last executing test programs: 1m3.674618646s ago: executing program 2 (id=327): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f00000001c0), 0xe2801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0xc0408c1}, 0x24000840) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(0x0, 0x80) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff010000000000000000000000000001000000000000000002"], 0x80}}, 0x0) r8 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r6) r9 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000500)="000000c6d222406b096cc34801000000647418aaf9784416ed438eb9a332f44a1ec989b2d2e513f57632c54d863ecd9b0df090728300e43d59f817b99310b6b600968f3d2f02bbdfbbcb5c4f13e25d19bfdffe6f178f3580ea2b14da36c6095d68284c04c724611344d68d651aa37d305b61d2ffec13ebbbdaa51c2dac42788676771ee9f9a1cd34fbb8c576bfddf2a15d55dcb910f9eb6f9e572c362d7df6deb76cab9bff062885ec675056768437", 0xaf, r8) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, 0x0, 0x40850) unshare(0x28000600) shutdown(r4, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, 0x0, 0x0) 1m0.170137765s ago: executing program 2 (id=335): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000540)={0x20, 0xe, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814) r1 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x28b2, 0x63f5, 0x40, &(0x7f0000000340)={[0x7]}, 0x8) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000c40)={0x20, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="e6260a8b0180c200000e0180c2000001080500e40fd617a9122c330e"], &(0x7f0000000040)={0x1, 0x2, [0x9f5, 0xba8, 0xc81, 0xb48]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8007}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffc00, 0x81f, 0x7}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000e80)=@newlinkprop={0x604, 0x6c, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x44082, 0x48800}, [@IFLA_VF_PORTS={0x174, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_1\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, ']]*[\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8000}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x10001}, @IFLA_PORT_PROFILE={0x7, 0x2, '!\xa3\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6826550a4b1a21b57b9cb73bfd55e382"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bb177b8a7572f20782458f2939e9e083"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffe}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "89af779958f162480b1b79f15c0841b8"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_1\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '.\x00'}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "325e4814c81fb8e3682f1d30a402cb55"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aaa8bd6ce8caeb234d16eaa82d8891c6"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xfffffffd}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e6c31c9fc8e18d16e20687b7cf5b5cfe"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/iommu\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fbbb5fa147853251064d183e38d1badf"}]}]}, @IFLA_VFINFO_LIST={0x23c, 0x16, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xd}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x400, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff9, 0x643, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x7e5, 0x800}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6a6, 0x746, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0xfffffffffffffb7a}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x12e, 0xfff, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0xfd25}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x81, 0x7800000}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x41f}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xffff, 0x800}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffa, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x80000001}}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x946, 0x9}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x401, 0x840, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x6, 0xcbb, 0x4, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x9, 0x200}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x8}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x10000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10000, 0xda}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @multicast}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0xfff}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xffff, @remote}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x7}}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x3}, @IFLA_PORT_SELF={0xfffffffffffffd12, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "20b5b184a4f5f9f46237cef991378fb9"}]}, @IFLA_VF_PORTS={0x198, 0x18, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b3ec80ae9c73620e0b84d4b42356dc9a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "46bd80fafb651cb210b2b1f2133a348d"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2a095ad95388cb62f8b0491054ec71d"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d5d3107cb2c8ce2e481f942d9727ef23"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b45ceef32517ad67afce20147f48c619"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d62a965f29c9fb1b3328a6a0959e0779"}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0x6, 0x2, '+\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "2f89e8c58dd3f6e00c98c430ab79709e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "528300e85766eeb274696d725411a5b7"}, @IFLA_PORT_PROFILE={0x6, 0x2, '\'\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xe}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ae96c5a1ed3975b6ad7d550ad1a1471f"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "04d0fe9d702c376c2f72c784ba96497f"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/iommu\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/iommu\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xd7c}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x67}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7400e50c928053d41fab4b32485e3f83"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ad85dd72a03642a04b19f92f277a911"}]}]}, @IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x1c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x49}]}, @AF_INET6={0x4c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x18}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}]}]}, 0x604}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000003000128009000100766c616e00000000200002800c0002001b0000001d00000006000100000000000600050088a8000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 55.730626957s ago: executing program 2 (id=347): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) 55.718568449s ago: executing program 2 (id=348): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x10040, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x4, 0x7ff, {{0x6, 0x4, 0x0, 0x11, 0x18, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x26}, {[@ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x26, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x8, 0x1, 0xe4, 0x89, {{0x10, 0x4, 0x3, 0xc, 0x40, 0x65, 0x1, 0x8, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@noop, @timestamp_addr={0x44, 0x24, 0x34, 0x1, 0x3, [{@multicast1, 0x5}, {@loopback, 0x4}, {@loopback, 0x1}, {@broadcast, 0x9}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x7, 0x6, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, {[@lsrr={0x83, 0x17, 0x85, [@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0xfb, [@empty, @rand_addr=0x64010100, @broadcast, @multicast1]}, @generic={0x86, 0x11, "5ebe518dd2fd22638c8718fc63106c"}, @noop, @timestamp_addr={0x44, 0x24, 0x1f, 0x1, 0xf, [{@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@remote, 0x8}, {@multicast1, 0x2}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x4, 0x0, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x3c, 0xcf, 0x1, 0xd, [{@multicast2}, {@rand_addr=0x64010101, 0x5}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@multicast2, 0x7}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @lsrr={0x83, 0x7, 0x4c, [@loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x1, 0x10, 0x4, 0x6, {{0x39, 0x4, 0x2, 0x4, 0xe4, 0x68, 0x0, 0x9b, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x1d, 0x0, [{0x7, 0x5, "3c147c"}, {0x0, 0x12, "08a220063b3b91b6e55ea98daab436d6"}]}, @timestamp={0x44, 0x14, 0xb7, 0x0, 0x9, [0x2, 0x8, 0xcc1e, 0x80000000]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x92, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2b}}, {@broadcast, 0x2}, {@broadcast}]}, @rr={0x7, 0x17, 0xf2, [@broadcast, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x54, 0x35, 0x1, 0x7, [{@rand_addr=0x64010100, 0x714}, {@rand_addr=0x64010100, 0x8}, {@remote}, {@broadcast, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7fffffff}, {@empty, 0xb28}, {@multicast2, 0x3}, {@loopback, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f00000009c0)={'gretap0\x00', 0x0, 0x1070e, 0x0, 0x1, 0x0, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x87, 0x3, 0x2, [{@empty, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0xf5, 0x3, 0xc, [{@loopback, 0x81}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x459d}, {@multicast1, 0x172}]}, @lsrr={0x83, 0x27, 0xda, [@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, @loopback, @empty, @broadcast, @multicast2, @loopback, @loopback, @local]}, @generic={0x83, 0x9, "b3df49d385ca0b"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1d8, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x10001}, 0x4048001) connect$inet(r1, &(0x7f0000000d40)={0x2, 0x4e24, @local}, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r13, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000ec0)=0xbb36, 0x4) socket$nl_generic(0x10, 0x3, 0x10) rmdir(&(0x7f0000000f00)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r1, 0x76fb, 0xe54a, 0x12, &(0x7f0000000f40)={[0x9]}, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000f80)={'\x00', 0x0, 0xfffffc00, 0x800, 0x8000000000000000, 0xfffffffffffffff8, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x0, r14, 0x0, &(0x7f0000001000)) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001040)={@private1, 0x0}, &(0x7f0000001080)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001180)={'syztnl1\x00', &(0x7f00000010c0)={'tunl0\x00', r15, 0x7800, 0x20, 0xfffff516, 0xa2, {{0x1b, 0x4, 0x1, 0x3c, 0x6c, 0x68, 0x0, 0x1, 0x2f, 0x0, @loopback, @broadcast, {[@end, @noop, @cipso={0x86, 0x50, 0x3, [{0x5, 0xe, "3f03e6968743c777eb017c39"}, {0x6, 0xd, "717e4604afa6dd7c38f58e"}, {0x6, 0x7, "155f1514e9"}, {0x7, 0x9, "468f314fb5cb3a"}, {0x7, 0x7, "b285c837c8"}, {0x6, 0x7, "d00f027a3c"}, {0x5, 0x6, "36650614"}, {0x7, 0xb, "7e56d97e04f9b28428"}]}, @generic={0x44, 0x6, "acf5014b"}]}}}}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000001540)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001500)={&(0x7f0000001200)={0x2e0, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "14d59b7155912a0a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="55e54cbc8f4fa71dd6e79545f1c985ea"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7643ec3fe0c87bed88322b0dea8e231b9e75ea3f8e112fb4610d1209ffe152be"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "66c8cbf4f8a09c37"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe5b}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a65e1e404c98f69e"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac1d5dd75e950aef"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1800000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "060e65abf69f2aad"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "80307e3dadf82399"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f02cf09eec22e298"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="65051a4897abbd73f39aa179b2e19bdd"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9fa9ff0f1b7527eaed37b7416d776320ec2c2863e3af7a00"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb528097cf17cd78cb66144a193da22fa4959d3971c004e4"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9f856a41aacd8492e9fb11e3cf64c5a0ef71c37acdffed72cfc782283e04c5be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="db52ccb13c3e34e106ac6161712940167e36508cfe92bff030a2402d8b436c47"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f9e801d6b31b6640e18946f4717a3a87d29f01082bd40dd5"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6915d95284556a5a9d7ca6e59771a233"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="df94f0dfb57f5e4054b85dac16a4a0da"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="57f230c083f19d58c29c07bf7c52d5a1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bb3b20fb8b31ee5d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4b953556a0af51be4ae4c717ba8720db"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="00a9fa706547d2c5f0abdec0c97b826e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d839c9b45d82e5fd76b8b7b02cbce7eb9196ed31bb9f12598c6adfb973e08d46"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="186dcb8ddbffdc93f6a762f2c6002b5f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2d6c6b0be8358a12175fd6451576975eec16422c95f4439659fd715c8d462161"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="91bb4ee69cfe33f60fa9d84b1dca5e6aec4d5ee8ab95d1c3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d8f2bb0259a54bb9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8fb}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="405a07f6ca27c79da876d869b0fa872e"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9ca00d6608fc2ba0b19f645f6e57552f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24df2e45be8aadb6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36803e3dd0402098"}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r1, 0x63) 55.477032255s ago: executing program 2 (id=349): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x1, &(0x7f0000000040)=[{0x1000, 0xf1, 0x0, 0x7ffc0005}]}) personality(0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0xffffffffffffffd2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 51.865133354s ago: executing program 2 (id=359): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000000c0)) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 36.780588873s ago: executing program 32 (id=359): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000000c0)) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 35.139000482s ago: executing program 3 (id=424): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x18) sendto$inet6(r0, &(0x7f0000000080)="0102f345203f2d9e9f0f0406cb87a736661386267abc814b1802bd9c53cd564bc26c16e98612816ff32817987efdc609d26ffaa4f4357e6ea8f519afe2772d11f5c9bf156f0a57350c7e4315453a85c073267eb597c4991892a07ea343eb605b938e7c7dfae216b1de1d44ad3d8098ca", 0x70, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @private2, 0xc07}, 0x1c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x416d, 0x0) 35.018624608s ago: executing program 3 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/83, &(0x7f0000000080)=0x53) r3 = io_uring_setup(0x100020, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x10, 0x80000200, 0x245}) r4 = syz_io_uring_setup(0x77ef, &(0x7f00000001c0)={0x0, 0xba7b, 0x4, 0x0, 0x121, 0x0, r3}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000340)={0x0, 0x30ca, 0x2, 0x6, 0x2d5, 0x0, r3}, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x2, 0x7, 0x0, 0x7f, 0xd}}, {0x4}}]}]}, 0x54}}, 0x4008010) 34.966473153s ago: executing program 3 (id=426): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x65, 0x1c, 0x73, 0x8, 0x110a, 0x1451, 0x9799, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x24, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0xf1, 0x8, 0x0, 0xd0, 0x26, 0xcf, 0x4a}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x65, 0x1c, 0x73, 0x8, 0x110a, 0x1451, 0x9799, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x24, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0xf1, 0x8, 0x0, 0xd0, 0x26, 0xcf, 0x4a}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 34.598486514s ago: executing program 3 (id=428): syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8000, &(0x7f0000006680)) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r4, 0x9) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0xfffffffe, {}, 0x5, 0x107ffffffe}}}, 0x90) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r7 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r9 = getpgid(0x0) kcmp(r9, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, 0x0, 0x0, 0x0) r10 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, 0x0) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001812", @ANYBLOB="824254c84af2fcacf1cf73d272529581af5d043bf941c99245d7200feeb9afa91de68d5a91312152fe79ce70c7ee538e5f398c85681576c702e350b1de8c7b4f003c47c5b192124e7f7164f6c57d7ed23cea7c932bfe3c487f3c0be1fd534997ed9a1c85f2e711448ae7ceede33494352c5599ed63c9e19a757b7d976b45711302e4ba6b13addf5d4513c0f7efd5efe21ed84330a8b456e4814260a02a5cecdffe406860bedb6f5870d1bea2a75c89ac67823c123489a1182629f42fa8345c66e52c78d791c39251bfa859f139a6324e20da1573681c6071682771c15966"], 0x50}, 0x1, 0xba01}, 0x0) 33.479433773s ago: executing program 4 (id=433): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0xc0984124, 0x1000000000000) (async) r1 = getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffdc1) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) (async) r4 = semget$private(0x0, 0x4, 0x20) semop(r4, &(0x7f00000022c0)=[{0x3, 0x1, 0x1000}], 0x1) (async, rerun: 64) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async, rerun: 64) semctl$SETVAL(r4, 0x3, 0x10, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (rerun: 64) accept4(r2, &(0x7f0000000340), &(0x7f00000001c0)=0x80, 0x80000) (async, rerun: 32) r8 = dup(r7) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r10 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) (async, rerun: 64) ioctl$SOUND_MIXER_READ_DEVMASK(r10, 0x80044dfe, &(0x7f0000000300)) (rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$unix(r2, &(0x7f0000006200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4}}], 0x2, 0xc000) 33.334678818s ago: executing program 4 (id=434): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) (async) 32.614611007s ago: executing program 1 (id=437): socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) pipe2$watch_queue(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0xfffffffc, 0x4) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = syz_open_pts(r1, 0x900) r4 = dup3(r3, r1, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfff) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x3ff}, {0x0, 0x0, 0x1}}) 31.888260961s ago: executing program 4 (id=438): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x761f27175ad8c43f, 0xfa00, {0x8, &(0x7f00000001c0), 0x111, 0x6}}, 0x20) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) keyctl$revoke(0x3, r3) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000e4a000/0x2000)=nil, 0x2000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$unix(0x1, 0x1, 0x0) 31.325567538s ago: executing program 1 (id=439): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) 31.075103913s ago: executing program 1 (id=441): r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="0a00010000007013abdfe56ae476ab852894fbf0256475e37bd7d24504400e38a169795a777002282e41c4628a740311ca6a352e2382f665a4e5caa5f45718ee9d4f8f390ff4b2bb08f5355a0194a35ed7a2929b033f5ae26baffaa7bcfe403f5213fb6840d44482694dbbc2bd426c4974913ef59dcb2a00000000000000000000000040000000"], 0x64}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) 30.429639025s ago: executing program 4 (id=445): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9}}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000340)) ioctl$VHOST_VDPA_GET_STATUS(r3, 0x8001af71, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 30.022861229s ago: executing program 4 (id=446): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @local}, 0x1c, 0x0, 0x2e}}], 0x1, 0xc050) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002140)={0x18, 0x50, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x3ffd, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0xa, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 29.922597101s ago: executing program 1 (id=447): socket$netlink(0x10, 0x3, 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) (async) r1 = getpgrp(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(r1, &(0x7f0000000100)={0x38, 0xdd82b48caf724327, 0x75, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff7ffffffe, 0xfffffffc, 0x4}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x1f, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x1e, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x4}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @tail_call]}, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x46, &(0x7f0000000400)=""/70, 0x41000, 0x57, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xbfe5, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000480)=[{0x5, 0x1, 0xb, 0xc}, {0x5, 0x5, 0x2, 0xc}, {0x3, 0x4, 0x4, 0xc}, {0x4, 0x5, 0x1, 0xb}, {0x3, 0x2, 0xc, 0x9}, {0x1, 0x2, 0x4, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="260000000c0000fd000000f14e4a8a8821197d704320795989c124d4592078af6cdd8d74c371b5d0d3efcd58b03359b8c3000b00000000", @ANYRES32=r9, @ANYBLOB, @ANYRES64=r7], 0x20) (async) syz_emit_ethernet(0x7e, 0x0, 0x0) (async) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x3, 0x0, 0x0, 0x0}) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000058100000008004500005800000000002f90787f000007ac1e0001042088640000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000080000000000000008006558000000"], 0x0) (async) getsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x0, 0x0, 0x0, 0x100, 0x0, 0xc26200a0, r12}) (async) pselect6(0x40, &(0x7f0000000600)={0x5, 0x0, 0xa, 0x7, 0x5, 0x1, 0x8001, 0x2}, &(0x7f0000000680)={0x2, 0x4, 0x1, 0x7, 0x100, 0x4, 0x6, 0x1ff}, &(0x7f00000006c0)={0x8, 0x1, 0xffffffff, 0x6, 0xff, 0xd, 0x3, 0xffff0000}, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={[0x5]}, 0x8}) (async) r13 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r0, &(0x7f0000000080)={0x40000014}) 29.774261487s ago: executing program 1 (id=448): ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000000)={0x4, 0x4, 0x37, "db8efb85cb1398ff9c4af11cedbcf114cb965ad3c0e824a15144dda9152f9cfbf481b1687dedffa61fa25b5ba917af3b1bf510c4bc9addd4d9e6a54b", 0x21, "ef6a60b0e2a551e326d0b00fc4efc89f1e8a762ccae60a54e116a4ec9269f9c182700818dd9771f362fe9fdc6109b67231789af7c0586b4290194b38", 0x20}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x0, @addr=0x9}, 0x8, 0x1, 0x800}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@userptr={0x3, 0xa, 0x4, 0x4000, 0x6, {r1, r2/1000+60000}, {0x0, 0x0, 0x0, 0xfd, 0xf8, 0x4, "796625f0"}, 0x7b4, 0x2, {&(0x7f0000000180)}, 0x3, 0x0, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000002c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x522940, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f00000003c0)={0x18, r7, 0x1, 0x0, &(0x7f0000000380)=[{0xffff}]}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000440)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000480)={"dec109db0ee794841f2ccf0dde2e34b4", r8, r9, {0x6}, {0x100000000000000, 0x5}, 0xfffffffffffffff9, [0x52c1, 0x7ff, 0x3, 0x0, 0x3, 0xa11, 0x2, 0x80000000, 0x8, 0x4, 0x0, 0x0, 0x9, 0x4, 0x22, 0x5]}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x880, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000005c0)=0x17) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x300, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000640)={0x0, {0xc2d, 0x10}}) ioctl$INCFS_IOC_PERMIT_FILL(r11, 0x40046721, &(0x7f0000000680)={r3}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r12, r13, 0x0, 0x0, 0x1}, 0x50) write$binfmt_script(r13, &(0x7f0000000840)={'#! ', './file0', [{0x20, '/dev/iommu\x00'}], 0xa, "b9b1eadd9d8abe2e25456192cd1e5a09fb2e6260dcc392aa2572815e18f2e154273fa62f66f9b0ba275c07645e750b618bbd03648e602aeb74508c62efa727904b50715e70373cbf5070fe0f936e267b97e12a0978e38d15af889655956ffc8e7d8b71fc50a4fc2f464a622066d651e705240f74dcb4174a3cab5e7185829c7e9fcbdc9067b6e0f7183703c018a0784581e429a6cb67e7f9f1eba22b4ea71fe3a25655045b74fc0c3f47b7f848457b54fd9e3bfb9a318716428519360396d82d496ddb583fdbf9a4dada2eda8a9b2cb2ca228643961a7827eca1fd9f"}, 0xf3) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000940)={0xff, 0x204, '\x00', [@jumbo={0xc2, 0x4, 0xffffff01}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0xb33, [0xffffffffffffff01, 0x3]}}, @generic={0x80, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3}]}, 0x1030) userfaultfd(0x80801) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000001980)={0x2, 'ip6tnl0\x00', {0x2}, 0x4}) clock_gettime(0x0, &(0x7f0000007b40)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000007900)=[{{&(0x7f00000019c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001a40)=""/159, 0x9f}], 0x1, &(0x7f0000001b40)=""/175, 0xaf}, 0x4}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000001d00)=""/131, 0x83}, {&(0x7f0000001dc0)=""/158, 0x9e}, {&(0x7f0000001e80)=""/158, 0x9e}, {&(0x7f0000001f40)=""/166, 0xa6}], 0x5, &(0x7f0000002080)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000002140)=""/37, 0x25}, {&(0x7f0000002180)=""/252, 0xfc}, {&(0x7f0000002280)=""/12, 0xc}, {&(0x7f00000022c0)=""/227, 0xe3}, {&(0x7f00000023c0)=""/208, 0xd0}, {&(0x7f00000024c0)=""/148, 0x94}], 0x6, &(0x7f0000002600)=""/39, 0x27}, 0x5}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002640)=""/42, 0x2a}], 0x1}, 0x8}, {{&(0x7f00000026c0)=@ax25={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @default, @rose]}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/59, 0x3b}, {&(0x7f0000002780)=""/23, 0x17}], 0x2, &(0x7f0000002800)=""/13, 0xd}, 0x7ff}, {{&(0x7f0000002840)=@rc={0x1f, @none}, 0x80, &(0x7f0000005bc0)=[{&(0x7f00000028c0)=""/138, 0x8a}, {&(0x7f0000002980)=""/62, 0x3e}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/61, 0x3d}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/144, 0x90}, {&(0x7f0000004ac0)=""/240, 0xf0}, {&(0x7f0000004bc0)=""/4096, 0x1000}], 0x8, &(0x7f0000005c40)=""/129, 0x81}, 0x5}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005d00)=""/83, 0x53}, {&(0x7f0000005d80)=""/225, 0xe1}], 0x2, &(0x7f0000005ec0)=""/84, 0x54}, 0x7}, {{0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000005f40)=""/78, 0x4e}, {&(0x7f0000005fc0)=""/232, 0xe8}, {&(0x7f00000060c0)=""/250, 0xfa}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/99, 0x63}, {&(0x7f0000007240)=""/26, 0x1a}], 0x6, &(0x7f0000007300)=""/88, 0x58}, 0x80000001}, {{0x0, 0x0, &(0x7f00000077c0)=[{&(0x7f0000007380)=""/232, 0xe8}, {&(0x7f0000007480)=""/250, 0xfa}, {&(0x7f0000007580)=""/211, 0xd3}, {&(0x7f0000007680)=""/71, 0x47}, {&(0x7f0000007700)=""/175, 0xaf}], 0x5, &(0x7f0000007840)=""/178, 0xb2}, 0x2}], 0x9, 0x2, &(0x7f0000007b80)={r14, r15+60000000}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000007bc0)=0x10) 29.704352031s ago: executing program 4 (id=449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x56000129) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x8, 0x0, 0x3000, 0x2, 0x0, 0x1}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_TID={0xc}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 29.437184253s ago: executing program 1 (id=450): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) socket(0x1f, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async, rerun: 32) r4 = accept$alg(r3, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r4, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)='ip6tnl0\x00', 0x99, 0x0, 0x6}) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) (async) sendfile(r7, r5, 0x0, 0x10000a007) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async, rerun: 32) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442ffc000000000000000000000000000000ff020000000000000000000000000001242081000000000300000800000086dd080088be86ddff00100000000100000000000000080022eb000000002000e0200200000000000000000000000800655800000000"], 0x0) (rerun: 32) 20.901553298s ago: executing program 0 (id=464): r0 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004000) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000540)="6237ea76a9", 0x0, 0x0, 0x10}, 0x50) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock2(&(0x7f0000cc1000/0x3000)=nil, 0x3000, 0x0) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'GPL\x00'}], 0xa, "771ca6562753cb0f672c96e2b39bf24bd8e8f1ed0b197bb39f4936bb5d8a35bf5d182f6bbc70c3bde8a1fda8bcb1a7c67f58cd03ecad15f624b66eeda28a35ced3f64167863ddc2d96f1bc6eeb104345ba4487c434e9a71ba308daea8f8f5ff6a771c7f293e33ae997f7790a442a1448aae29286e17a1233e3017ada955fa7c9d79f7cefea2f6f220efcbf"}, 0x9d) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="4006060000004de319120344"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.784306965s ago: executing program 0 (id=465): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8840, 0x0) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x100, 0x0, 0x207}, &(0x7f0000000040), &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f746865722c616c6c6f775f6f746865"], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1000002d, 0x808001, 0xfffffff5, 0x3, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0xc4, &(0x7f0000000340)=[{0x9, 0xfb, 0x9d, 0x84}, {0x5a, 0xfe, 0xa, 0xa0d}, {0x5, 0xa, 0x7, 0x2}, {0x7b4f, 0x18, 0x7, 0x2}, {0x13ed, 0x0, 0x4, 0x4}, {0x6, 0x2, 0xf9, 0x5}, {0x800, 0x2, 0x7, 0x6}, {0x800, 0x7, 0x9, 0x800}, {0x8, 0x1, 0x0, 0x9}, {0x6657, 0x8, 0x3, 0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2a00) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 17.780930451s ago: executing program 33 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r4, 0x9) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0xfffffffe, {}, 0x5, 0x107ffffffe}}}, 0x90) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r7 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r9 = getpgid(0x0) kcmp(r9, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, 0x0, 0x0, 0x0) r10 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, 0x0) syz_io_uring_setup(0x304, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x2b, 0x3}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b26946113d"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001812", @ANYBLOB="824254c84af2fcacf1cf73d272529581af5d043bf941c99245d7200feeb9afa91de68d5a91312152fe79ce70c7ee538e5f398c85681576c702e350b1de8c7b4f003c47c5b192124e7f7164f6c57d7ed23cea7c932bfe3c487f3c0be1fd534997ed9a1c85f2e711448ae7ceede33494352c5599ed63c9e19a757b7d976b45711302e4ba6b13addf5d4513c0f7efd5efe21ed84330a8b456e4814260a02a5cecdffe406860bedb6f5870d1bea2a75c89ac67823c123489a1182629f42fa8345c66e52c78d791c39251bfa859f139a6324e20da1573681c6071682771c15966"], 0x50}, 0x1, 0xba01}, 0x0) 16.878457112s ago: executing program 0 (id=467): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffeb8, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffdff, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x801, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x40080, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x7ff, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x1, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000001, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x4, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0xffff, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0x7, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d8, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x3, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x4, 0x200, 0x10, 0x1, 0x66, 0x7, 0x7, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x7, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x24004804) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 16.037722029s ago: executing program 0 (id=468): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x80000003, 0x12b400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x100f, 0x4, 0x2, 0x0, 0x0, 0x1}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000040)={'\x00', 0x8, 0x0, 0x6}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000a8008000100688d33f23c757f966ce72e4c"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000000)={0x0, 0x3}, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.998180003s ago: executing program 0 (id=469): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x0, 0x3, 0x0, 0x0, 0x7, 0xf9, 0x80, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0x0, 0xa, 0x8, 0x0, 0x0, 0xa, 0x0, 0x44, 0xe, 0x0, 0x3}, {0xd000, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x11000, 0x0, 0xb, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, {0x8080000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0xd, 0x0, 0x900, [0x0, 0x0, 0x0, 0x4]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7, 0x2, 0x2, r3, 0xb}) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000004780)={'dummy0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x7, 0x1, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1}}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061108b000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) 15.834479789s ago: executing program 0 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000240)="a6cc04e2d8f1c38afbf14b29b86e3a") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf05e) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f00000003c0)={0x1, @output={0x0, 0x1, {0x80, 0x3}, 0x100, 0x9}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) r12 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='\x00', r12, &(0x7f0000000140)='./file0\x00') sendmmsg$sock(r6, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$getregs(0xc, r13, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x553fc, 0x943}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 14.524024629s ago: executing program 34 (id=449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x56000129) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x8, 0x0, 0x3000, 0x2, 0x0, 0x1}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_TID={0xc}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 13.498181903s ago: executing program 35 (id=450): prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) socket(0x1f, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) (async, rerun: 32) r4 = accept$alg(r3, 0x0, 0x0) (rerun: 32) sendmmsg$alg(r4, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)='ip6tnl0\x00', 0x99, 0x0, 0x6}) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) (async) sendfile(r7, r5, 0x0, 0x10000a007) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async, rerun: 32) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442ffc000000000000000000000000000000ff020000000000000000000000000001242081000000000300000800000086dd080088be86ddff00100000000100000000000000080022eb000000002000e0200200000000000000000000000800655800000000"], 0x0) (rerun: 32) 0s ago: executing program 36 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r3, 0x8943, &(0x7f0000000240)="a6cc04e2d8f1c38afbf14b29b86e3a") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000035c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf05e) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f00000003c0)={0x1, @output={0x0, 0x1, {0x80, 0x3}, 0x100, 0x9}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x38, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCDELRT(r11, 0x890c, 0x0) r12 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='\x00', r12, &(0x7f0000000140)='./file0\x00') sendmmsg$sock(r6, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$getregs(0xc, r13, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x553fc, 0x943}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) kernel console output (not intermixed with test programs): t's busy [ 117.911191][ T5987] usb 2-1: config 0 descriptor?? [ 117.921522][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.932522][ T6223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.950946][ T6223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.981934][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.009585][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.032796][ T10] usb 5-1: device descriptor read/64, error -71 [ 118.076759][ T6242] netlink: 10 bytes leftover after parsing attributes in process `syz.3.79'. [ 118.197327][ T6223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.228221][ T6223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.282182][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.435555][ T10] usb 5-1: device descriptor read/64, error -71 [ 118.468286][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.493525][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.552466][ T10] usb usb5-port1: attempt power cycle [ 118.914458][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.936124][ T5983] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 118.953678][ T10] usb 5-1: device descriptor read/8, error -71 [ 119.035091][ T6251] binder: 6250:6251 ioctl 40046104 200000000100 returned -22 [ 119.093994][ T5983] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 119.105170][ T5983] usb 3-1: config 0 has no interface number 0 [ 119.120808][ T5983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 119.130410][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.139908][ T5983] usb 3-1: Product: syz [ 119.144273][ T5983] usb 3-1: Manufacturer: syz [ 119.148895][ T5983] usb 3-1: SerialNumber: syz [ 119.160438][ T5983] usb 3-1: config 0 descriptor?? [ 119.182725][ T5983] hub 3-1:0.132: bad descriptor, ignoring hub [ 119.190183][ T5983] hub 3-1:0.132: probe with driver hub failed with error -5 [ 119.202096][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 119.203062][ T5983] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input8 [ 119.247200][ T10] usb 5-1: device descriptor read/8, error -71 [ 119.332616][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.366760][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.382853][ T10] usb usb5-port1: unable to enumerate USB device [ 119.532302][ T5983] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.595654][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.648845][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.732191][ T5983] usb 4-1: Using ep0 maxpacket: 32 [ 119.766458][ T5983] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 119.806964][ T5983] usb 4-1: config 0 has no interface number 0 [ 119.834659][ T5983] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 119.871977][ T5983] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 119.892531][ T5983] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 119.911847][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.935692][ T5983] usb 4-1: Product: syz [ 119.940077][ T5983] usb 4-1: Manufacturer: syz [ 119.946051][ T5983] usb 4-1: SerialNumber: syz [ 119.993354][ T5983] usb 4-1: config 0 descriptor?? [ 120.010675][ T5987] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 120.177731][ T5987] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:00:00:00:00:00 [ 120.208802][ T5987] usb 2-1: USB disconnect, device number 7 [ 120.232281][ T5987] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 120.442162][ T10] usb 3-1: USB disconnect, device number 12 [ 120.578416][ T6268] QAT: failed to copy from user cfg_data. [ 120.737690][ T6271] QAT: failed to copy from user cfg_data. [ 121.042111][ T5987] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 121.212319][ T5987] usb 5-1: device descriptor read/64, error -71 [ 121.397579][ T6289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.511930][ T5987] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 121.640066][ T6288] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 121.692851][ T5987] usb 5-1: device descriptor read/64, error -71 [ 121.710384][ T6292] binder: 6291:6292 ioctl 40046104 200000000100 returned -22 [ 121.805773][ T5987] usb usb5-port1: attempt power cycle [ 121.962381][ T5983] usb 4-1: USB disconnect, device number 8 [ 122.056000][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.193417][ T5987] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 122.303070][ T5987] usb 5-1: device descriptor read/8, error -71 [ 122.375170][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.383635][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.622038][ T5987] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 122.711279][ T5987] usb 5-1: device descriptor read/8, error -71 [ 122.849085][ T5987] usb usb5-port1: unable to enumerate USB device [ 122.856602][ T6312] loop2: detected capacity change from 0 to 7 [ 122.857060][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.901057][ T6312] loop2: [POWERTEC] p1 p2 p3 [ 122.931570][ T6312] loop2: p2 start 4294967287 is beyond EOD, truncated [ 122.943634][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.959249][ T6312] loop2: p3 start 1932423285 is beyond EOD, truncated [ 123.280118][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.301423][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.320918][ T6322] ======================================================= [ 123.320918][ T6322] WARNING: The mand mount option has been deprecated and [ 123.320918][ T6322] and is ignored by this kernel. Remove the mand [ 123.320918][ T6322] option from the mount to silence this warning. [ 123.320918][ T6322] ======================================================= [ 123.360131][ T6322] fuse: Bad value for 'rootmode' [ 123.429217][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.448084][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.465209][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.482849][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.500455][ T6319] syz.2.99: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.512085][ T5881] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.528902][ T6319] CPU: 0 UID: 0 PID: 6319 Comm: syz.2.99 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 123.528933][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.528945][ T6319] Call Trace: [ 123.528952][ T6319] [ 123.528957][ T6319] dump_stack_lvl+0x189/0x250 [ 123.528979][ T6319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.528995][ T6319] ? __pfx__printk+0x10/0x10 [ 123.529017][ T6319] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 123.529031][ T6319] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 123.529045][ T6319] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 123.529060][ T6319] warn_alloc+0x214/0x310 [ 123.529081][ T6319] ? stack_depot_save_flags+0x41b/0x860 [ 123.529098][ T6319] ? __pfx_warn_alloc+0x10/0x10 [ 123.529116][ T6319] ? kasan_save_track+0x4f/0x80 [ 123.529132][ T6319] ? xskq_create+0x56/0x170 [ 123.529146][ T6319] ? xsk_init_queue+0xb0/0x110 [ 123.529165][ T6319] ? xsk_setsockopt+0x4dc/0x8d0 [ 123.529178][ T6319] ? do_sock_setsockopt+0x17c/0x1b0 [ 123.529195][ T6319] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 123.529204][ T6319] ? do_syscall_64+0xfa/0x3b0 [ 123.529219][ T6319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.529235][ T6319] __vmalloc_node_range_noprof+0x125/0x12f0 [ 123.529271][ T6319] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.529289][ T6319] ? xskq_create+0x56/0x170 [ 123.529305][ T6319] ? __kasan_kmalloc+0x93/0xb0 [ 123.529326][ T6319] vmalloc_user_noprof+0xad/0xf0 [ 123.529342][ T6319] ? xskq_create+0xbf/0x170 [ 123.529357][ T6319] xskq_create+0xbf/0x170 [ 123.529374][ T6319] xsk_init_queue+0xb0/0x110 [ 123.529396][ T6319] xsk_setsockopt+0x4dc/0x8d0 [ 123.529411][ T6319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.529425][ T6319] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.529444][ T6319] ? aa_sock_opt_perm+0xff/0x1b0 [ 123.529457][ T6319] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 123.529469][ T6319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.529484][ T6319] do_sock_setsockopt+0x17c/0x1b0 [ 123.529505][ T6319] __x64_sys_setsockopt+0x13f/0x1b0 [ 123.529519][ T6319] do_syscall_64+0xfa/0x3b0 [ 123.529534][ T6319] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.529550][ T6319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.529562][ T6319] ? clear_bhb_loop+0x60/0xb0 [ 123.529576][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.529587][ T6319] RIP: 0033:0x7f4eccd8ebe9 [ 123.529599][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.529609][ T6319] RSP: 002b:00007f4ecdc65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.529623][ T6319] RAX: ffffffffffffffda RBX: 00007f4eccfb6090 RCX: 00007f4eccd8ebe9 [ 123.529632][ T6319] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 123.529639][ T6319] RBP: 00007f4ecce11e19 R08: 0000000000000052 R09: 0000000000000000 [ 123.529646][ T6319] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.529653][ T6319] R13: 00007f4eccfb6128 R14: 00007f4eccfb6090 R15: 00007f4ecd0dfa28 [ 123.529672][ T6319] [ 123.529677][ T6319] Mem-Info: [ 123.721928][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 123.855272][ T6319] active_anon:5636 inactive_anon:0 isolated_anon:0 [ 123.855272][ T6319] active_file:3148 inactive_file:39882 isolated_file:0 [ 123.855272][ T6319] unevictable:768 dirty:130 writeback:0 [ 123.855272][ T6319] slab_reclaimable:10446 slab_unreclaimable:96141 [ 123.855272][ T6319] mapped:31043 shmem:1357 pagetables:1204 [ 123.855272][ T6319] sec_pagetables:0 bounce:0 [ 123.855272][ T6319] kernel_misc_reclaimable:0 [ 123.855272][ T6319] free:1327519 free_pcp:14661 free_cma:0 [ 123.906732][ T6319] Node 0 active_anon:22544kB inactive_anon:0kB active_file:12592kB inactive_file:159324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124272kB dirty:512kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12168kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.950238][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.963428][ T6319] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.970575][ T6329] netlink: 'syz.3.101': attribute type 21 has an invalid length. [ 124.001692][ T6319] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.004253][ T5881] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 124.050866][ T6319] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 124.057043][ T6319] Node 0 [ 124.057055][ T6323] batadv_slave_1: entered promiscuous mode [ 124.057062][ T6319] DMA32 free:1414280kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22636kB inactive_anon:0kB active_file:12592kB inactive_file:157744kB unevictable:1536kB writepending:528kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:39984kB local_pcp:19124kB free_cma:0kB [ 124.099388][ T6319] lowmem_reserve[]: 0 0 1 1 1 [ 124.100308][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 124.114920][ T6319] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 124.164824][ T6319] lowmem_reserve[]: 0 0 0 0 0 [ 124.186893][ T6319] Node 1 [ 124.190519][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.202185][ T6319] Normal free:3880328kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19488kB local_pcp:11840kB free_cma:0kB [ 124.209309][ T6315] batadv_slave_1: left promiscuous mode [ 124.233778][ T5881] usb 2-1: Product: syz [ 124.284494][ T5881] usb 2-1: Manufacturer: syz [ 124.287370][ T6336] binder: 6335:6336 ioctl 40046104 200000000100 returned -22 [ 124.289234][ T5881] usb 2-1: SerialNumber: syz [ 124.301522][ T6319] lowmem_reserve[]: 0 0 0 0 0 [ 124.306573][ T6319] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 124.360456][ T5881] usb 2-1: config 0 descriptor?? [ 124.378276][ T6319] Node 0 DMA32: 564*4kB (UME) 201*8kB [ 124.381359][ T5881] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 124.394681][ T6319] (UME) 97*16kB (UM) 92*32kB (UME) 15*64kB (UM) 36*128kB (UME) 18*256kB (UM) 12*512kB (UME) 9*1024kB (UME) 6*2048kB (M) 334*4096kB (UM) = 1414248kB [ 124.419317][ T6319] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 124.436295][ T6319] Node 1 Normal: 186*4kB (UME) 42*8kB (UME) 35*16kB (UME) 59*32kB (UME) 31*64kB (UME) 6*128kB (UME) 5*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3880328kB [ 124.459354][ T6319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.472639][ T6319] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.492426][ T6319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.512091][ T6319] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.565648][ T6319] 44384 total pagecache pages [ 124.570961][ T6319] 0 pages in swap cache [ 124.583657][ T5881] snd_usb_toneport 2-1:0.0: set_interface failed [ 124.591393][ T5881] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 124.616136][ T6319] Free swap = 124996kB [ 124.620820][ T5881] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 124.641868][ T6319] Total swap = 124996kB [ 124.663910][ T6319] 2097051 pages RAM [ 124.684736][ T6319] 0 pages HighMem/MovableOnly [ 124.692167][ T5881] usb 2-1: USB disconnect, device number 8 [ 124.710995][ T6319] 425654 pages reserved [ 124.730156][ T6319] 0 pages cma reserved [ 125.582050][ T5881] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 125.743035][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 125.761379][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.775160][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.806512][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.819120][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.838249][ T5881] usb 3-1: config 0 descriptor?? [ 125.863290][ T5881] hub 3-1:0.0: USB hub found [ 125.872005][ T1169] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 126.026911][ T1169] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.050595][ T1169] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 126.068720][ T5881] hub 3-1:0.0: 1 port detected [ 126.073653][ T1169] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.100306][ T1169] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.108416][ T1169] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 126.125605][ T1169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.166622][ T1169] usb 2-1: config 0 descriptor?? [ 126.182545][ T6357] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 126.353293][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.371688][ T6364] bridge0: entered promiscuous mode [ 126.382401][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.414579][ T6364] sctp: [Deprecated]: syz.4.111 (pid 6364) Use of int in max_burst socket option deprecated. [ 126.414579][ T6364] Use struct sctp_assoc_value instead [ 126.524352][ T5881] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 126.531019][ T5881] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 126.610475][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 126.652203][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.679132][ T1169] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 126.716973][ T5881] usb 3-1: USB disconnect, device number 13 [ 126.759524][ T6369] program syz.0.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.938432][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.951045][ T6375] binder: 6374:6375 ioctl 40046104 200000000100 returned -22 [ 126.960413][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 126.969111][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.993876][ T5881] hid_parser_main: 206 callbacks suppressed [ 126.993900][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.012872][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.021480][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.022917][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.032177][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.045445][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.060295][ T30] audit: type=1326 audit(1755094929.443:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.1.109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0338d8ebe9 code=0x0 [ 127.086361][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.095236][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.108303][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.137339][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 127.141942][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.158077][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.161444][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.188394][ T5881] hid-generic 0001:0010:0002.0005: unknown main item tag 0x0 [ 127.214301][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.238209][ T5881] hid-generic 0001:0010:0002.0005: hidraw0: HID v0.10 Device [syz1] on syz0 [ 127.263836][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.307300][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 127.331241][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.362472][ T9] usb 5-1: config 0 descriptor?? [ 127.389478][ T9] usbhid 5-1:0.0: can't add hid device: -22 [ 127.403138][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 127.436862][ T6381] fido_id[6381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 127.624057][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 127.891943][ T5881] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.082332][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 128.106148][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.133024][ T5881] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 128.146710][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.160564][ T5881] usb 4-1: Product: syz [ 128.165356][ T5881] usb 4-1: Manufacturer: syz [ 128.170208][ T5881] usb 4-1: SerialNumber: syz [ 128.184720][ T5881] usb 4-1: config 0 descriptor?? [ 128.200723][ T5881] usb 4-1: bad CDC descriptors [ 128.205702][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.217254][ T5881] usb 4-1: unsupported MDLM descriptors [ 128.242358][ T1169] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 128.364147][ T5928] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 128.374218][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.386126][ T5928] usb 1-1: config 0 descriptor?? [ 128.404940][ T1169] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 128.413653][ T1169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.431887][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 128.439109][ T1169] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.445043][ T9] usb 4-1: USB disconnect, device number 9 [ 128.449257][ T1169] usb 3-1: config 1 has no interface number 0 [ 128.461891][ T1169] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.478751][ T1169] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.489311][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.497877][ T1169] usb 3-1: Product: syz [ 128.502918][ T1169] usb 3-1: Manufacturer: syz [ 128.507707][ T1169] usb 3-1: SerialNumber: syz [ 128.536369][ T1169] cdc_wdm 3-1:1.128: skipping garbage [ 128.542490][ T1169] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 128.595566][ T5928] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 128.642272][ T5955] usb 2-1: USB disconnect, device number 9 [ 128.758581][ T1169] usb 3-1: USB disconnect, device number 14 [ 128.849501][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.875156][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.911723][ T5928] [drm:udl_init] *ERROR* Selecting channel failed [ 128.962438][ T5987] delete_channel: no stack [ 129.025311][ T5928] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 129.059847][ T5928] [drm] Initialized udl on minor 2 [ 129.104692][ T30] audit: type=1326 audit(1755094931.483:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.1.124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0338d8ebe9 code=0x0 [ 129.184437][ T5928] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.237804][ T6414] netlink: 'syz.3.125': attribute type 9 has an invalid length. [ 129.284588][ T5928] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 129.368306][ T1169] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 129.399883][ T5928] usb 1-1: USB disconnect, device number 8 [ 129.408209][ T1169] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 129.684316][ T5928] usb 5-1: USB disconnect, device number 15 [ 129.714039][ T5955] delete_channel: no stack [ 129.783705][ T6424] fuse: Bad value for 'fd' [ 129.857372][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 129.865236][ T5983] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.051835][ T5983] usb 4-1: Using ep0 maxpacket: 8 [ 130.057072][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 130.067442][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 130.078309][ T5983] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 130.096318][ T5881] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 130.112957][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.121485][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.132868][ T5983] usb 4-1: Product: syz [ 130.137089][ T5983] usb 4-1: Manufacturer: syz [ 130.173059][ T5881] usb 3-1: Product: syz [ 130.182307][ T5881] usb 3-1: Manufacturer: syz [ 130.191597][ T5983] usb 4-1: SerialNumber: syz [ 130.206601][ T5881] usb 3-1: SerialNumber: syz [ 130.227563][ T5881] usb 3-1: config 0 descriptor?? [ 130.243253][ T5983] usb 4-1: config 0 descriptor?? [ 130.302645][ T6421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 130.314042][ T5983] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 130.343309][ T5881] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 130.642891][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.714119][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.738115][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.764577][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.799828][ T6429] binder: 6428:6429 ioctl 40046104 200000000100 returned -22 [ 130.822995][ T5983] gspca_sonixj: reg_r err -32 [ 130.839099][ T5983] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 131.432111][ T5987] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 131.513457][ T5955] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 131.608033][ T5987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.628038][ T5987] usb 2-1: not running at top speed; connect to a high speed hub [ 131.639848][ T5987] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 131.678622][ T5987] usb 2-1: config 3 has no interface number 0 [ 131.686609][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 131.703610][ T10] usb 3-1: USB disconnect, device number 15 [ 131.703709][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 131.709986][ T5987] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 131.751337][ T5955] usb 5-1: config 0 has no interfaces? [ 132.127387][ T5881] usb 4-1: USB disconnect, device number 10 [ 132.163293][ T6453] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 132.189401][ T5955] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 132.221319][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.291935][ T5987] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 132.312812][ T5955] usb 5-1: Product: syz [ 132.317027][ T5955] usb 5-1: Manufacturer: syz [ 132.361113][ T5955] usb 5-1: SerialNumber: syz [ 132.371834][ T5987] usb 2-1: config 3 interface 106 has no altsetting 0 [ 132.406763][ T5955] usb 5-1: config 0 descriptor?? [ 132.412017][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.422169][ T5987] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 132.442983][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.459390][ T5987] usb 2-1: Product: ꪬ逞퀆㧀凷말㎕ [ 132.466371][ T5987] usb 2-1: Manufacturer: 鸾ೖኊ䶋␒솨⫸㉎暶堃镫쮺ꄈℑȌ츆雦Ꚁ㊝䒸ꈸ鋿嗘靟ത碡誚캐낭迟뗲⊜ᶣ죒俲㳼烝⌗츯ㄋꂩ쓣魻챌颧䉮틎∴뾫ᘧ䠮傇覐袘槄㶈荟隆혎풙⸄짷ᙓ㤥᳛㝅勺‡䛼଒졁桻쫔厱٠鵐髮完娾砫풓㵦樔੎핫웒嬜ꃉ䨚ጟ≧랽膱敷鄬뢺ꁈ౟ࡊ⊶錫⳼扶沴⇗륄 [ 132.504199][ T5987] usb 2-1: SerialNumber: ⋒ₑ覾ퟔ⑒쭖뉎좺Ăרּ넽廥蝚ꫴ琢軪Ĕ䑮퍽緛쾧ꀞ粡釩曚㺗듎쨄ꂴ䣌ᗹປꮝ䅎캪뷴Ί狃㗔錟貆ᕲ뿁뤋뫜볗搅ꄔ뢳᪋遼ᩘ溈䷃쵔묜ᥧ좬重ꠦ篡촹蕗쥒樈䶝Ꮙ貭츨㝎㡐呱⦪秫ℰ徵ᤋ顴留뒥嗍潦诃ﰷ澋卦溴 [ 132.559747][ T6438] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 