last executing test programs: 5m36.595016066s ago: executing program 1 (id=1448): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x180, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x55080}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 5m36.519559245s ago: executing program 1 (id=1450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019640)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x15}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0xfc8, 0xb}}) 5m36.334310094s ago: executing program 1 (id=1454): syz_emit_vhci(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa"], 0x1a) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[]) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) 5m36.087029855s ago: executing program 1 (id=1457): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x1, 0x70bdab, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000914010010000000000000ef070001"], 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000076"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) close(r0) 5m35.763075192s ago: executing program 1 (id=1461): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000080)={&(0x7f0000000000)=[{0x800, 0x81}, {0x8, 0x0, 0x1}, {0x9, 0x7ff, 0x1}, {0x9, 0x5, 0x1}, {0x7, 0x7}, {0x7, 0x2, 0x3}, {0x7, 0x3ff}], 0x7, 0x10, 0x9, 0x5e}) 5m35.653435374s ago: executing program 1 (id=1463): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=""/151, 0x97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) fallocate(r1, 0x11, 0x8000600, 0x800000200000) 5m20.416552023s ago: executing program 32 (id=1463): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=""/151, 0x97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) fallocate(r1, 0x11, 0x8000600, 0x800000200000) 2m41.634153486s ago: executing program 4 (id=2193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000c8d20000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYBLOB="010025bd7010000000002100000008000300", @ANYRES32, @ANYBLOB="0c082c80080000009d03005b92cbb9c0db9a63cadc5e822ece6c091299bbe06c5668b18aeb258a5255d26e339718c90173bcead394d414ce61962a4bbf6a3709e80db6fa8a7c6bb3401b2bbc4abd3f6c7fabd12f5c3203482d24f198ba08a6902306317d365385a30f3123dd1c63b07f02642822a2a9b7c85d72f111c6914a2171aa30b8d9d0a247ddd5ff668dc4a4543b005682766d9cb68cc0ce929417ca69ed585e4f2bd31df133efa69713276925d9aaa417133c2e28fa55db84971a1b9fa48dda79233c0672dd47fe01af6e7e226f3c6c958aeb741ebb3bfb1da91b5113aa6222b0af870e5f5ff544f16438e649"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) 2m41.030354762s ago: executing program 4 (id=2196): syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b2849", 0x3e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb751", 0xc7}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b", 0x41}], 0x5}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m40.590507591s ago: executing program 4 (id=2198): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f2c50c9eb720e93d3e5b49fae5ab325", 0x54}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9fd3b46efe6524229e4", 0x8f}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e330509"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) getpeername(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m39.404919849s ago: executing program 4 (id=2207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000002dc0)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="400f005d06b805000000b9f70000000f01c1f2a766baf80cb8485e4381ef66bafc0cb80e000000ef430f0726642665400f01f8c744240071000000c744240200680000c7442406000000000f011c24c462d5aa012e0f78f4260f09", 0x5b}], 0x1, 