302.541440][T18005] usb 3-1: config 3 interface 200 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1302.545937][ T5917] usb 6-1: SerialNumber: syz [ 1302.555203][T18005] usb 3-1: config 3 interface 72 has no altsetting 0 [ 1302.568335][T18005] usb 3-1: config 3 interface 161 has no altsetting 0 [ 1302.579166][T18005] usb 3-1: config 3 interface 187 has no altsetting 0 [ 1302.595362][T18005] usb 3-1: config 3 interface 200 has no altsetting 0 [ 1302.619361][T18005] usb 3-1: Dual-Role OTG device on HNP port [ 1302.626179][T18005] usb 3-1: New USB device found, idVendor=10c4, idProduct=819f, bcdDevice=58.12 [ 1302.639681][T18005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.653737][T18005] usb 3-1: Product: Ћ [ 1302.658023][T18005] usb 3-1: Manufacturer: Є [ 1302.665807][T18005] usb 3-1: SerialNumber: 蚮飈ļ疳ⷘ횎㿆㺞ⶢ쩹蘴焓Ͽ擔鶲⒌鴊꒟᭠힒傞玲Ⱜ싃꜖폱⿸笝ꅍ朅霺Ⴘ䞉摲셫䎬宽썁黄⿀莨㺼谍ᨄ൲ⷼ웣滝婎냝뫖➔栩᳾꜍豅 [ 1302.665971][ T5917] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1302.807836][ T1067] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1303.399536][T22020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.411357][T22020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.570508][T17171] usb 5-1: USB disconnect, device number 12 [ 1303.585153][T18005] cp210x 3-1:3.72: cp210x converter detected [ 1303.598220][T18005] cp210x 3-1:3.72: failed to get vendor val 0x370b size 1: -71 [ 1303.802635][T18005] cp210x 3-1:3.72: querying part number failed [ 1303.894249][ T1067] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1303.913584][ T1067] ath9k_htc: Failed to initialize the device [ 1303.931236][T18005] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1303.968275][T18005] cp210x 3-1:3.161: cp210x converter detected [ 1304.000784][T18005] cp210x 3-1:3.161: failed to get vendor val 0x370b size 1: -71 [ 1304.038069][T18005] cp210x 3-1:3.161: querying part number failed [ 1304.068337][T18005] usb 3-1: cp210x converter now attached to ttyUSB1 [ 1304.123496][ T1067] usb 6-1: ath9k_htc: USB layer deinitialized [ 1304.206579][T18005] cp210x 3-1:3.187: cp210x converter detected [ 1304.260072][T18005] cp210x 3-1:3.187: failed to get vendor val 0x370b size 1: -71 [ 1304.278516][T18005] cp210x 3-1:3.187: querying part number failed [ 1304.291009][T18005] usb 3-1: cp210x converter now attached to ttyUSB2 [ 1304.309115][T18005] cp210x 3-1:3.200: cp210x converter detected [ 1304.331135][T18005] cp210x 3-1:3.200: failed to get vendor val 0x370b size 1: -71 [ 1304.353683][T18005] cp210x 3-1:3.200: querying part number failed [ 1304.393202][T18005] usb 3-1: cp210x converter now attached to ttyUSB3 [ 1304.491438][T18005] usb 3-1: USB disconnect, device number 25 [ 1304.550665][T22040] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1304.576395][T22041] input: syz0 as /devices/virtual/input/input71 [ 1304.736641][T17171] usb 6-1: USB disconnect, device number 52 [ 1304.796742][T22040] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1304.805778][T18005] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1304.901972][ T5917] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1304.903262][T22040] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1304.961135][T18005] cp210x 3-1:3.72: device disconnected [ 1304.986023][T22043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4373'. [ 1305.000534][T22045] binder: 22044:22045 ioctl c0306201 0 returned -14 [ 1305.008887][T22045] binder: 22044:22045 ioctl 8818564c 0 returned -22 [ 1305.071944][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 1305.085058][ T5917] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1305.094721][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.105134][T18005] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1305.127322][ T5917] usb 1-1: Product: syz [ 1305.137304][T18005] cp210x 3-1:3.161: device disconnected [ 1305.151004][ T5917] usb 1-1: Manufacturer: syz [ 1305.174939][ T5917] usb 1-1: SerialNumber: syz [ 1305.203764][ T5917] usb 1-1: config 0 descriptor?? [ 1305.220992][T18005] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 1305.246448][ T5917] gspca_main: se401-2.14.0 probing 047d:5003 [ 1305.286033][T18005] cp210x 3-1:3.187: device disconnected [ 1305.443952][T18005] cp210x ttyUSB3: cp210x converter now disconnected from ttyUSB3 [ 1305.493463][T18005] cp210x 3-1:3.200: device disconnected [ 1306.634642][ T5917] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input72 [ 1306.791869][T17171] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1307.116576][T17171] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.212935][T17171] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1307.263639][T17171] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1307.283236][T17171] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1307.298656][T17171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.420914][T22057] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1307.805995][T21795] usb 1-1: USB disconnect, device number 125 [ 1308.069722][T22072] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 1308.310839][T22072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1309.051934][ T5917] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1309.067083][T22089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 1309.307254][ T5917] usb 1-1: config 0 has no interfaces? [ 1309.313377][T17171] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1309.324965][T17171] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input73 [ 1309.352759][ T5917] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1309.367216][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.379300][ T5917] usb 1-1: Product: syz [ 1309.480986][ T5917] usb 1-1: Manufacturer: syz [ 1309.578092][ T5917] usb 1-1: SerialNumber: syz [ 1309.631885][T17171] usb 6-1: USB disconnect, device number 53 [ 1309.638147][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1309.731882][T13548] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1309.743785][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 1309.867850][ T5917] usb 1-1: config 0 descriptor?? [ 1309.926316][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4385'. [ 1309.982202][T22091] IPv6: Can't replace route, no match found [ 1310.441985][ T5917] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1310.476221][ T31] INFO: task kworker/1:3:18321 blocked for more than 143 seconds. [ 1310.485062][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 1310.501689][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1310.541254][ T31] task:kworker/1:3 state:D stack:21528 pid:18321 tgid:18321 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1310.578376][ T31] Workqueue: usb_hub_wq hub_event [ 1310.588491][ T31] Call Trace: [ 1310.594888][ T5917] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 1310.606128][ T5917] usb 6-1: config 0 has no interface number 0 [ 1310.618158][ T31] [ 1310.621363][ T31] __schedule+0x16f5/0x4d00 [ 1310.626322][ T5917] usb 6-1: too many endpoints for config 0 interface 98 altsetting 4: 229, using maximum allowed: 30 [ 1310.639694][ T31] ? schedule+0x165/0x360 [ 1310.646999][ T31] ? __pfx___schedule+0x10/0x10 [ 1310.654044][ T5917] usb 6-1: config 0 interface 98 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1310.668938][ T31] ? schedule+0x91/0x360 [ 1310.677630][ T31] schedule+0x165/0x360 [ 1310.693557][ T31] schedule_preempt_disabled+0x13/0x30 [ 1310.700521][ T5917] usb 6-1: config 0 interface 98 has no altsetting 0 [ 1310.708259][ T31] __mutex_lock+0x724/0xe80 [ 1310.715692][ T31] ? __mutex_lock+0x51b/0xe80 [ 1310.721698][ T31] ? hub_event+0x21cb/0x4a00 [ 1310.725241][ T5917] usb 6-1: New USB device found, idVendor=fc10, idProduct=ffff, bcdDevice=ff.ff [ 1310.745932][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1310.753436][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1310.760681][ T5917] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 1310.772515][ T31] hub_event+0x21cb/0x4a00 [ 1310.777132][ T5917] usb 6-1: Product: syz [ 1310.781581][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1310.787435][ T5917] usb 6-1: Manufacturer: syz [ 1310.793104][ T31] ? __pfx_hub_event+0x10/0x10 [ 1310.799505][ T5917] usb 6-1: SerialNumber: syz [ 1310.806110][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1310.826961][ T5917] usb 6-1: config 0 descriptor?? [ 1310.837597][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1310.844063][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1310.850448][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1310.860054][ T31] process_scheduled_works+0xae1/0x17b0 [ 1310.867815][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1310.879976][ T31] worker_thread+0x8a0/0xda0 [ 1310.889795][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1310.898294][ T31] ? __kthread_parkme+0x7b/0x200 [ 1310.905827][ T31] kthread+0x70e/0x8a0 [ 1310.910461][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1310.920529][ T31] ? __pfx_kthread+0x10/0x10 [ 1310.947823][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1310.956322][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1310.963135][ T31] ? __pfx_kthread+0x10/0x10 [ 1310.968036][ T31] ret_from_fork+0x3fc/0x770 [ 1310.976630][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1310.986787][ T31] ? __switch_to_asm+0x39/0x70 [ 1310.994307][ T31] ? __switch_to_asm+0x33/0x70 [ 1310.999320][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.006480][ T31] ret_from_fork_asm+0x1a/0x30 [ 1311.011506][ T31] [ 1311.018075][ T31] [ 1311.018075][ T31] Showing all locks held in the system: [ 1311.037550][ T31] 5 locks held by kworker/1:0/24: [ 1311.065049][ T5917] usb 6-1: USB disconnect, device number 54 [ 1311.075422][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1311.107913][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1311.125043][ T31] #2: ffff8881457dd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1311.137955][ T31] #3: ffff8881457ac510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1311.150348][ T31] #4: ffff88814531fa68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1311.166471][ T31] 1 lock held by khungtaskd/31: [ 1311.171447][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1311.184060][ T31] 2 locks held by getty/5592: [ 1311.188789][ T31] #0: ffff88814c8210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1311.199305][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1311.210414][ T31] 3 locks held by kworker/0:4/5917: [ 1311.216207][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1311.228529][ T31] #1: ffffc9000468fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1311.242194][ T31] #2: ffff8880289e1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1311.251438][ T31] 5 locks held by kworker/1:3/18321: [ 1311.257334][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1311.269861][ T31] #1: ffffc9000f177bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1311.293510][ T31] #2: ffff888029661198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1311.302916][ T31] #3: ffff8881457be510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1311.313396][ T31] #4: ffff88814531fa68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1311.323569][ T31] 2 locks held by kworker/u8:6/20648: [ 1311.328979][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1311.339546][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 1311.351457][ T31] 2 locks held by syz.4.4373/22040: [ 1311.357040][ T31] [ 1311.359418][ T31] ============================================= [ 1311.359418][ T31] [ 1311.370372][ T31] NMI backtrace for cpu 0 [ 1311.370390][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1311.370412][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.370423][ T31] Call Trace: [ 1311.370432][ T31] [ 1311.370440][ T31] dump_stack_lvl+0x189/0x250 [ 1311.370471][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1311.370496][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1311.370526][ T31] ? __pfx__printk+0x10/0x10 [ 1311.370560][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1311.370588][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1311.370609][ T31] ? _printk+0xcf/0x120 [ 1311.370634][ T31] ? __pfx__printk+0x10/0x10 [ 1311.370654][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1311.370681][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1311.370707][ T31] watchdog+0xfee/0x1030 [ 1311.370734][ T31] ? watchdog+0x1de/0x1030 [ 1311.370761][ T31] kthread+0x70e/0x8a0 [ 1311.370781][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.370800][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.370822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1311.370847][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.370871][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.370894][ T31] ret_from_fork+0x3fc/0x770 [ 1311.370923][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.370955][ T31] ? __switch_to_asm+0x39/0x70 [ 1311.370973][ T31] ? __switch_to_asm+0x33/0x70 [ 1311.370999][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.371022][ T31] ret_from_fork_asm+0x1a/0x30 [ 1311.371058][ T31] [ 1311.371068][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1311.533424][ C1] NMI backtrace for cpu 1 [ 1311.533443][ C1] CPU: 1 UID: 0 PID: 22040 Comm: syz.4.4373 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1311.533462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.533477][ C1] RIP: 0010:check_preemption_disabled+0x1/0x120 [ 1311.533500][ C1] Code: e0 8c e2 8b 48 c7 c6 20 8d e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 05 3e 2e 36 07 48 89 44 24 08 [ 1311.533513][ C1] RSP: 0018:ffffc900038ee870 EFLAGS: 00000282 [ 1311.533528][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000200 [ 1311.533539][ C1] RDX: ffff88802e5d3c00 RSI: ffffffff8be28d20 RDI: ffffffff8be28ce0 [ 1311.533551][ C1] RBP: ffffc900038ee918 R08: 0000000000000000 R09: ffffffff89c403cd [ 1311.533561][ C1] R10: dffffc0000000000 R11: ffffffff89c40350 R12: ffffc900038eeb20 [ 1311.533572][ C1] R13: dffffc0000000000 R14: 1ffff9200071dd14 R15: dffffc0000000000 [ 1311.533584][ C1] FS: 00007f166bed56c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1311.533597][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.533609][ C1] CR2: 000000110c3ddb69 CR3: 0000000049f1c000 CR4: 00000000003526f0 [ 1311.533624][ C1] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1311.533634][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1311.533644][ C1] Call Trace: [ 1311.533651][ C1] [ 1311.533658][ C1] rcu_lockdep_current_cpu_online+0x37/0x120 [ 1311.533678][ C1] rcu_read_lock_bh_held+0x79/0xe0 [ 1311.533693][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 1311.533709][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1311.533726][ C1] ? hash_net4_add+0x7d/0x25f0 [ 1311.533751][ C1] ? hash_net4_add+0x7d/0x25f0 [ 1311.533766][ C1] hash_net4_add+0x160/0x25f0 [ 1311.533791][ C1] ? ip_set_range_to_cidr+0x16e/0x1e0 [ 1311.533805][ C1] ? ip_set_range_to_cidr+0x170/0x1e0 [ 1311.533822][ C1] hash_net4_uadt+0x779/0x980 [ 1311.533839][ C1] ? __pfx_hash_net4_add+0x10/0x10 [ 1311.533854][ C1] ? __pfx_hash_net4_uadt+0x10/0x10 [ 1311.533870][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1311.533891][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.533914][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1311.533935][ C1] ? call_ad+0x2d4/0xb00 [ 1311.533950][ C1] call_ad+0x380/0xb00 [ 1311.533967][ C1] ? __pfx_call_ad+0x10/0x10 [ 1311.533987][ C1] ? __nla_parse+0x40/0x60 [ 1311.534009][ C1] ip_set_ad+0x791/0x930 [ 1311.534027][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 1311.534039][ C1] ? __mutex_lock+0x330/0xe80 [ 1311.534075][ C1] nfnetlink_rcv_msg+0xb4a/0x1130 [ 1311.534096][ C1] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1311.534123][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1311.534142][ C1] ? kasan_save_free_info+0x46/0x50 [ 1311.534181][ C1] netlink_rcv_skb+0x208/0x470 [ 1311.534197][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1311.534219][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1311.534239][ C1] ? bpf_lsm_capable+0x9/0x20 [ 1311.534253][ C1] ? security_capable+0x7e/0x2e0 [ 1311.534274][ C1] nfnetlink_rcv+0x26a/0x2520 [ 1311.534296][ C1] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1311.534317][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1311.534340][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 1311.534359][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.534379][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1311.534399][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1311.534424][ C1] ? ref_tracker_free+0x63a/0x7d0 [ 1311.534441][ C1] ? __copy_skb_header+0xa7/0x550 [ 1311.534461][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1311.534479][ C1] ? __skb_clone+0x63/0x7a0 [ 1311.534498][ C1] ? __skb_clone+0x483/0x7a0 [ 1311.534518][ C1] ? skb_clone+0x246/0x3a0 [ 1311.534537][ C1] ? __netlink_deliver_tap+0x807/0x850 [ 1311.534554][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1311.534572][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1311.534588][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1311.534606][ C1] netlink_unicast+0x75b/0x8d0 [ 1311.534624][ C1] netlink_sendmsg+0x805/0xb30 [ 1311.534645][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.534663][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 1311.534682][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1311.534699][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.534716][ C1] __sock_sendmsg+0x219/0x270 [ 1311.534745][ C1] ____sys_sendmsg+0x505/0x830 [ 1311.534764][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1311.534786][ C1] ? import_iovec+0x74/0xa0 [ 1311.534801][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 1311.534820][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1311.534852][ C1] ? __fget_files+0x2a/0x420 [ 1311.534867][ C1] ? __fget_files+0x3a0/0x420 [ 1311.534887][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 1311.534906][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1311.534927][ C1] ? rcu_is_watching+0x15/0xb0 [ 1311.534950][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1311.534965][ C1] do_syscall_64+0xfa/0x3b0 [ 1311.534977][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.534997][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.535011][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1311.535028][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.535042][ C1] RIP: 0033:0x7f166af8e929 [ 1311.535056][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.535069][ C1] RSP: 002b:00007f166bed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.535085][ C1] RAX: ffffffffffffffda RBX: 00007f166b1b5fa0 RCX: 00007f166af8e929 [ 1311.535097][ C1] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 1311.535107][ C1] RBP: 00007f166b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1311.535118][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.535128][ C1] R13: 0000000000000000 R14: 00007f166b1b5fa0 R15: 00007f166b2dfa28 [ 1311.535146][ C1] [ 1311.692216][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1311.692237][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 1311.692258][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.692269][ T31] Call Trace: [ 1311.692278][ T31] [ 1311.692287][ T31] dump_stack_lvl+0x99/0x250 [ 1311.692318][ T31] ? __asan_memcpy+0x40/0x70 [ 1311.692341][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1311.692366][ T31] ? __pfx__printk+0x10/0x10 [ 1311.692397][ T31] panic+0x2db/0x790 [ 1311.692426][ T31] ? __pfx_panic+0x10/0x10 [ 1311.692449][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1311.692478][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1311.692499][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1311.692527][ T31] watchdog+0x102d/0x1030 [ 1311.692552][ T31] ? watchdog+0x1de/0x1030 [ 1311.692580][ T31] kthread+0x70e/0x8a0 [ 1311.692603][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.692623][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.692644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1311.692666][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1311.692688][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.692707][ T31] ret_from_fork+0x3fc/0x770 [ 1311.692733][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.692760][ T31] ? __switch_to_asm+0x39/0x70 [ 1311.692777][ T31] ? __switch_to_asm+0x33/0x70 [ 1311.692792][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.692812][ T31] ret_from_fork_asm+0x1a/0x30 [ 1311.692843][ T31] [ 1312.265919][ T31] Kernel Offset: disabled [ 1312.270247][ T31] Rebooting in 86400 seconds..