132.567794][ T6438] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 132.592031][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 132.657628][ T6440] netlink: 60 bytes leftover after parsing attributes in process `syz.4.134'. [ 132.668955][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.139'. [ 132.678634][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 132.688760][ T6463] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 132.711270][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 132.727155][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 132.864195][ T6463] bond1: entered allmulticast mode [ 132.870153][ T6463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.887768][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 132.965866][ T9] usb 1-1: Product: syz [ 132.970122][ T9] usb 1-1: Manufacturer: syz [ 132.996139][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999294][ T10] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 133.018048][ T9] usb 1-1: SerialNumber: syz [ 133.021427][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.023436][ T5987] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 133.048932][ T10] usb 3-1: config 0 has no interface number 0 [ 133.227526][ T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 133.254899][ T5987] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 133.270839][ T5983] usb 5-1: USB disconnect, device number 16 [ 133.282137][ T5955] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.335596][ T9] usb 1-1: config 0 descriptor?? [ 133.359213][ T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 133.440195][ T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.464560][ T5987] usb 2-1: USB disconnect, device number 10 [ 133.516509][ T10] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 133.577247][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 133.596549][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 133.613659][ T5987] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 133.623654][ T5955] usb 4-1: config 0 has no interfaces? [ 133.632413][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.640453][ T10] usb 3-1: Product: syz [ 133.666346][ T5987] kobil_sct 2-1:3.106: device disconnected [ 133.680121][ T5955] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.726191][ T10] usb 3-1: Manufacturer: syz [ 133.730926][ T10] usb 3-1: SerialNumber: syz [ 133.736210][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.755121][ T10] usb 3-1: config 0 descriptor?? [ 133.765491][ T5955] usb 4-1: Product: syz [ 133.771504][ T5955] usb 4-1: Manufacturer: syz [ 133.778389][ T6456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 133.925984][ T5955] usb 4-1: SerialNumber: syz [ 133.958805][ T10] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 133.990207][ T5955] usb 4-1: config 0 descriptor?? [ 134.021490][ T10] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 134.059301][ T10] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 134.378507][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 134.910640][ T5881] usb 1-1: USB disconnect, device number 9 [ 135.173296][ T6498] tipc: Enabling of bearer rejected, failed to enable media [ 135.327729][ T5881] usb 3-1: USB disconnect, device number 16 [ 135.373932][ T5881] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 135.410734][ T5881] cyberjack 3-1:0.69: device disconnected [ 135.662301][ T5955] usb 4-1: USB disconnect, device number 11 [ 135.970711][ T6505] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.019841][ T6505] netlink: 348 bytes leftover after parsing attributes in process `syz.0.148'. [ 136.226411][ T5987] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 136.234937][ T5955] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.391860][ T5987] usb 3-1: Using ep0 maxpacket: 8 [ 136.398241][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 136.422910][ T5987] usb 3-1: config 5 has an invalid interface number: 162 but max is 0 [ 136.434255][ T5955] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.453976][ T5955] usb 4-1: config 0 has no interface number 0 [ 136.462118][ T5987] usb 3-1: config 5 has no interface number 0 [ 136.482154][ T5955] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.502964][ T5987] usb 3-1: config 5 interface 162 has no altsetting 0 [ 136.532141][ T5955] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.532480][ T5987] usb 3-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 136.552474][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.573523][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.582484][ T5955] usb 4-1: config 0 descriptor?? [ 136.612384][ T5955] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 136.622151][ T5987] usb 3-1: Product: syz [ 136.626324][ T5987] usb 3-1: Manufacturer: syz [ 136.651546][ T5987] usb 3-1: SerialNumber: syz [ 136.837795][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 136.902200][ T5987] usb-storage 3-1:5.162: USB Mass Storage device detected [ 137.010578][ T5987] usb-storage 3-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00016-g8742b2d8935f) [ 137.010578][ T5987] Please send a copy of this message to and [ 137.038734][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.252586][ T5987] usb 3-1: USB disconnect, device number 17 [ 139.397772][ T6535] warning: `syz.2.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.220908][ T5881] usb 4-1: USB disconnect, device number 12 [ 140.657445][ T30] audit: type=1800 audit(1755094943.043:4): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.163" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 140.732282][ T92] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.336809][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 141.364408][ T92] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.416138][ T92] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 141.457588][ T92] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 141.470756][ T92] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.478062][ T92] usb 2-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 141.491280][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.549314][ T92] usb 2-1: config 0 descriptor?? [ 141.599296][ T92] usbhid 2-1:0.0: can't add hid device: -22 [ 141.614564][ T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 141.924942][ T92] usb 2-1: USB disconnect, device number 11 [ 141.981950][ T5987] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 142.035935][ T6593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.166'. [ 142.054264][ T6593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.166'. [ 142.172468][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 142.335399][ T5987] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 142.344164][ T5987] usb 5-1: config 0 has no interface number 0 [ 142.351154][ T5987] usb 5-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4 [ 142.368552][ T5987] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 142.395434][ T5987] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 16706, setting to 1024 [ 142.418976][ T5987] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 142.459968][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 142.500067][ T5987] usb 5-1: Product: syz [ 142.580278][ T5987] usb 5-1: SerialNumber: syz [ 142.612145][ T92] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 142.653232][ T5987] usb 5-1: config 0 descriptor?? [ 142.802325][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 142.833863][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.871439][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.884793][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.899147][ T92] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.022493][ T5987] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.042539][ T92] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 143.053057][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.080381][ T5987] usb 5-1: invalid MIDI in EP 0 [ 143.087725][ T92] usb 2-1: Product: syz [ 143.101673][ T92] usb 2-1: Manufacturer: syz [ 143.146074][ T92] usb 2-1: SerialNumber: syz [ 143.373769][ T92] usb 2-1: bad CDC descriptors [ 143.397457][ T92] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 143.457263][ T92] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 143.750350][ T92] usb 2-1: USB disconnect, device number 12 [ 143.839124][ T5987] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 143.879659][ T5987] usb 5-1: USB disconnect, device number 17 [ 143.990711][ T6604] sctp: failed to load transform for md5: -4 [ 144.023722][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.481164][ T6622] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 144.487875][ T6622] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.574704][ T6622] vhci_hcd vhci_hcd.0: Device attached [ 144.622260][ T6623] vhci_hcd: connection closed [ 144.623687][ T1156] vhci_hcd: stop threads [ 144.662051][ T5928] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 144.679927][ T1156] vhci_hcd: release socket [ 144.701050][ T1156] vhci_hcd: disconnect device [ 144.733371][ T5987] vhci_hcd: vhci_device speed not set [ 144.832140][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 144.852683][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.880244][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.901463][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.952291][ T5928] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.982844][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.013228][ T5928] usb 5-1: config 0 descriptor?? [ 145.274862][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 145.296146][ T6641] netlink: 152 bytes leftover after parsing attributes in process `syz.0.178'. [ 145.445017][ T5928] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 145.711250][ T5928] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 145.783341][ T5928] microsoft 0003:045E:07DA.0006: no inputs found [ 145.799436][ T5928] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 145.841250][ T5928] usb 5-1: USB disconnect, device number 18 [ 145.902550][ T5983] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 145.931350][ T6647] fido_id[6647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 146.239015][ T5983] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 146.253130][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.304650][ T5983] usb 2-1: Product: syz [ 146.309106][ T5983] usb 2-1: Manufacturer: syz [ 146.318105][ T5983] usb 2-1: SerialNumber: syz [ 146.393155][ T5983] usb 2-1: config 0 descriptor?? [ 146.411868][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.568628][ T6653] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.612976][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 146.638080][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.654122][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.665744][ T6653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.706311][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.715627][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.723816][ T10] usb 1-1: Product: syz [ 146.728013][ T10] usb 1-1: Manufacturer: syz [ 146.732703][ T10] usb 1-1: SerialNumber: syz [ 146.740891][ T6653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.754275][ T10] usb 1-1: config 0 descriptor?? [ 146.798070][ T6653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.808094][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.828772][ T6653] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.835214][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 146.846870][ T6653] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.862808][ T6658] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 146.870840][ T6658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.888035][ T6653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.910193][ T6653] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.046099][ T6653] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.084358][ T6653] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.107474][ T6653] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.152458][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 147.159912][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 147.180584][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 147.207251][ T6670] sch_fq: defrate 4294967295 ignored. [ 147.215030][ T6653] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.219774][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 147.234168][ T5983] usb 2-1: non-Atmel transceiver xxxx9797 [ 147.247016][ T5983] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 147.274521][ T5983] usb 2-1: Firmware version (0.0) predates our first public release. [ 147.312114][ T6653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.314949][ T6670] sch_fq: defrate 4294967295 ignored. [ 147.324794][ T10] usb 1-1: USB disconnect, device number 10 [ 147.324940][ T5983] usb 2-1: Please update to version 0.2 or newer [ 147.338176][ T6653] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.362817][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 147.392639][ T6653] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.405813][ T10] em28xx 1-1:0.0: Freeing device [ 147.447343][ T5983] usb 2-1: Firmware: build c [ 147.457592][ T5983] usb 2-1: atusb_probe: initialization failed, error = -19 [ 147.508741][ T6674] syz.2.185 uses obsolete (PF_INET,SOCK_PACKET) [ 147.559705][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 147.648438][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.659771][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.773326][ T5955] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 147.828103][ T1169] usb 2-1: USB disconnect, device number 13 [ 147.922425][ T5955] usb 3-1: device descriptor read/64, error -71 [ 148.192002][ T5955] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 148.333651][ T5955] usb 3-1: device descriptor read/64, error -71 [ 148.482228][ T5955] usb usb3-port1: attempt power cycle [ 148.515804][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.568556][ T6680] delete_channel: no stack [ 148.832095][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.838436][ T5955] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 148.868397][ T5955] usb 3-1: device descriptor read/8, error -71 [ 148.911948][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.151954][ T5955] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 149.159717][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.184378][ T5955] usb 3-1: device descriptor read/8, error -71 [ 149.294413][ T5955] usb usb3-port1: unable to enumerate USB device [ 149.392123][ T5183] Bluetooth: hci3: command 0x0405 tx timeout [ 150.093919][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 150.320994][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 150.336476][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.347477][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.357307][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 150.379548][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.393468][ T10] usb 2-1: config 0 descriptor?? [ 150.421238][ T6720] tipc: Can't bind to reserved service type 2 [ 150.592003][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.622624][ T10] lua 0003:1E7D:2C2E.0007: item fetching failed at offset 1/5 [ 150.637014][ T10] lua 0003:1E7D:2C2E.0007: parse failed [ 150.642916][ T10] lua 0003:1E7D:2C2E.0007: probe with driver lua failed with error -22 [ 150.821244][ T1169] usb 2-1: USB disconnect, device number 14 [ 150.912816][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.011421][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.111047][ T6730] hsr0: entered promiscuous mode [ 151.116439][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 151.244071][ T5881] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 151.300239][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 151.441915][ T5881] usb 3-1: device descriptor read/64, error -71 [ 151.536141][ T5183] Bluetooth: hci3: command 0x0405 tx timeout [ 151.677699][ T6732] hsr_slave_0: left promiscuous mode [ 151.684000][ T6732] hsr_slave_1: left promiscuous mode [ 151.769251][ T5881] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 151.849217][ T6732] hsr0 (unregistering): left promiscuous mode [ 151.952366][ T5881] usb 3-1: device descriptor read/64, error -71 [ 152.063839][ T5881] usb usb3-port1: attempt power cycle [ 152.404820][ T5881] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 152.476601][ T5881] usb 3-1: device descriptor read/8, error -71 [ 152.682615][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.721912][ T5881] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 152.848941][ T5881] usb 3-1: device descriptor read/8, error -71 [ 152.897814][ T6754] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 152.992704][ T5881] usb usb3-port1: unable to enumerate USB device [ 153.042451][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.055021][ T6754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.074145][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.103898][ T6757] bond1: (slave veth0_to_bond): making interface the new active one [ 153.122517][ T5941] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.185666][ T6757] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.262052][ T5941] usb 1-1: device descriptor read/64, error -71 [ 153.311974][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.341564][ T6756] bond1: (slave veth3): Enslaving as an active interface with a down link [ 153.365438][ T6754] vlan2: entered allmulticast mode [ 153.370632][ T6754] veth1: entered allmulticast mode [ 153.377171][ T6754] veth1: entered promiscuous mode [ 153.383300][ T6754] veth1: left promiscuous mode [ 153.390078][ T6754] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 153.511933][ T5941] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.631863][ T5183] Bluetooth: hci3: command 0x0405 tx timeout [ 153.651871][ T5941] usb 1-1: device descriptor read/64, error -71 [ 153.779956][ T5941] usb usb1-port1: attempt power cycle [ 154.132006][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 154.303228][ T5941] usb 1-1: device descriptor read/8, error -71 [ 154.551870][ T5881] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 154.563396][ T5941] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 154.684201][ T5941] usb 1-1: device descriptor read/8, error -71 [ 154.792747][ T5941] usb usb1-port1: unable to enumerate USB device [ 154.812242][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 154.819289][ T5881] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.828700][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.842635][ T5881] usb 4-1: config 0 descriptor?? [ 155.072833][ T5881] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 155.094210][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.233938][ T5881] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 155.261889][ T5881] usb 4-1: media controller created [ 155.345162][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.489437][ T6786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.741867][ T5941] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 155.922257][ T5941] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.936222][ T5941] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.999187][ T5941] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.012019][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.038633][ T5881] az6027: usb out operation failed. (-71) [ 156.056054][ T5881] az6027: usb out operation failed. (-71) [ 156.062159][ T5881] stb0899_attach: Driver disabled by Kconfig [ 156.062487][ T5941] usb 3-1: SerialNumber: syz [ 156.068157][ T5881] az6027: no front-end attached [ 156.068157][ T5881] [ 156.137840][ T5881] az6027: usb out operation failed. (-71) [ 