0x74, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) sendmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m38.675687717s ago: executing program 4 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x10000000000}, 0xc004) 2m38.285507131s ago: executing program 4 (id=2216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) fadvise64(r2, 0x85f5, 0x4000000005, 0x4) 2m23.192103836s ago: executing program 33 (id=2216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.stat\x00', 0x275a, 0x0) fadvise64(r2, 0x85f5, 0x4000000005, 0x4) 2m2.369356077s ago: executing program 0 (id=2314): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r0, &(0x7f0000004940)=[{{&(0x7f0000000440)=@l2={0x1f, 0xfff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x2}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="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", 0x1000}], 0x2, &(0x7f0000003080)=[{0x1010, 0x119, 0x3, "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"}, {0x28, 0x1, 0x5, "a5f15066f802348976f02ab3dddf09d087ea71"}], 0x1038}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000040c0)="d60d8ffd7c50241235430842f06279f0f0193f4a7c482d0871a3e336dd2dd2d8437c24558b3a1e07dd6cdcf51d708335a9312ef1da1351387d273f091111f0dd", 0x40}, {&(0x7f0000004100)="60b659ccb72a3ba0128d36585f1447576cfe88069eda5b2f1ff5785e73bd462f275bd18def057de42e3da47b90cf7fcb9f067ada0779e33ad6722651f11d8fa6b03fa102589f186acce535fe85281816081c1cdf6fd70ed1aeab4f775e8c75201f1a3a157a7ff9d0deb6f24954b97881eb9659e16280fd9b7e96d035", 0x7c}, {&(0x7f0000004180)="208f4c10e4b435446c3eaf9082c830ed7b493595a32c44aea27a301666bc02fa74f21c50426b2d4c4e4a7d331c043813a9fa1f307209d0e40e744a11ed7a258f325c5b5b68446f0ed359716c327f4b016bb14ff2e1341c5f72a026c7803445ac6c9e33585b78b345401b4bc124835fc9dd222ea7042a708f3cb066ace4c4fb856e4fdb39ee32f466f43abe59a8d55c6aa1680342f7c2c123b107cee641d373d1fc7179faf337b030c39d5c259b110c76d5b0", 0xb2}, {&(0x7f0000004240)="38a43a4a15410e2c36e23219c08e727edfa9ea01721b6559956587b8ea9f4695893d23022e333cf69a0d88c3c0a582c73f118726fd9842a645d61fa60f2bee68d32bf2d4d0de144b086773c83d2c17ba28c0b6040cb01d4a232a749954d8820bffe6e78b2f92e4d29d4630c61f3bebe98ecca88249124c5cd61fbe430da0492c8f6dade39e8e966b3da08ead0ef372ee87b15411afa5706e7893d76211ac935b13fb727af80afce04aea7938a0343966c705364c8a38be9621464f9880a640b58033093862f83adf3b41f8dd14fd424cf67ad7873ee4ef22d5efaf624e59acc1d9a357ee8b", 0xe5}, {&(0x7f0000004340)="7ee3eb681db827552c06c965a16948d731edb31b78b9a70265da9367a1cb2efede8e30cb61ea8a56c3a581306785c544d5681023f3d3dfabfb07e9f312830c4304c8e1e76e436cfdbfc5de3690658c9b0be165f5c148ac20a29a41a71c75f6b5638b064602e1b9de6d500f21127559a51b873213cfb7061e340cfa8c7732020f67b3d124d9f6dbdaab1851b471659169fab65d39e23c1a5ac09d", 0x9a}, {&(0x7f0000004400)="998aaae84b40dd5d47b6c4ab893d8b9a91d7eb25b621794368d4d56f854dd2a880dbdeb82ab466af2290479157", 0x2d}, {&(0x7f0000004440)="898cc4113766c26d36d865ab76a7b07ca09e7a991cba41b4d0e9ace3cc8153b695143e184eebf2fd44", 0x29}, {&(0x7f0000004480)="da884bd250d1694864220bbeaac2f130e877b060f74e24e5804e9db80f", 0x1d}], 0x8, &(0x7f0000004540)=[{0x68, 0x0, 0xfffffffd, "4ed1141fb6aa1baeb263efb15da86b53fa09efb4c652e13196136a8a405bd760ff2cc2129f62fc24b16c2be19f6e6949ebb13b2fbfe376e50477a6600fdcddd66fbb3ce3d1d35edf04421008c2d961b6b2"}, {0xb8, 0x112, 0x4, "90874da0f3a14236e6c71e0d6ca8dd8c9875ef6bbbc4208b6418ce1b80e7ad5c2b7683791ddf6504596c48c49bee6f3fcf8107f24f094cb089ef9e5e0d69afdde052987e5ea55a23fd95258a5983c6caff082cc4093f312e902e78e397430d5b2a0b41fe85fe581f673253f8f1c3c8fc749a575fc7e1fefd791990b020e14c0151dfa6fbfae66f32f8fc71ec38f143be49fd1fc633b75105d5eca36270bb5dd798"}, {0x18, 