156.148832][ T5881] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 156.158699][ T6788] tipc: Started in network mode [ 156.165296][ T6788] tipc: Node identity 72c855a7c103, cluster identity 4711 [ 156.173596][ T6788] tipc: Enabled bearer , priority 0 [ 156.180650][ T6790] syzkaller0: entered promiscuous mode [ 156.192036][ T6790] syzkaller0: entered allmulticast mode [ 156.220316][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 156.287568][ T5881] dvb-usb: schedule remote query interval to 400 msecs. [ 156.295132][ T5881] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.316559][ T6790] tipc: Resetting bearer [ 156.330898][ T5941] usb 3-1: 0:2 : does not exist [ 156.469103][ T5881] usb 4-1: USB disconnect, device number 13 [ 156.508420][ T6790] tipc: Disabling bearer [ 156.576318][ T5941] usb 3-1: USB disconnect, device number 26 [ 156.715447][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.727122][ T5881] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 157.282068][ T5881] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.767311][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 157.852155][ T5881] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 157.928131][ T5881] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 157.980665][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 158.034220][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.051857][ T5941] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 158.094118][ T5881] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.153611][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 158.214492][ T5941] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 158.216873][ T5881] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 158.229960][ T5941] usb 1-1: config 0 has no interface number 0 [ 158.270711][ T5941] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 158.274536][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.301902][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.314078][ T5881] usb 4-1: config 0 descriptor?? [ 158.538923][ T5941] usb 1-1: Product: syz [ 158.572226][ T5941] usb 1-1: Manufacturer: syz [ 158.579119][ T5941] usb 1-1: SerialNumber: syz [ 158.589512][ T5941] usb 1-1: config 0 descriptor?? [ 158.663479][ T5881] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 158.741228][ T5881] usb 4-1: USB disconnect, device number 14 [ 158.746657][ T5941] xr_serial 1-1:0.46: More than one union descriptor, skipping ... [ 159.022531][ T5881] usblp0: removed [ 159.024896][ T5941] usb 1-1: USB disconnect, device number 15 [ 159.632605][ T5881] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.804583][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 159.831854][ T5881] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.854981][ T5881] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.881144][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.911429][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.950786][ T5881] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.986150][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.016095][ T5881] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 160.021633][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.230'. [ 160.053809][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.098398][ T5881] usb 4-1: config 0 descriptor?? [ 160.214842][ T5881] usb 4-1: can't set config #0, error -71 [ 160.290712][ T5881] usb 4-1: USB disconnect, device number 15 [ 160.365104][ T30] audit: type=1326 audit(1755094962.753:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.453721][ T30] audit: type=1326 audit(1755094962.773:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.530004][ T30] audit: type=1326 audit(1755094962.773:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.563197][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 160.587508][ T30] audit: type=1326 audit(1755094962.773:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.627700][ T30] audit: type=1326 audit(1755094962.773:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.705489][ T30] audit: type=1326 audit(1755094962.773:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.784327][ T30] audit: type=1326 audit(1755094962.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.841213][ T30] audit: type=1326 audit(1755094962.773:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.860449][ T6859] 2: renamed from hsr0 (while UP) [ 160.872647][ T5987] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 160.925280][ T30] audit: type=1326 audit(1755094962.783:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.952236][ T30] audit: type=1326 audit(1755094962.783:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0338d8ebe9 code=0x7ffc0000 [ 160.992255][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 161.011998][ T5987] usb 4-1: device descriptor read/64, error -71 [ 161.059017][ T10] usb 5-1: config 0 has no interfaces? [ 161.137581][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 161.183582][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.199527][ T10] usb 5-1: Product: syz [ 161.208638][ T6861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.214479][ T10] usb 5-1: Manufacturer: syz [ 161.235514][ T10] usb 5-1: SerialNumber: syz [ 161.251292][ T10] usb 5-1: config 0 descriptor?? [ 161.291937][ T5987] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 161.421891][ T5987] usb 4-1: device descriptor read/64, error -71 [ 161.578937][ T6866] tipc: Started in network mode [ 161.584216][ T6866] tipc: Node identity becfe04b97a1, cluster identity 4711 [ 161.591552][ T6866] tipc: Enabled bearer , priority 0 [ 161.711010][ T5987] usb usb4-port1: attempt power cycle [ 161.892226][ T6870] kvm: user requested TSC rate below hardware speed [ 161.932553][ T6870] netlink: 1 bytes leftover after parsing attributes in process `syz.4.226'. [ 161.987356][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'. [ 161.997667][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 162.098288][ T6874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.238'. [ 162.189926][ T6874] netlink: 43 bytes leftover after parsing attributes in process `syz.2.238'. [ 162.237768][ T6874] netlink: 'syz.2.238': attribute type 6 has an invalid length. [ 162.284349][ T6874] netlink: 'syz.2.238': attribute type 5 has an invalid length. [ 162.321874][ T6874] netlink: 43 bytes leftover after parsing attributes in process `syz.2.238'. [ 162.371918][ T5987] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 162.412629][ T5987] usb 4-1: device descriptor read/8, error -71 [ 162.474102][ T1169] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 162.480228][ T6860] tipc: Disabling bearer [ 162.641933][ T1169] usb 3-1: device descriptor read/64, error -71 [ 163.006541][ T5987] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 163.052076][ T1169] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 163.067750][ T5987] usb 4-1: device descriptor read/8, error -71 [ 163.202348][ T1169] usb 3-1: device descriptor read/64, error -71 [ 163.234027][ T5987] usb usb4-port1: unable to enumerate USB device [ 163.812180][ T1169] usb usb3-port1: attempt power cycle [ 164.262088][ T1169] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 164.312810][ T1169] usb 3-1: device descriptor read/8, error -71 [ 164.622420][ T1169] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 164.679378][ T1169] usb 3-1: device descriptor read/8, error -71 [ 164.816994][ T1169] usb usb3-port1: unable to enumerate USB device [ 164.841461][ T6895] sit1: entered promiscuous mode [ 165.003571][ T6900] netlink: 'syz.0.242': attribute type 6 has an invalid length. [ 165.692150][ T5928] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.914552][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 165.943822][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.981795][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.094639][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.188578][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 166.262585][ T5881] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 166.305722][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.318296][ T5928] usb 2-1: config 0 descriptor?? [ 166.412253][ T92] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.479727][ T5987] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 166.554286][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.564661][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.629766][ T5881] usb 3-1: config 0 has no interfaces? [ 166.635618][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 166.643325][ T5881] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 166.987757][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 166.989914][ T92] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.018337][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 167.085211][ T5928] usb 2-1: USB disconnect, device number 15 [ 167.099392][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.144395][ T5881] usb 3-1: Product: syz [ 167.144883][ T92] usb 1-1: config 7 has an invalid interface number: 6 but max is 0 [ 167.169226][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.189815][ T5987] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.199308][ T92] usb 1-1: config 7 has no interface number 0 [ 167.216049][ T92] usb 1-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 167.245190][ T5987] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 167.260822][ T5881] usb 3-1: Manufacturer: syz [ 167.382086][ T92] usb 1-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.395540][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.402236][ T5881] usb 3-1: SerialNumber: syz [ 167.428956][ T5987] usb 4-1: Product: syz [ 167.429754][ T5881] usb 3-1: config 0 descriptor?? [ 167.433336][ T6928] dlm: plock device version mismatch: kernel (1.2.0), user (1.16384.0) [ 167.471219][ T5987] usb 4-1: Manufacturer: syz [ 167.477435][ T92] usb 1-1: config 7 interface 6 has no altsetting 0 [ 167.494318][ T5987] usb 4-1: SerialNumber: syz [ 167.521183][ T5987] usb 4-1: config 0 descriptor?? [ 167.612787][ T92] usb 1-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 167.642067][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.691148][ T92] usb 1-1: Product: syz [ 167.781350][ T92] usb 1-1: Manufacturer: syz [ 167.837639][ T92] usb 1-1: SerialNumber: syz [ 168.102258][ T92] option 1-1:7.6: GSM modem (1-port) converter detected [ 168.258879][ T6914] netlink: 'syz.2.246': attribute type 5 has an invalid length. [ 168.288558][ T92] usb 1-1: USB disconnect, device number 16 [ 168.383614][ T92] option 1-1:7.6: device disconnected [ 168.620650][ T5941] usb 5-1: USB disconnect, device number 19 [ 169.035175][ T6946] netlink: 44 bytes leftover after parsing attributes in process `syz.0.253'. [ 169.088051][ T6935] syz.1.251 (6935): drop_caches: 2 [ 169.104685][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 169.292185][ T5987] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 169.465228][ T5987] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.502062][ T5941] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.546062][ T5987] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.567464][ T92] usb 3-1: USB disconnect, device number 31 [ 169.585018][ T5987] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.636276][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.672363][ T6945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.690502][ T5987] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.713832][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 169.766634][ T5941] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 169.815372][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.898595][ T5941] usb 2-1: Product: syz [ 169.934470][ T5941] usb 2-1: Manufacturer: syz [ 170.056752][ T5941] usb 2-1: SerialNumber: syz [ 170.089316][ T5941] usb 2-1: config 0 descriptor?? [ 170.402757][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.427168][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.474308][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.490528][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 170.502360][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.555586][ T5983] usb 2-1: USB disconnect, device number 16 [ 170.761864][ T5881] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 170.892115][ T5881] usb 3-1: device descriptor read/64, error -71 [ 171.151962][ T5881] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 171.292037][ T5881] usb 3-1: device descriptor read/64, error -71 [ 171.416073][ T5881] usb usb3-port1: attempt power cycle [ 171.768297][ T5881] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 171.865964][ T5983] usb 5-1: USB disconnect, device number 20 [ 171.890339][ T5881] usb 3-1: device descriptor read/8, error -71 [ 171.937430][ T92] usb 4-1: USB disconnect, device number 20 [ 172.162042][ T5881] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 172.206007][ T5881] usb 3-1: device descriptor read/8, error -71 [ 172.236009][ T6984] fuse: Invalid gid '00000000000000000006' [ 172.332306][ T5881] usb usb3-port1: unable to enumerate USB device [ 172.571627][ T6995] tipc: Started in network mode [ 172.596791][ T6995] tipc: Node identity 1273ab7b5e88, cluster identity 4711 [ 172.614405][ T6995] tipc: Enabled bearer , priority 0 [ 172.624493][ T6995] syzkaller0: entered promiscuous mode [ 172.635876][ T6995] syzkaller0: entered allmulticast mode [ 172.674493][ T6995] tipc: Resetting bearer [ 172.694043][ T6994] tipc: Resetting bearer [ 172.702818][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 172.766258][ T6994] tipc: Disabling bearer [ 173.287164][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 173.287178][ T30] audit: type=1800 audit(1755094975.673:18): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.274" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 174.319094][ T7029] binder: 7028:7029 ioctl 40046104 200000000100 returned -22 [ 174.752014][ T92] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 174.822355][ T5941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 174.882633][ T92] usb 3-1: device descriptor read/64, error -71 [ 175.001161][ T5941] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 175.030001][ T5941] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.087028][ T5941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.114977][ T5941] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.128762][ T5941] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.140777][ T5987] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.149583][ T92] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 175.162332][ T5941] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.175639][ T5941] usb 2-1: config 1 interface 1 has no altsetting 0 [ 175.185435][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.194746][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.203261][ T5941] usb 2-1: Product: syz [ 175.207609][ T5941] usb 2-1: Manufacturer: syz [ 175.212676][ T5941] usb 2-1: SerialNumber: syz [ 175.227957][ T5941] cdc_ncm 2-1:1.0: skipping garbage [ 175.234145][ T5941] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 175.243517][ T5941] cdc_ncm 2-1:1.0: bind() failure [ 175.291955][ T92] usb 3-1: device descriptor read/64, error -71 [ 175.321852][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 175.328978][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.341278][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.352811][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.366446][ T5987] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 175.395228][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.404314][ T92] usb usb3-port1: attempt power cycle [ 175.419794][ T5987] usb 4-1: config 0 descriptor?? [ 175.512417][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 175.633243][ T7034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.647305][ T7034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.673809][ T5941] usb 2-1: USB disconnect, device number 17 [ 175.702155][ T10] usb 5-1: config 0 has no interfaces? [ 175.726255][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.735508][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.743625][ T10] usb 5-1: Product: syz [ 175.747946][ T10] usb 5-1: Manufacturer: syz [ 175.752855][ T10] usb 5-1: SerialNumber: syz [ 175.762585][ T92] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 175.813788][ T10] usb 5-1: config 0 descriptor?? [ 175.837829][ T92] usb 3-1: device descriptor read/8, error -71 [ 175.977359][ T5987] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0008/input/input11 [ 176.151852][ T92] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 176.189821][ T92] usb 3-1: device descriptor read/8, error -71 [ 176.196263][ T5987] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0008/input/input12 [ 176.332316][ T92] usb usb3-port1: unable to enumerate USB device [ 176.528623][ T5987] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 176.921895][ T92] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 177.094285][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 177.106180][ T92] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.116968][ T92] usb 2-1: config 0 has no interface number 0 [ 177.123759][ T92] usb 2-1: config 0 interface 184 has no altsetting 0 [ 177.138333][ T92] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.149103][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.166423][ C0] kye 0003:0458:5011.0008: usb_submit_urb(ctrl) failed: -1 [ 177.188476][ T92] usb 2-1: Product: syz [ 177.195772][ T92] usb 2-1: Manufacturer: syz [ 177.200695][ T92] usb 2-1: SerialNumber: syz [ 177.218338][ T92] usb 2-1: config 0 descriptor?? [ 177.233368][ T92] smsc75xx v1.0.0 [ 177.750489][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.750844][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.901855][ T92] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 177.901892][ T92] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 177.901914][ T92] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 177.902266][ T92] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 177.916731][ T92] usb 2-1: USB disconnect, device number 18 [ 178.048739][ T5941] usb 4-1: USB disconnect, device number 21 [ 178.053249][ T7064] input: syz0 as /devices/virtual/input/input13 [ 178.215799][ T7065] binder: BINDER_SET_CONTEXT_MGR already set [ 178.215852][ T7065] binder: 7058:7065 ioctl 4018620d 200000000040 returned -16 [ 178.761881][ T92] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 178.776265][ T5928] usb 5-1: USB disconnect, device number 21 [ 178.971858][ T92] usb 3-1: device descriptor read/64, error -71 [ 179.004790][ T5941] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 179.238294][ T92] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 179.250812][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.262586][ T5941] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 179.271726][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.293753][ T5941] usb 4-1: config 0 descriptor?? [ 179.324487][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 179.381911][ T5955] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 179.401849][ T92] usb 3-1: device descriptor read/64, error -71 [ 179.534580][ T92] usb usb3-port1: attempt power cycle [ 179.564920][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.582315][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.600071][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.630752][ T5955] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.663943][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.682721][ T5955] usb 1-1: config 0 descriptor?? [ 179.707144][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 179.721914][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 179.731894][ T5941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 179.742237][ T5941] pwc: recv_control_msg error -32 req 04 val 1000 [ 179.743881][ T7089] tipc: Enabled bearer , priority 0 [ 179.756853][ T5941] pwc: recv_control_msg error -32 req 04 val 1300 [ 179.772677][ T5941] pwc: recv_control_msg error -32 req 04 val 1400 [ 179.780211][ T5941] pwc: recv_control_msg error -32 req 02 val 2000 [ 179.813836][ T5941] pwc: recv_control_msg error -32 req 02 val 2100 [ 179.820832][ T7089] syzkaller0: entered promiscuous mode [ 179.832571][ T5941] pwc: recv_control_msg error -32 req 04 val 1500 [ 179.839590][ T7089] syzkaller0: entered allmulticast mode [ 179.845950][ T5941] pwc: recv_control_msg error -32 req 02 val 2500 [ 179.858895][ T5941] pwc: recv_control_msg error -32 req 02 val 2400 [ 179.874284][ T5941] pwc: recv_control_msg error -32 req 02 val 2600 [ 179.898309][ T7089] tipc: Resetting bearer [ 179.951940][ T92] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 179.992568][ T92] usb 3-1: device descriptor read/8, error -71 [ 180.090354][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 180.105607][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 180.164317][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 180.183234][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 180.212177][ T5941] pwc: Registered as video103. [ 180.227674][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 180.289559][ T92] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 180.319566][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.348071][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.355205][ T5941] usb 4-1: USB disconnect, device number 22 [ 180.363582][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.374567][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.392088][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 180.414587][ T92] usb 3-1: device descriptor read/8, error -71 [ 180.452107][ T10] usb 5-1: config 132 has an invalid interface number: 4 but max is 0 [ 180.491509][ T5955] usbhid 1-1:0.0: can't add hid device: -71 [ 180.506044][ T10] usb 5-1: config 132 has no interface number 0 [ 180.525710][ T5955] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 180.542451][ T10] usb 5-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 180.582321][ T92] usb usb3-port1: unable to enumerate USB device [ 180.604749][ T10] usb 5-1: config 132 interface 4 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 431 [ 180.642863][ T5955] usb 1-1: USB disconnect, device number 17 [ 180.675265][ T10] usb 5-1: config 132 interface 4 altsetting 0 endpoint 0xF has an invalid bInterval 241, changing to 11 [ 180.782152][ T92] tipc: Node number set to 1291561851 [ 180.820316][ T10] usb 5-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 180.847724][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.871068][ T10] usb 5-1: Product: syz [ 180.919176][ T10] usb 5-1: Manufacturer: syz [ 180.932452][ T10] usb 5-1: SerialNumber: syz [ 180.946077][ T7089] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 181.031165][ T7089] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 181.292057][ T5928] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 181.344794][ T10] usb 5-1: USB disconnect, device number 22 [ 181.435349][ T7088] tipc: Resetting bearer [ 181.451858][ T5955] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 181.522922][ T7088] tipc: Disabling bearer [ 181.542140][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 181.551556][ T5928] usb 4-1: too many configurations: 29, using maximum allowed: 8 [ 181.617372][ T5928] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 181.644313][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.652685][ T5928] usb 4-1: Product: syz [ 181.656918][ T5928] usb 4-1: Manufacturer: syz [ 181.661506][ T5928] usb 4-1: SerialNumber: syz [ 181.692774][ T5928] usb 4-1: config 0 descriptor?? [ 181.718466][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 181.721193][ T5928] hub 4-1:0.0: Invalid hub with more than one config or interface [ 181.759208][ T5928] hub 4-1:0.0: probe with driver hub failed with error -22 [ 181.781498][ T5955] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.801426][ T5955] usb 3-1: config 0 has no interface number 0 [ 181.807133][ T5928] gspca_main: 0ac8:c301 too many config [ 181.825766][ T5955] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.935533][ T5955] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 181.965143][ T5955] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.017919][ T5955] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.077953][ T5955] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 182.119668][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.160204][ T5955] usb 3-1: config 0 descriptor?? [ 182.192963][ T5955] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.399153][ T7103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.443653][ T7103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.807482][ T5955] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.232500][ T5955] usb 5-1: config 0 has no interfaces? [ 184.259023][ T5928] usb 3-1: USB disconnect, device number 44 [ 184.323680][ T5955] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.333046][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.341034][ T5955] usb 5-1: Product: syz [ 184.348048][ T5928] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 184.355155][ T5955] usb 5-1: Manufacturer: syz [ 184.359780][ T5955] usb 5-1: SerialNumber: syz [ 184.372323][ T5955] usb 5-1: config 0 descriptor?? [ 185.158804][ T5955] usb 4-1: USB disconnect, device number 23 [ 186.098657][ T7153] netlink: 'syz.1.306': attribute type 10 has an invalid length. [ 186.138576][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.306'. [ 186.201327][ T7153] team0: entered promiscuous mode [ 186.212051][ T7153] team_slave_0: entered promiscuous mode [ 186.228078][ T7153] team_slave_1: entered promiscuous mode [ 186.289527][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 186.300221][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 186.320981][ T5881] IPVS: starting estimator thread 0... [ 186.327333][ T7153] team0: entered allmulticast mode [ 186.332978][ T7153] team_slave_0: entered allmulticast mode [ 186.347995][ T7153] team_slave_1: entered allmulticast mode [ 186.359100][ T7153] bridge0: port 3(team0) entered blocking state [ 186.372552][ T7153] bridge0: port 3(team0) entered disabled state [ 186.385094][ T7153] bridge0: port 3(team0) entered blocking state [ 186.391664][ T7153] bridge0: port 3(team0) entered forwarding state [ 186.541989][ T7158] IPVS: using max 46 ests per chain, 110400 per kthread [ 186.738109][ T7157] sit2: entered allmulticast mode [ 186.783541][ T7157] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 187.236238][ T7173] input: syz1 as /devices/virtual/input/input16 [ 187.284058][ T7175] program syz.3.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.812495][ T5928] usb 5-1: USB disconnect, device number 23 [ 188.174610][ T7183] binder: BINDER_SET_CONTEXT_MGR already set [ 188.186273][ T7183] binder: 7180:7183 ioctl 4018620d 200000000040 returned -16 [ 188.582342][ T5928] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 188.722259][ T5928] usb 5-1: device descriptor read/64, error -71 [ 188.971916][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 189.124423][ T5928] usb 5-1: device descriptor read/64, error -71 [ 189.158639][ T7201] Option ''MO' to dns_resolver key: bad/missing value [ 189.292938][ T5928] usb usb5-port1: attempt power cycle [ 189.641909][ T5881] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 189.649898][ T5928] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 189.694934][ T5928] usb 5-1: device descriptor read/8, error -71 [ 189.967043][ T5881] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 189.991173][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.011131][ T5928] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 190.056710][ T5881] usb 4-1: config 0 descriptor?? [ 190.065685][ T92] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.066427][ T5928] usb 5-1: device descriptor read/8, error -71 [ 190.202570][ T5928] usb usb5-port1: unable to enumerate USB device [ 190.397144][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.410270][ T92] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 190.429002][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.526861][ T92] usb 1-1: config 0 descriptor?? [ 190.554156][ T92] usb 1-1: bad CDC descriptors [ 190.762151][ T1169] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 190.810690][ T7212] tipc: Enabled bearer , priority 10 [ 190.921866][ T5928] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 190.942260][ T1169] usb 2-1: device descriptor read/64, error -71 [ 191.081854][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 191.122288][ T5881] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 191.192480][ T1169] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 191.250835][ T5928] usb 3-1: config 128 has an invalid interface number: 184 but max is 0 [ 191.277640][ T5928] usb 3-1: config 128 has no interface number 0 [ 191.377152][ T5928] usb 3-1: config 128 interface 184 has no altsetting 0 [ 191.402182][ T1169] usb 2-1: device descriptor read/64, error -71 [ 191.435683][ T5928] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.456375][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.478399][ T5928] usb 3-1: Product: syz [ 191.512489][ T1169] usb usb2-port1: attempt power cycle [ 191.590819][ T92] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 191.665418][ T5928] usb 3-1: Manufacturer: syz [ 191.690297][ T5928] usb 3-1: SerialNumber: syz [ 191.803250][ T5941] tipc: Node number set to 3016447399 [ 191.803342][ T5928] smsc75xx v1.0.0 [ 191.834060][ T92] usb 5-1: config 0 has no interfaces? [ 191.846831][ T92] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.856314][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.869195][ T5928] smsc75xx 3-1:128.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 191.893305][ T5928] smsc75xx 3-1:128.184: probe with driver smsc75xx failed with error -22 [ 191.912815][ T92] usb 5-1: Product: syz [ 191.930260][ T92] usb 5-1: Manufacturer: syz [ 191.945349][ T92] usb 5-1: SerialNumber: syz [ 191.965681][ T92] usb 5-1: config 0 descriptor?? [ 192.080984][ T1169] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 192.119690][ T1169] usb 2-1: device descriptor read/8, error -71 [ 192.432120][ T1169] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 192.453565][ T5881] usb 1-1: USB disconnect, device number 18 [ 192.463680][ T1169] usb 2-1: device descriptor read/8, error -71 [ 192.492822][ T5955] usb 4-1: USB disconnect, device number 24 [ 192.592725][ T1169] usb usb2-port1: unable to enumerate USB device [ 192.972169][ T5955] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 193.169386][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.211186][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.307339][ T5955] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 193.387980][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.415959][ T5955] usb 4-1: config 0 descriptor?? [ 193.463387][ T92] usb 3-1: USB disconnect, device number 45 [ 193.915096][ T1169] hid_parser_main: 173 callbacks suppressed [ 193.915123][ T1169] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 193.968427][ T1169] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 194.041051][ T5955] usbhid 4-1:0.0: can't add hid device: -32 [ 194.048226][ T1169] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x3 [ 194.061695][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 194.104276][ T5955] usb 4-1: USB disconnect, device number 25 [ 194.515788][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522231][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565758][ T1169] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 194.689549][ T5941] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 194.855643][ T5941] usb 1-1: Using ep0 maxpacket: 8 [ 194.928065][ T5941] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 194.942048][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.975346][ T5941] usb 1-1: config 0 has no interface number 0 [ 195.002103][ T5941] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 195.024221][ T5941] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.088499][ T5941] usb 1-1: config 0 interface 52 has no altsetting 0 [ 195.118789][ T5941] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 195.141232][ T1169] usb 5-1: USB disconnect, device number 28 [ 195.162862][ T5941] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 195.188267][ T5941] usb 1-1: Manufacturer: syz [ 195.225482][ T5941] usb 1-1: config 0 descriptor?? [ 195.544833][ T5941] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input17 [ 195.700561][ T7249] bridge0: port 3(team0) entered disabled state [ 197.111904][ T5881] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 197.268955][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.281538][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 197.298235][ T5881] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 197.322159][ T5941] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 197.330613][ T5881] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.346873][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.356895][ T5881] usb 5-1: SerialNumber: syz [ 197.375381][ T7280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 197.404487][ T5881] hub 5-1:1.0: bad descriptor, ignoring hub [ 197.410472][ T5881] hub 5-1:1.0: probe with driver hub failed with error -5 [ 197.458974][ T1169] usb 1-1: USB disconnect, device number 19 [ 197.458976][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 197.481242][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 197.489137][ T5941] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 197.507594][ T5941] usb 3-1: config 0 has no interface number 0 [ 197.522309][ T5941] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.543601][ T5941] usb 3-1: config 0 interface 85 has no altsetting 0 [ 197.561435][ T5941] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 197.809214][ T7280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 197.829647][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.053644][ T5941] usb 3-1: Product: syz [ 198.072687][ T5941] usb 3-1: Manufacturer: syz [ 198.077507][ T5941] usb 3-1: SerialNumber: syz [ 198.133092][ T5941] usb 3-1: config 0 descriptor?? [ 198.204899][ T7303] binder: 7299:7303 ioctl c0306201 200000000640 returned -22 [ 198.212747][ T1169] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 198.369457][ T5881] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 198.453834][ T1169] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.466811][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.518475][ T1169] usb 1-1: config 0 descriptor?? [ 198.535381][ T5881] usb 5-1: USB disconnect, device number 29 [ 198.558155][ T5941] appletouch 3-1:0.85: Geyser mode initialized. [ 198.578147][ T1169] cp210x 1-1:0.0: cp210x converter detected [ 198.609079][ T5941] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18 [ 198.863794][ T7317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.076037][ T1169] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 199.098688][ T1169] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 199.162869][ T1169] usb 1-1: cp210x converter now attached to ttyUSB0 [ 199.315669][ T1169] usb 1-1: USB disconnect, device number 20 [ 199.378702][ T1169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.393014][ T7319] vlan2: entered promiscuous mode [ 199.401552][ T7319] bond0: entered promiscuous mode [ 199.408516][ T7319] bond_slave_0: entered promiscuous mode [ 199.442775][ T7319] bond_slave_1: entered promiscuous mode [ 199.458523][ T1169] cp210x 1-1:0.0: device disconnected [ 201.021559][ T7329] bridge0: entered promiscuous mode [ 201.034253][ T7329] bond0: entered promiscuous mode [ 201.039540][ T7329] bond_slave_0: entered promiscuous mode [ 201.046582][ T7329] bond_slave_1: entered promiscuous mode [ 201.064075][ T7329] debugfs: 'hsr0' already exists in 'hsr' [ 201.070023][ T7329] Cannot create hsr debugfs directory [ 201.077259][ T7329] hsr0: entered allmulticast mode [ 201.082551][ T7329] bridge0: entered allmulticast mode [ 201.088071][ T7329] bond0: entered allmulticast mode [ 201.093444][ T7329] bond_slave_0: entered allmulticast mode [ 201.099426][ T7329] bond_slave_1: entered allmulticast mode [ 201.282240][ T5987] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 201.341975][ T1169] usb 3-1: USB disconnect, device number 46 [ 201.442056][ T5941] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 201.487296][ T1169] appletouch 3-1:0.85: input: appletouch disconnected [ 201.527746][ T5987] usb 5-1: config 35 has an invalid interface number: 169 but max is 1 [ 201.571924][ T5987] usb 5-1: config 35 has an invalid descriptor of length 184, skipping remainder of the config [ 201.831846][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 202.043481][ T5941] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.060427][ T5987] usb 5-1: config 35 has 1 interface, different from the descriptor's value: 2 [ 202.181270][ T5941] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.191190][ T5987] usb 5-1: config 35 has no interface number 0 [ 202.227106][ T5987] usb 5-1: config 35 interface 169 altsetting 1 endpoint 0x4 has invalid maxpacket 56381, setting to 64 [ 202.238584][ T5941] usb 1-1: config 0 interface 0 has no altsetting 0 [ 202.270984][ T5941] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 202.282137][ T1169] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 202.314628][ T5987] usb 5-1: config 35 interface 169 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 202.371322][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.381805][ T5987] usb 5-1: config 35 interface 169 has no altsetting 0 [ 202.411564][ T5941] usb 1-1: config 0 descriptor?? [ 202.438551][ T5987] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=fd.7f [ 202.441934][ T1169] usb 3-1: Using ep0 maxpacket: 8 [ 202.471788][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.509623][ T5987] usb 5-1: Product: 䀊 [ 202.529908][ T5987] usb 5-1: Manufacturer: 圪ᵍ糏洒հ⛣ꭣ算蚕ﴻ目鿺⤴ꑈ꾞㵗岖咃斶ৡ愬 约ᕐ杒义㯎ፐ龝츥闒苍ꈩ렰藷ᦶ㫥镪㼈鐬劍훚䝕鶜㳃鮠훡腛겒琪≄ⶑ唃뼲持替Ჿ㾛룤붾젲᪥ằᗝ렶誌㝺࠹鶮澼谻냏犩篹ࣿꥯ⦥꧀ყ❡Ⰵ죆蜿ュ铏䒨浹睤俩舁ᚋ㽏툹ഹ蝹櫨 [ 202.532033][ T1169] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 202.567265][ T7369] dvmrp8: entered allmulticast mode [ 202.616912][ T7370] dvmrp8: left allmulticast mode [ 202.695074][ T5987] usb 5-1: SerialNumber: Э [ 202.716900][ T1169] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.811957][ T1169] usb 3-1: config 0 has no interface number 0 [ 202.832252][ T1169] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 202.950277][ T1169] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 203.015240][ T1169] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 203.047896][ T1169] usb 3-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.059552][ T5987] imon_raw 5-1:35.169: IR endpoint missing [ 203.127712][ T1169] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 203.158538][ T5987] usb 5-1: USB disconnect, device number 30 [ 203.161906][ T1169] usb 3-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 203.177716][ T5992] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 203.281499][ T1169] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 203.317360][ T1169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.356953][ T1169] usb 3-1: Product: syz [ 203.362644][ T5992] usb 4-1: device descriptor read/64, error -71 [ 203.386932][ T1169] usb 3-1: Manufacturer: syz [ 203.402792][ T1169] usb 3-1: SerialNumber: syz [ 203.431067][ T1169] usb 3-1: config 0 descriptor?? [ 203.439826][ T5941] usbhid 1-1:0.0: can't add hid device: -71 [ 203.452304][ T7356] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 