0x88, 0x2, "a24aff"}], 0x138}}, {{&(0x7f0000004680)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x1}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004700)="363f79efbd25baaced9bb6f75087405607aac48bd78702130667358948174f4c4ed84dc2f8568f16bea2be643affaa3240ef96f3a5c3a13da78a9703d803aa276477f8987193c681ed32eeb11220f0b421916057d7d9ff301e4b2af604abe57349670cdc793a668b86a6f4adf0e010e425a25b874df431c22a1edaffc07083c354f86785ac4e", 0x86}, {&(0x7f00000047c0)="57098fb2018c86d531b2da519eff1a0cd9a87f2c54fdd47755e0697be1c218b3e005d0a9258a4d73e5c0da34bd0f97c2a902561c4ab1b9382607001f3f62ba44a27d4a4494b8cc217774b18676554899972c54558cf94821e9cf75222525ab5722d70a5854a340c598287dac2aaae23b6a61d4129913bb2c5b", 0x79}, {&(0x7f0000004840)="83c4c18773c1b8e9ac71e6f07fa39cfa7bcf7c9e1e842da8b17e8e7bed2a13298f979c7078f3aef3d48139c96bb6a6144727a436744cd913ec639ae49e9701479fcc91f16ddc7934", 0x48}, {&(0x7f00000048c0)="b2a5d2cff971c089948c94ead5c48d1c96c1ffca", 0x14}], 0x4}}], 0x3, 0x40840) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b"], 0x74}}, 0x0) 1m59.159035151s ago: executing program 0 (id=2319): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xa, 0x102) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc0045543, &(0x7f0000000300)={0x9, 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="940000001200", @ANYRES16=r0, @ANYRESDEC=0x0], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m58.712713085s ago: executing program 0 (id=2321): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) 1m58.171841807s ago: executing program 0 (id=2323): socket$netlink(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000400)={0x0, 0x47425247}) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c380)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 1m57.538120965s ago: executing program 0 (id=2324): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x200000, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(r0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000100)={{0x0, 0x0, 0x200000, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) 1m57.002146539s ago: executing program 0 (id=2326): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 1m41.85221193s ago: executing program 34 (id=2326): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1277, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) 36.682606958s ago: executing program 5 (id=2532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x109001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)={0x9, 0x8, 0x3, 0x5}) pipe(&(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$midi(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0xbaff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x30, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x4, [@midi_out_jack={0x7, 0x24, 0x3, 0x2, 0xf8}], [{{0x9, 0x5, 0xc, 0x7, 0x40, 0x1, 0x62, 0xfb, {0xb, 0x25, 0x1, 0x7, "d9b08d03a727f8"}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x39, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 35.042419466s ago: executing program 5 (id=2534): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba93", 0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)}}], 0x1, 0x4008040) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000a1fa000324bd7002fd"], 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 34.862710564s ago: executing program 5 (id=2535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48e282, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0xa2041, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 33.290666351s ago: executing program 5 (id=2540): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 30.539550172s ago: executing program 5 (id=2543): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba93", 0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)}}], 0x1, 0x4008040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000a1fa000324bd7002fd"], 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.911784023s ago: executing program 5 (id=2544): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000005c0)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xfc, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x6, 0x90, 0xd7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x401}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff, 0xff81, 0x2, "4f4b5a2d6fb9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0xfa, 0x6, "", "d47e80"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x40, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xb, 0x0, 0x7, 0x23}, @as_header={0x17, 0x24, 0x1, 0x1, 0x1ff, 0x0, 0x1002, 0x2, 0x6, 0x2a, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0xff, 0x1, {0xa, 0x25, 0x25, 0x9, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0xea, 0x9}, @as_header={0x17, 0x24, 0x1, 0x3, 0x5, 0x6, 0x1002, 0x55, 0x5, 0x5, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x5, 0x8e, 0x4, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9b}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x9, 0x2, "eb37"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x1, 0x0, {0xa, 0x25, 0x25, 0xfff, 0xaa, 0x2}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x4, 0x7, 0x7, 0x40}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x419}}, {0xc0, &(0x7f0000000600)=@string={0xc0, 0x3, "dc12474f555b585838abc1c6541cea0e2852cb51b89c88df25ef787c9ce66de49d8dd40b280b5b416647fe6888d63095a4ebfe7ed8f03997bc85c69acaeecffca6302b4eb916178a7ef61cc330e6cebb92fff33f2847c79d4b4f628579c6db6e2befebd0a4c0685b142fa37a0e95d6366fe28dd2f67d26f0789c644e5d59f1ac01f4c53fcd9015e2d45e33f79b5247ae132898864ae9865afaab89db410fdd7e63390d1924472344aca37392b39577dd03c58fd7ab38f0302c036352a2e4"}}, {0x1d, &(0x7f00000006c0)=@string={0x1d, 0x3, "00bbb4ab855cd350428574e537396b18db6d3b2a5fd20040413f69"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0xf6, &(0x7f0000000800)=@string={0xf6, 0x3, "c054e42e5985e9c03b34fa3a2254a0686f745f02a17bff739974e5bcd49f634f67d857dc6f1e7765229dd23442ad0e679f2998f8f36e979191d5cbc4b837a870268500823f2c8b09a890bd1a3f8fa27776c1eb3aafcf72d147f314f326643cf3381b7bf9bab6ed7888b6920dd8a260c3f26e6e18b25518df26ecf14548572f3756d16b221368014d11b868ab1f6536f15d20ee14a5bc818923dc93e27c4df8fb15cc7bbff080f7eaeeb3a603e0bd5f9ae2b26f2ca23387434cfdba0ab56f4b61d0e1f92d6461bde5c9edd6c9610c439fb7b028e8ed9f4d9803046a3c7416f569240e49b5eeb9c583ac15812140c827e837b36fe3"}}, {0xfa, &(0x7f0000000900)=@string={0xfa, 0x3, "abb5944b5743f8b2a6a209fb1585472391069ce9a56be8e562d63b596b5d3c7aa1ccfcbb2bbb4bff1803cd214f663611765a94edc7b6c9fea0aa570d69cce3ea7e2da02577adc1a579e7c0b357193e91348ac59c7c2ac09b3ba5191db40d91952af4dcaf07081d7d2b2096aceda84a7868561e804708efabffff469ca158a1559afde26233fbb9fb9d2f346dcf3f260878b843fee5e00e5c454ae7bffad5e6eb9e8c74d42ac07858a41e569d7bec162e0fda12ba6d868fb79b921589de50f3911fdff4bdf6d4e918d9cf335d890242d64cf0fa33fc37e9ac20437ea62a3c2c10b8d9a66e21759fb4e753a2f782768307e5913d33f13ce6e1"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1c0a}}]}) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) syz_usb_control_io$lan78xx(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x15, {0x15, 0x22, "19a8681b4a709581818e8175ab5f1b6e5b9806"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20, 0x13, 0x40, "64d60d2857777a3d06af30176846b7fe085cf6019a9ae0257e8d71edac0a049984f8be4fb4c65e0b2ff38590515a8e6378ae03b18ad1dcd6328558262efa99f2"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0x200}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "b09e585ad800be953e97eb97a7619c62153323a8aafa9af874294c28627692cea0f9a498462ade9cd305da86f7eb54"}}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000cc0)={0xffffffffffffffd1, &(0x7f0000000fc0)=ANY=[@ANYRESHEX, @ANYBLOB="fff96e4aeae8cad44788d4c669887c960a4925789f16a32fe8c4680f91918dcd07fc0855d41418898e2aa79ff14aa9189ca83a8e12ff71d7d568dd02b357ac6d179655cfe795284fec5ba016cbb134b6f6885951d72082004f6b4437dbe45be88aff73650b017f400cf40cd50bbbc98867d62cbd20877b8152847f6d30c16c8a69dcf080ef30ec2b858f2266aa1e7f33664ec4b9cb775e974acddc9ad50500c4caf7", @ANYRES64=r2, @ANYBLOB="1145f34f3dba38e5abad929692eb065c9cd0ef631c8e2b842f6253d8961bf229d2696b6dfe5369241b2a4f987fd9c40f03c73dd207d5fe3e15bb8c0953e5e2aa22c3c2f092c46103ed24d6e002679e90d235168948b70f3f93f1161dce8b74b1e775771e6e93adf8eea9465b3d38a2a794838c3bf59e81f63f8dc7ed33a8c8821a1a1f3663d4cbabaf29627e6152638f32ae1796f0d6861aa54be0e9f4b4c680a9d47d1d5a7ade60190bdc4791eaaf3510dcbca7b968df8418a17c6b338dcf795775f04adda4c536c6310c8987bb9feed3ba540bddbc00d3165ce94847e9b271d9", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES64, @ANYBLOB="79253ae0c9c3f4bb26001b7d07544cdbf53224e00bc971b8a727f5cd2ccd5395f17361e079b19d63dbd322d936c0e5b700e58c681cb74cdad49cf59549c8b2fb5e520007dead564647acb7388de655c1eb97656ee11421c8e1b231581c77aeb4194022b448fa0a05893b15c3ac4f61fa3fa799cf7db111a69ab47b49932b76ab2a625ea607d81d139c1951ba2db135f87f315594"], &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000bc0)={0x40, 0x15, 0x1, "bb7d4e6bc0bc2cc2899a061e7f8c3cb8f8ab2a96ad7feb8b94df08efbcf28026002c03d08161bd72c3083c87e63faa7da5ba9d5d40fac1b86a0f36898b7fad234b23778a"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x9, 0x8, 0x0, 0x9, 0x6, 0x6, 0x2, 0x0, 0x2, 0x33ef}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0xd9a}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000f00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.643996992s ago: executing program 35 (id=2544): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000005c0)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xfc, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x6, 0x90, 0xd7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x401}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff, 0xff81, 0x2, "4f4b5a2d6fb9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0xfa, 0x6, "", "d47e80"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x40, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xb, 0x0, 0x7, 0x23}, @as_header={0x17, 0x24, 0x1, 0x1, 0x1ff, 0x0, 0x1002, 0x2, 0x6, 0x2a, 0xe}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0xff, 0x1, {0xa, 0x25, 0x25, 0x9, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0xea, 0x9}, @as_header={0x17, 0x24, 0x1, 0x3, 0x5, 0x6, 0x1002, 0x55, 0x5, 0x5, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x5, 0x8e, 0x4, 0x7}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x9b}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x9, 0x2, "eb37"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x1, 0x0, {0xa, 0x25, 0x25, 0xfff, 0xaa, 0x2}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x310, 0x4, 0x7, 0x7, 0x40}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x419}}, {0xc0, &(0x7f0000000600)=@string={0xc0, 