203.482492][ T7356] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 203.491329][ T5941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.516959][ T5941] usb 1-1: USB disconnect, device number 21 [ 203.621956][ T5992] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 203.789907][ T5992] usb 4-1: device descriptor read/64, error -71 [ 203.791916][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.355'. [ 203.913172][ T5992] usb usb4-port1: attempt power cycle [ 204.085402][ T7399] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 204.094571][ T7399] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 204.140391][ T7356] pim6reg: entered allmulticast mode [ 204.279192][ T5992] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 204.337967][ T5992] usb 4-1: device descriptor read/8, error -71 [ 204.442142][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 205.050752][ T5992] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 205.072893][ T30] audit: type=1326 audit(1755095007.453:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.0.357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd78b8ebe9 code=0x0 [ 205.077471][ T7413] loop6: detected capacity change from 0 to 63 [ 205.115359][ T5992] usb 4-1: device descriptor read/8, error -71 [ 205.118092][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.189636][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.232081][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.285202][ T5992] usb usb4-port1: unable to enumerate USB device [ 205.296547][ T1169] usb 3-1: NFC: intf ffff888024f4c000 id ffffffff8eb53be0 [ 205.401328][ T1169] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 205.419539][ T7423] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 205.518089][ T1169] usb 3-1: USB disconnect, device number 47 [ 205.532127][ T7410] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.537828][ T1169] usb 3-1: NFC: intf ffff888024f4c000 [ 205.553461][ T7410] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.602790][ T7408] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.641675][ T7410] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.683419][ T5972] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.714813][ T7408] Buffer I/O error on dev loop6, logical block 0, async page read [ 205.729775][ T7410] Buffer I/O error on dev loop6, logical block 0, async page read [ 206.123453][ T7438] capability: warning: `syz.0.361' uses deprecated v2 capabilities in a way that may be insecure [ 206.199217][ T7423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.205493][ T7423] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 206.229679][ T7423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.236702][ T7423] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 206.246950][ T7423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.254867][ T7423] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 206.362133][ T5941] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 206.400283][ T7423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.419284][ T7423] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 206.503827][ T7423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.512065][ T7423] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 206.626306][ T30] audit: type=1326 audit(1755095009.003:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 206.626471][ T92] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 206.751996][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 207.034051][ T5941] usb 2-1: config index 0 descriptor too short (expected 46935, got 18) [ 207.042700][ T5941] usb 2-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 207.054532][ T30] audit: type=1326 audit(1755095009.003:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.080009][ T5941] usb 2-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 207.107600][ T5941] usb 2-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 207.117088][ T92] usb 5-1: device descriptor read/64, error -71 [ 207.123853][ T30] audit: type=1326 audit(1755095009.003:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.154650][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 207.166838][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.269396][ T5941] usb 2-1: Product: syz [ 207.273758][ T30] audit: type=1326 audit(1755095009.003:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.311800][ T5941] usb 2-1: Manufacturer: syz [ 207.316487][ T5941] usb 2-1: SerialNumber: syz [ 207.361871][ T92] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 207.378791][ T30] audit: type=1326 audit(1755095009.003:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.504533][ T30] audit: type=1326 audit(1755095009.003:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.526881][ T92] usb 5-1: device descriptor read/64, error -71 [ 207.653196][ T5941] usb 2-1: USB disconnect, device number 23 [ 207.670987][ T30] audit: type=1326 audit(1755095009.003:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.694290][ T92] usb usb5-port1: attempt power cycle [ 207.760655][ T30] audit: type=1326 audit(1755095009.003:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 207.909370][ T30] audit: type=1326 audit(1755095009.003:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.3.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9ab8ebe9 code=0x7ffc0000 [ 208.061864][ T92] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 208.082707][ T92] usb 5-1: device descriptor read/8, error -71 [ 208.175245][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 208.323596][ T92] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 208.341662][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 208.354346][ T92] usb 5-1: device descriptor read/8, error -71 [ 208.380984][ T5928] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 208.395104][ T5928] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 208.407870][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.425620][ T5928] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.462783][ T92] usb usb5-port1: unable to enumerate USB device [ 208.529637][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.543465][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.605461][ T5928] usb 4-1: Product: syz [ 208.605770][ T7478] capability: warning: `syz.1.369' uses 32-bit capabilities (legacy support in use) [ 208.626058][ T5928] usb 4-1: Manufacturer: syz [ 208.637483][ T5928] usb 4-1: SerialNumber: syz [ 208.893122][ T5928] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 208.900155][ T5928] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 208.911602][ T5928] cdc_ncm 4-1:1.0: bind() failure [ 208.969694][ T5928] usb 4-1: USB disconnect, device number 30 [ 209.757748][ T7500] fuse: blksize only supported for fuseblk [ 209.770168][ T7500] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 209.841414][ T7509] loop6: detected capacity change from 0 to 524287997 [ 210.982073][ T5881] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 211.162326][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 211.190237][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.225927][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.251823][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.292429][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.331996][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.360114][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 211.379876][ T5881] usb 1-1: config 0 descriptor?? [ 212.193222][ T5983] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 212.257034][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 212.263413][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.279159][ T5881] usb 1-1: USB disconnect, device number 22 [ 212.286205][ T7553] process 'syz.4.386' launched './file2' with NULL argv: empty string added [ 212.352018][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 212.369916][ T5983] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 212.384171][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.393177][ T5983] usb 2-1: Product: syz [ 212.399013][ T5983] usb 2-1: Manufacturer: syz [ 212.404541][ T5983] usb 2-1: SerialNumber: syz [ 212.415684][ T5983] usb 2-1: config 0 descriptor?? [ 212.429609][ T5983] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 212.641999][ T92] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 212.781914][ T92] usb 5-1: device descriptor read/64, error -71 [ 212.910170][ T5983] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 213.074826][ T5983] usb 2-1: USB disconnect, device number 24 [ 213.132242][ T92] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 213.143193][ T5983] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 213.176806][ T5983] visor 2-1:0.0: device disconnected [ 213.282017][ T92] usb 5-1: device descriptor read/64, error -71 [ 213.392124][ T92] usb usb5-port1: attempt power cycle [ 213.482772][ T5941] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 213.552997][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 213.646114][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.656486][ T5941] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 213.665763][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.682521][ T5941] usb 1-1: config 0 descriptor?? [ 213.703091][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 213.726172][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 213.740964][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.749314][ T92] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 213.788677][ T9] usb 4-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 213.807376][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.820506][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 213.836237][ T92] usb 5-1: device descriptor read/8, error -71 [ 213.847347][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.855510][ T9] usb 4-1: Product: syz [ 213.860082][ T9] usb 4-1: Manufacturer: syz [ 213.864953][ T9] usb 4-1: SerialNumber: syz [ 214.081999][ T92] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 214.092607][ T7562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.390'. [ 214.137693][ T92] usb 5-1: device descriptor read/8, error -71 [ 214.151872][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 214.166346][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 214.287048][ T92] usb usb5-port1: unable to enumerate USB device [ 214.328753][ T5941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 214.353952][ T9] usb 4-1: 0:2 : does not exist [ 214.363848][ T5941] pwc: recv_control_msg error -32 req 04 val 1000 [ 214.382039][ T5941] pwc: recv_control_msg error -32 req 04 val 1300 [ 214.394402][ T9] usb 4-1: USB disconnect, device number 31 [ 214.406208][ T5941] pwc: recv_control_msg error -32 req 04 val 1400 [ 214.414838][ T5941] pwc: recv_control_msg error -32 req 02 val 2000 [ 214.714882][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.824943][ T5941] pwc: recv_control_msg error -71 req 02 val 2100 [ 214.842392][ T5941] pwc: recv_control_msg error -71 req 04 val 1500 [ 214.849912][ T5941] pwc: recv_control_msg error -71 req 02 val 2500 [ 214.868688][ T5941] pwc: recv_control_msg error -71 req 02 val 2400 [ 214.878423][ T5941] pwc: recv_control_msg error -71 req 02 val 2600 [ 214.892954][ T5941] pwc: recv_control_msg error -71 req 02 val 2900 [ 214.919624][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 214.927597][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 214.937551][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 214.956569][ T5941] pwc: Registered as video103. [ 214.986385][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 215.052580][ T5941] usb 1-1: USB disconnect, device number 23 [ 216.212101][ T5983] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 216.392023][ T5983] usb 1-1: Invalid ep0 maxpacket: 16 [ 216.539107][ T5983] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 216.765985][ T5983] usb 1-1: Invalid ep0 maxpacket: 16 [ 216.775895][ T5983] usb usb1-port1: attempt power cycle [ 217.131913][ T5983] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 217.155334][ T5983] usb 1-1: Invalid ep0 maxpacket: 16 [ 217.201963][ T92] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 217.302447][ T5983] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 217.332938][ T5983] usb 1-1: Invalid ep0 maxpacket: 16 [ 217.341303][ T5983] usb usb1-port1: unable to enumerate USB device [ 217.362039][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 217.409666][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 217.417520][ T92] usb 5-1: can't read configurations, error -61 [ 217.562082][ T92] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 217.793721][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 217.801672][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 217.809969][ T92] usb 5-1: can't read configurations, error -61 [ 217.818100][ T92] usb usb5-port1: attempt power cycle [ 218.162054][ T92] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 218.192821][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 218.203445][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 218.211265][ T92] usb 5-1: can't read configurations, error -61 [ 218.220046][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 218.229498][ T7619] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 218.237376][ T7619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.411919][ T92] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 218.463243][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 218.475936][ T92] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 218.488360][ T92] usb 5-1: can't read configurations, error -61 [ 218.499810][ T92] usb usb5-port1: unable to enumerate USB device [ 219.749950][ T7629] nft_compat: unsupported protocol 1 [ 219.959192][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.968432][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.222503][ T92] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 220.281269][ T7645] program syz.3.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.383863][ T92] usb 1-1: device descriptor read/64, error -71 [ 220.625158][ T92] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 220.761849][ T92] usb 1-1: device descriptor read/64, error -71 [ 220.884457][ T92] usb usb1-port1: attempt power cycle [ 221.081829][ T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 221.212009][ T10] usb 2-1: device descriptor read/64, error -71 [ 221.242159][ T92] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 221.343452][ T92] usb 1-1: device descriptor read/8, error -71 [ 221.452013][ T10] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 221.581853][ T92] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 221.601877][ T10] usb 2-1: device descriptor read/64, error -71 [ 221.609109][ T92] usb 1-1: device descriptor read/8, error -71 [ 221.793888][ T10] usb usb2-port1: attempt power cycle [ 221.799655][ T92] usb usb1-port1: unable to enumerate USB device [ 222.174176][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 222.224102][ T10] usb 2-1: device descriptor read/8, error -71 [ 222.481896][ T10] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 222.507299][ T10] usb 2-1: device descriptor read/8, error -71 [ 222.560614][ T7689] loop7: detected capacity change from 0 to 16384 [ 222.618070][ T7689] loop7: detected capacity change from 16384 to 16383 [ 222.642440][ T10] usb usb2-port1: unable to enumerate USB device [ 223.314433][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 223.513807][ T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 223.531782][ T10] usb 1-1: config 0 has no interface number 0 [ 223.549024][ T10] usb 1-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 223.605777][ T10] usb 1-1: config 0 interface 128 has no altsetting 0 [ 223.618963][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 223.638845][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.647428][ T10] usb 1-1: Product: syz [ 223.652678][ T10] usb 1-1: Manufacturer: syz [ 223.658232][ T10] usb 1-1: SerialNumber: syz [ 223.666712][ T10] usb 1-1: config 0 descriptor?? [ 223.676677][ T10] radio-si470x 1-1:0.128: could not find interrupt in endpoint [ 223.706999][ T10] radio-si470x 1-1:0.128: probe with driver radio-si470x failed with error -5 [ 223.720159][ T10] usbhid 1-1:0.128: couldn't find an input interrupt endpoint [ 223.915160][ T7714] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.432'. [ 223.941420][ T7714] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 223.971587][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 225.408846][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 225.408867][ T30] audit: type=1326 audit(1755095027.783:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.439676][ T30] audit: type=1326 audit(1755095027.783:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.467523][ T30] audit: type=1326 audit(1755095027.783:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.502091][ T30] audit: type=1326 audit(1755095027.783:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.564526][ T30] audit: type=1326 audit(1755095027.783:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.765405][ T30] audit: type=1326 audit(1755095027.783:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.812793][ T30] audit: type=1326 audit(1755095027.783:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.839684][ T30] audit: type=1326 audit(1755095027.783:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.863795][ T30] audit: type=1326 audit(1755095027.783:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.893673][ T30] audit: type=1326 audit(1755095027.783:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7727 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19dfd8ebe9 code=0x7ffc0000 [ 225.996514][ T92] usb 1-1: USB disconnect, device number 32 [ 226.852895][ T7750] random: crng reseeded on system resumption [ 230.714075][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'. [ 231.237914][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 232.499518][ T7813] netlink: 104 bytes leftover after parsing attributes in process `syz.0.459'. [ 233.661824][ T5992] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 233.818258][ T5992] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 233.829621][ T5992] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 233.846210][ T5992] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 233.865166][ T5992] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 233.876538][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.890582][ T5992] usb 1-1: Product: syz [ 233.895303][ T5992] usb 1-1: Manufacturer: syz [ 233.900024][ T5992] usb 1-1: SerialNumber: syz [ 233.916978][ T5992] usb 1-1: config 0 descriptor?? [ 233.926982][ T7818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.935271][ T7818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.950288][ T5992] usb 1-1: ucan: probing device on interface #0 [ 234.161549][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.170666][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.188373][ T5992] usb 1-1: ucan: could not read protocol version, ret=-71 [ 234.202010][ T5992] usb 1-1: ucan: probe failed; try to update the device firmware [ 234.235042][ T5992] usb 1-1: USB disconnect, device number 33 [ 234.859834][ T7821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.551943][ T92] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 236.691876][ T92] usb 1-1: device descriptor read/64, error -71 [ 236.944629][ T92] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 237.081852][ T92] usb 1-1: device descriptor read/64, error -71 [ 237.193025][ T92] usb usb1-port1: attempt power cycle [ 237.541909][ T92] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 237.565936][ T92] usb 1-1: device descriptor read/8, error -71 [ 