0x3, "dc12474f555b585838abc1c6541cea0e2852cb51b89c88df25ef787c9ce66de49d8dd40b280b5b416647fe6888d63095a4ebfe7ed8f03997bc85c69acaeecffca6302b4eb916178a7ef61cc330e6cebb92fff33f2847c79d4b4f628579c6db6e2befebd0a4c0685b142fa37a0e95d6366fe28dd2f67d26f0789c644e5d59f1ac01f4c53fcd9015e2d45e33f79b5247ae132898864ae9865afaab89db410fdd7e63390d1924472344aca37392b39577dd03c58fd7ab38f0302c036352a2e4"}}, {0x1d, &(0x7f00000006c0)=@string={0x1d, 0x3, "00bbb4ab855cd350428574e537396b18db6d3b2a5fd20040413f69"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}, {0xf6, &(0x7f0000000800)=@string={0xf6, 0x3, "c054e42e5985e9c03b34fa3a2254a0686f745f02a17bff739974e5bcd49f634f67d857dc6f1e7765229dd23442ad0e679f2998f8f36e979191d5cbc4b837a870268500823f2c8b09a890bd1a3f8fa27776c1eb3aafcf72d147f314f326643cf3381b7bf9bab6ed7888b6920dd8a260c3f26e6e18b25518df26ecf14548572f3756d16b221368014d11b868ab1f6536f15d20ee14a5bc818923dc93e27c4df8fb15cc7bbff080f7eaeeb3a603e0bd5f9ae2b26f2ca23387434cfdba0ab56f4b61d0e1f92d6461bde5c9edd6c9610c439fb7b028e8ed9f4d9803046a3c7416f569240e49b5eeb9c583ac15812140c827e837b36fe3"}}, {0xfa, &(0x7f0000000900)=@string={0xfa, 0x3, "abb5944b5743f8b2a6a209fb1585472391069ce9a56be8e562d63b596b5d3c7aa1ccfcbb2bbb4bff1803cd214f663611765a94edc7b6c9fea0aa570d69cce3ea7e2da02577adc1a579e7c0b357193e91348ac59c7c2ac09b3ba5191db40d91952af4dcaf07081d7d2b2096aceda84a7868561e804708efabffff469ca158a1559afde26233fbb9fb9d2f346dcf3f260878b843fee5e00e5c454ae7bffad5e6eb9e8c74d42ac07858a41e569d7bec162e0fda12ba6d868fb79b921589de50f3911fdff4bdf6d4e918d9cf335d890242d64cf0fa33fc37e9ac20437ea62a3c2c10b8d9a66e21759fb4e753a2f782768307e5913d33f13ce6e1"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1c0a}}]}) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) syz_usb_control_io$lan78xx(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x15, {0x15, 0x22, "19a8681b4a709581818e8175ab5f1b6e5b9806"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20, 0x13, 0x40, "64d60d2857777a3d06af30176846b7fe085cf6019a9ae0257e8d71edac0a049984f8be4fb4c65e0b2ff38590515a8e6378ae03b18ad1dcd6328558262efa99f2"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0x200}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "b09e585ad800be953e97eb97a7619c62153323a8aafa9af874294c28627692cea0f9a498462ade9cd305da86f7eb54"}}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000cc0)={0xffffffffffffffd1, &(0x7f0000000fc0)=ANY=[@ANYRESHEX, @ANYBLOB="fff96e4aeae8cad44788d4c669887c960a4925789f16a32fe8c4680f91918dcd07fc0855d41418898e2aa79ff14aa9189ca83a8e12ff71d7d568dd02b357ac6d179655cfe795284fec5ba016cbb134b6f6885951d72082004f6b4437dbe45be88aff73650b017f400cf40cd50bbbc98867d62cbd20877b8152847f6d30c16c8a69dcf080ef30ec2b858f2266aa1e7f33664ec4b9cb775e974acddc9ad50500c4caf7", @ANYRES64=r2, @ANYBLOB="1145f34f3dba38e5abad929692eb065c9cd0ef631c8e2b842f6253d8961bf229d2696b6dfe5369241b2a4f987fd9c40f03c73dd207d5fe3e15bb8c0953e5e2aa22c3c2f092c46103ed24d6e002679e90d235168948b70f3f93f1161dce8b74b1e775771e6e93adf8eea9465b3d38a2a794838c3bf59e81f63f8dc7ed33a8c8821a1a1f3663d4cbabaf29627e6152638f32ae1796f0d6861aa54be0e9f4b4c680a9d47d1d5a7ade60190bdc4791eaaf3510dcbca7b968df8418a17c6b338dcf795775f04adda4c536c6310c8987bb9feed3ba540bddbc00d3165ce94847e9b271d9", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES64, @ANYBLOB="79253ae0c9c3f4bb26001b7d07544cdbf53224e00bc971b8a727f5cd2ccd5395f17361e079b19d63dbd322d936c0e5b700e58c681cb74cdad49cf59549c8b2fb5e520007dead564647acb7388de655c1eb97656ee11421c8e1b231581c77aeb4194022b448fa0a05893b15c3ac4f61fa3fa799cf7db111a69ab47b49932b76ab2a625ea607d81d139c1951ba2db135f87f315594"], &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x44, &(0x7f0000000bc0)={0x40, 