237.812027][ T92] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 237.832538][ T92] usb 1-1: device descriptor read/8, error -71 [ 237.943299][ T92] usb usb1-port1: unable to enumerate USB device [ 239.477603][ T7832] fuse: Unknown parameter 'mGN8oad' [ 255.887255][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893686][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.353239][ T5233] udevd[5233]: worker [6978] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 317.325549][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.331997][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 367.235849][ T31] INFO: task kworker/1:2:1169 blocked for more than 143 seconds. [ 367.243897][ T31] Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 [ 367.251533][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.260409][ T31] task:kworker/1:2 state:D stack:19864 pid:1169 tgid:1169 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 367.272927][ T31] Workqueue: usb_hub_wq hub_event [ 367.277991][ T31] Call Trace: [ 367.281262][ T31] [ 367.284256][ T31] __schedule+0x1798/0x4cc0 [ 367.289229][ T31] ? __pfx___schedule+0x10/0x10 [ 367.294276][ T31] ? schedule+0x91/0x360 [ 367.298550][ T31] schedule+0x165/0x360 [ 367.303193][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.308679][ T31] __mutex_lock+0x7e6/0x1360 [ 367.313450][ T31] ? __mutex_lock+0x5b6/0x1360 [ 367.318257][ T31] ? rfkill_unregister+0xc8/0x220 [ 367.323471][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.328538][ T31] ? __pfx_device_del+0x10/0x10 [ 367.333825][ T31] rfkill_unregister+0xc8/0x220 [ 367.338728][ T31] nfc_unregister_device+0x96/0x2a0 [ 367.344003][ T31] nfcmrvl_nci_unregister_dev+0x45/0x130 [ 367.349677][ T31] nfcmrvl_disconnect+0xa8/0xf0 [ 367.354607][ T31] usb_unbind_interface+0x26b/0x910 [ 367.359936][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 367.365970][ T31] device_release_driver_internal+0x4d6/0x800 [ 367.372161][ T31] bus_remove_device+0x34d/0x410 [ 367.377143][ T31] device_del+0x511/0x8e0 [ 367.381563][ T31] ? kfree+0x18e/0x440 [ 367.385711][ T31] ? __pfx_device_del+0x10/0x10 [ 367.390581][ T31] ? kobject_put+0x446/0x480 [ 367.395681][ T31] usb_disable_device+0x3e9/0x8a0 [ 367.400764][ T31] usb_disconnect+0x330/0x950 [ 367.405550][ T31] hub_event+0x1cf5/0x4a20 [ 367.410023][ T31] ? do_raw_spin_lock+0x121/0x290 [ 367.415141][ T31] ? register_lock_class+0x51/0x320 [ 367.420387][ T31] ? __pfx_hub_event+0x10/0x10 [ 367.425671][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 367.431410][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.436681][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 367.442575][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 367.448317][ T31] process_scheduled_works+0xade/0x17b0 [ 367.454197][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.460318][ T31] worker_thread+0x8a0/0xda0 [ 367.465018][ T31] kthread+0x70e/0x8a0 [ 367.469124][ T31] ? __pfx_worker_thread+0x10/0x10 [ 367.474426][ T31] ? __pfx_kthread+0x10/0x10 [ 367.479048][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.484530][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.489755][ T31] ? __pfx_kthread+0x10/0x10 [ 367.494419][ T31] ret_from_fork+0x3f9/0x770 [ 367.499028][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 367.504301][ T31] ? __switch_to_asm+0x39/0x70 [ 367.509114][ T31] ? __switch_to_asm+0x33/0x70 [ 367.514300][ T31] ? __pfx_kthread+0x10/0x10 [ 367.518956][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.523904][ T31] [ 367.527028][ T31] INFO: task kworker/0:7:5987 blocked for more than 143 seconds. [ 367.535076][ T31] Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 [ 367.543151][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.551960][ T31] task:kworker/0:7 state:D stack:20440 pid:5987 tgid:5987 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 367.564040][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 367.571041][ T31] Call Trace: [ 367.574607][ T31] [ 367.577561][ T31] __schedule+0x1798/0x4cc0 [ 367.582171][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.588553][ T31] ? __pfx___schedule+0x10/0x10 [ 367.593606][ T31] ? schedule+0x91/0x360 [ 367.597891][ T31] schedule+0x165/0x360 [ 367.602386][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.607915][ T31] __mutex_lock+0x7e6/0x1360 [ 367.612680][ T31] ? __mutex_lock+0x5b6/0x1360 [ 367.617482][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 367.623854][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.628917][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 367.635693][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 367.641538][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 367.648120][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 367.654161][ T31] process_scheduled_works+0xade/0x17b0 [ 367.659781][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.666089][ T31] worker_thread+0x8a0/0xda0 [ 367.670696][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.677117][ T31] ? __kthread_parkme+0x7b/0x200 [ 367.682127][ T31] kthread+0x70e/0x8a0 [ 367.686219][ T31] ? __pfx_worker_thread+0x10/0x10 [ 367.691336][ T31] ? __pfx_kthread+0x10/0x10 [ 367.696224][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.701464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.706735][ T31] ? __pfx_kthread+0x10/0x10 [ 367.711387][ T31] ret_from_fork+0x3f9/0x770 [ 367.716078][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 367.721226][ T31] ? __switch_to_asm+0x39/0x70 [ 367.726353][ T31] ? __switch_to_asm+0x33/0x70 [ 367.731152][ T31] ? __pfx_kthread+0x10/0x10 [ 367.735897][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.740722][ T31] [ 367.743871][ T31] INFO: task syz.2.359:7423 blocked for more than 143 seconds. [ 367.751433][ T31] Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 [ 367.759446][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.768272][ T31] task:syz.2.359 state:D stack:26024 pid:7423 tgid:7415 ppid:5867 task_flags:0x400040 flags:0x00004006 [ 367.780293][ T31] Call Trace: [ 367.783984][ T31] [ 367.786948][ T31] __schedule+0x1798/0x4cc0 [ 367.791491][ T31] ? __pfx___schedule+0x10/0x10 [ 367.796784][ T31] ? schedule+0x91/0x360 [ 367.801057][ T31] schedule+0x165/0x360 [ 367.805273][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.810814][ T31] __mutex_lock+0x7e6/0x1360 [ 367.815742][ T31] ? __mutex_lock+0x5b6/0x1360 [ 367.820532][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 367.825979][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 367.831053][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.836323][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 367.842564][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 367.848919][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 367.854748][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 367.859984][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 367.865790][ T31] rfkill_set_block+0x1cf/0x440 [ 367.870676][ T31] rfkill_fop_write+0x44b/0x570 [ 367.876110][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 367.881509][ T31] ? security_file_permission+0x20/0x290 [ 367.887217][ T31] ? rw_verify_area+0x255/0x4d0 [ 367.892235][ T31] ? __lock_acquire+0xab9/0xd20 [ 367.897111][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 367.902809][ T31] vfs_write+0x27b/0xb30 [ 367.907105][ T31] ? __pfx_vfs_write+0x10/0x10 [ 367.911941][ T31] ? __fget_files+0x2a/0x420 [ 367.916545][ T31] ? __fget_files+0x2a/0x420 [ 367.921125][ T31] ? __fget_files+0x3a0/0x420 [ 367.925857][ T31] ? __fget_files+0x2a/0x420 [ 367.930467][ T31] ksys_write+0x145/0x250 [ 367.935239][ T31] ? __pfx_ksys_write+0x10/0x10 [ 367.940116][ T31] ? rcu_is_watching+0x15/0xb0 [ 367.944943][ T31] ? do_syscall_64+0xbe/0x3b0 [ 367.949646][ T31] do_syscall_64+0xfa/0x3b0 [ 367.954288][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.959510][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.965857][ T31] ? clear_bhb_loop+0x60/0xb0 [ 367.970534][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.976482][ T31] RIP: 0033:0x7f4eccd8ebe9 [ 367.980910][ T31] RSP: 002b:00007f4ecdc44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.989588][ T31] RAX: ffffffffffffffda RBX: 00007f4eccfb6180 RCX: 00007f4eccd8ebe9 [ 367.997905][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 368.005954][ T31] RBP: 00007f4ecce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 368.014030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.022319][ T31] R13: 00007f4eccfb6218 R14: 00007f4eccfb6180 R15: 00007f4ecd0dfa28 [ 368.030337][ T31] [ 368.033734][ T31] INFO: task syz-executor:7646 blocked for more than 144 seconds. [ 368.041560][ T31] Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 [ 368.049279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 368.058213][ T31] task:syz-executor state:D stack:24104 pid:7646 tgid:7646 ppid:5851 task_flags:0x400000 flags:0x00004004 [ 368.070292][ T31] Call Trace: [ 368.073657][ T31] [ 368.076602][ T31] __schedule+0x1798/0x4cc0 [ 368.081210][ T31] ? __pfx___schedule+0x10/0x10 [ 368.086345][ T31] ? schedule+0x91/0x360 [ 368.090615][ T31] schedule+0x165/0x360 [ 368.095063][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.100559][ T31] __mutex_lock+0x7e6/0x1360 [ 368.105620][ T31] ? __mutex_lock+0x5b6/0x1360 [ 368.110596][ T31] ? rfkill_register+0x37/0x8e0 [ 368.116157][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.121305][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 368.126637][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 368.132099][ T31] ? device_initialize+0x24b/0x440 [ 368.137240][ T31] rfkill_register+0x37/0x8e0 [ 368.142262][ T31] hci_register_dev+0x3f5/0x890 [ 368.147161][ T31] vhci_create_device+0x39c/0x6e0 [ 368.152526][ T31] vhci_write+0x3ce/0x4a0 [ 368.156887][ T31] vfs_write+0x5c6/0xb30 [ 368.161133][ T31] ? __pfx_vhci_write+0x10/0x10 [ 368.166079][ T31] ? __pfx_vfs_write+0x10/0x10 [ 368.170892][ T31] ? fdget_pos+0x124/0x320 [ 368.175612][ T31] ksys_write+0x145/0x250 [ 368.179975][ T31] ? __pfx_ksys_write+0x10/0x10 [ 368.184922][ T31] ? do_syscall_64+0xbe/0x3b0 [ 368.189728][ T31] do_syscall_64+0xfa/0x3b0 [ 368.194292][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.199524][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.205936][ T31] ? clear_bhb_loop+0x60/0xb0 [ 368.210619][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.216620][ T31] RIP: 0033:0x7f792978d660 [ 368.221051][ T31] RSP: 002b:00007ffc2128ad18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 368.229539][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f792978d660 [ 368.237714][ T31] RDX: 0000000000000002 RSI: 00007ffc2128ad2a RDI: 00000000000000ca [ 368.245771][ T31] RBP: 00007f79299b67b8 R08: 00000000000000d7 R09: 0000000000000000 [ 368.253843][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 368.262100][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 368.270112][ T31] [ 368.273621][ T31] [ 368.273621][ T31] Showing all locks held in the system: [ 368.281356][ T31] 1 lock held by khungtaskd/31: [ 368.286285][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 368.296467][ T31] 7 locks held by kworker/1:2/1169: [ 368.301868][ T31] #0: ffff8880216fe148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 368.313444][ T31] #1: ffffc90003cffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 368.325701][ T31] #2: ffff8881453d6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 368.334670][ T31] #3: ffff888027100198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 368.343971][ T31] #4: ffff888024f4c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 368.354801][ T31] #5: ffff888023517100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 368.364778][ T31] #6: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 368.375084][ T31] 2 locks held by getty/5625: [ 368.379816][ T31] #0: ffff88802fc020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 368.389831][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 368.400028][ T31] 3 locks held by kworker/0:7/5987: [ 368.405268][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 368.416646][ T31] #1: ffffc9000aba7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 368.430302][ T31] #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 368.443031][ T31] 4 locks held by udevd/6978: [ 368.447741][ T31] #0: ffff888078d188b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 368.458432][ T31] #1: ffff88802fae3c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 368.468105][ T31] #2: ffff88805b2b7788 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 368.477822][ T31] #3: ffff888027100198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 368.487243][ T31] 2 locks held by syz.2.359/7423: [ 368.492313][ T31] #0: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 368.502582][ T31] #1: ffff888023517100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 368.516150][ T31] 2 locks held by syz-executor/7646: [ 368.521464][ T31] #0: ffff8880244b6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 368.531811][ T31] #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 368.541911][ T31] 3 locks held by syz.3.432/7714: [ 368.546991][ T31] #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.555294][ T31] #1: ffffffff8f59d148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 368.564384][ T31] #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 368.575512][ T31] 2 locks held by syz.4.449/7770: [ 368.580564][ T31] #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.589018][ T31] #1: ffffffff8f59d148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 368.598091][ T31] 2 locks held by syz.1.450/7773: [ 368.603187][ T31] #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.611430][ T31] #1: ffffffff8f59d148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 368.620431][ T31] 2 locks held by syz-executor/7829: [ 368.625923][ T31] #0: ffff888021b69918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 368.636345][ T31] #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 368.646401][ T31] 2 locks held by syz.0.470/7845: [ 368.651432][ T31] #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.659656][ T31] #1: ffffffff8f59d148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 368.668916][ T31] 2 locks held by syz.0.470/7846: [ 368.674187][ T31] #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.682676][ T31] #1: ffffffff8f59d148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 368.692014][ T31] 2 locks held by syz.0.470/7847: [ 368.697064][ T31] #0: ffffffff8f59d330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.705700][ T31] #1: ffffffff8f59d148 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 368.714987][ T31] 2 locks held by syz-executor/7850: [ 368.720373][ T31] #0: ffff88807f14b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 368.730493][ T31] #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 368.740522][ T31] 2 locks held by syz-executor/7851: [ 368.745839][ T31] #0: ffff88807b1d3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 368.755928][ T31] #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 368.766005][ T31] 2 locks held by syz-executor/7856: [ 368.771297][ T31] #0: ffff88807dd08918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 368.781390][ T31] #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 368.791431][ T31] [ 368.793828][ T31] ============================================= [ 368.793828][ T31] [ 368.802349][ T31] NMI backtrace for cpu 0 [ 368.802366][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 368.802389][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.802401][ T31] Call Trace: [ 368.802409][ T31] [ 368.802417][ T31] dump_stack_lvl+0x189/0x250 [ 368.802449][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.802473][ T31] ? __pfx__printk+0x10/0x10 [ 368.802514][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 368.802539][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 368.802565][ T31] ? __pfx__printk+0x10/0x10 [ 368.802597][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.802630][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 368.802656][ T31] watchdog+0xf93/0xfe0 [ 368.802700][ T31] ? watchdog+0x1de/0xfe0 [ 368.802733][ T31] kthread+0x70e/0x8a0 [ 368.802771][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.802797][ T31] ? __pfx_kthread+0x10/0x10 [ 368.802823][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.802848][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.802871][ T31] ? __pfx_kthread+0x10/0x10 [ 368.802896][ T31] ret_from_fork+0x3f9/0x770 [ 368.802920][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 368.802946][ T31] ? __switch_to_asm+0x39/0x70 [ 368.802970][ T31] ? __switch_to_asm+0x33/0x70 [ 368.802993][ T31] ? __pfx_kthread+0x10/0x10 [ 368.803019][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.803061][ T31] [ 368.803068][ T31] Sending NMI from CPU 0 to CPUs 1: [ 368.950866][ C1] NMI backtrace for cpu 1 [ 368.950884][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 368.950903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.950913][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 368.950939][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 368.950954][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 368.950969][ C1] RAX: 910125103873ea00 RBX: ffffffff81968308 RCX: 910125103873ea00 [ 368.950982][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b6da5 RDI: ffffffff8be33400 [ 368.950992][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 368.951004][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa37e30 [ 368.951015][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 368.951026][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 368.951039][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.951050][ C1] CR2: 00005567f0e5a168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 368.951067][ C1] Call Trace: [ 368.951073][ C1] [ 368.951079][ C1] default_idle+0x13/0x20 [ 368.951093][ C1] default_idle_call+0x74/0xb0 [ 368.951107][ C1] do_idle+0x1e8/0x510 [ 368.951125][ C1] ? __pfx_do_idle+0x10/0x10 [ 368.951138][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.951164][ C1] cpu_startup_entry+0x44/0x60 [ 368.951179][ C1] start_secondary+0x101/0x110 [ 368.951200][ C1] common_startup_64+0x13e/0x147 [ 368.951226][ C1] [ 368.951969][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 368.951989][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 368.952013][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.952025][ T31] Call Trace: [ 368.952033][ T31] [ 368.952042][ T31] dump_stack_lvl+0x99/0x250 [ 368.952069][ T31] ? __asan_memcpy+0x40/0x70 [ 368.952092][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.952113][ T31] ? __pfx__printk+0x10/0x10 [ 368.952150][ T31] vpanic+0x281/0x750 [ 368.952174][ T31] ? __pfx_vpanic+0x10/0x10 [ 368.952194][ T31] ? preempt_schedule+0xae/0xc0 [ 368.952219][ T31] ? preempt_schedule_common+0x83/0xd0 [ 368.952248][ T31] panic+0xb9/0xc0 [ 368.952268][ T31] ? __pfx_panic+0x10/0x10 [ 368.952290][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 368.952323][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 368.952348][ T31] watchdog+0xfd2/0xfe0 [ 368.952379][ T31] ? watchdog+0x1de/0xfe0 [ 368.952408][ T31] kthread+0x70e/0x8a0 [ 368.952434][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.952458][ T31] ? __pfx_kthread+0x10/0x10 [ 368.952482][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.952504][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.952526][ T31] ? __pfx_kthread+0x10/0x10 [ 368.952549][ T31] ret_from_fork+0x3f9/0x770 [ 368.952571][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 368.952596][ T31] ? __switch_to_asm+0x39/0x70 [ 368.952617][ T31] ? __switch_to_asm+0x33/0x70 [ 368.952639][ T31] ? __pfx_kthread+0x10/0x10 [ 368.952672][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.952718][ T31] [ 369.279770][ T31] Kernel Offset: disabled [ 369.284087][ T31] Rebooting in 86400 seconds..