0x15, 0x1, "bb7d4e6bc0bc2cc2899a061e7f8c3cb8f8ab2a96ad7feb8b94df08efbcf28026002c03d08161bd72c3083c87e63faa7da5ba9d5d40fac1b86a0f36898b7fad234b23778a"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000e00)={0x20, 0x80, 0x1c, {0x8, 0x3, 0x9, 0x8, 0x0, 0x9, 0x6, 0x6, 0x2, 0x0, 0x2, 0x33ef}}, &(0x7f0000000e40)={0x20, 0x85, 0x4, 0xd9a}, &(0x7f0000000740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ec0)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000f00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.053719619s ago: executing program 6 (id=2615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8990, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 6.178668468s ago: executing program 6 (id=2617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2, 0x2d, {0x2d, 0x24, "5206a13f3403096fff31f49b476ae6190a544cfd1d8cf98933a30de86fceb20510432664d6fe3eb51d2ac8"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x40, 0x5, 0xe7, "3c5fc4d90bf95527b1173a09430c98c4fc7fa7cee03e94e0e4d7667d06f629b3ab1c2f9508acff79d9e3b34997d52b23170ebfec5cdce7543ffbe6f201ef4bae10c88d54ddf2626344ae92b288cb05d302b4f7fd59162f802c4175cb643367734fcb6983557fb63fae8eb6b6479737091977cde0237f39d8df061d263ac0423e6db5a404d9e1870dae45d187ef46c4af67080692b04a8422d85c3aeecd9267708104700c4bb38046dba2124a2a4965cf3c559de4fcea45cf4fef90c143ea6832a91c1cdfed6fc0616955974172b331ca821149c9591bc2d9476600802c9db2f860033d01713ebc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xe6}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 6.032796489s ago: executing program 2 (id=2618): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000180)) write$UHID_CREATE(r0, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001140)=""/5, 0x5}}, 0x120) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2083, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f00000001c0)={0x18, r7, 0x3, 0x0, &(0x7f0000000280)=[{0x1, 0x8}, {0x800, 0xfffffffffffffc00}, {0x101, 0x2}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="610502080758000000003719d905"], 0xa6) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0xe56e9468a65b3125}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 5.550072236s ago: executing program 2 (id=2619): memfd_secret(0x80000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) read$hiddev(r0, &(0x7f0000000100)=""/115, 0x73) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x3, 0xffff) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x34565348, 0x6, 0x4, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x2, 0xffffff78}, {0x2e, 0xfdfd}, {0xffffdffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x0, 0x6}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) writev(r4, &(0x7f0000000b00)=[{&(0x7f00000003c0)='l', 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_IRQCHIP(r3, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x4, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x51, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0x49}, {0xb8, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x3, 0x4, '\x00', 0xd}, {0x5, 0x1}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) 5.043207148s ago: executing program 2 (id=2620): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x3, 'syzkaller0\x00', {0x2}}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="9efa00641649a3dde80e16f54558cee4", 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}], &(0x7f00000002c0), &(0x7f0000000440)=[0x0], 0x4, 0x0, 0x7}) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', '', [], 0xa, "c32916f7e7b974a5718c97888c77ba48e9bef5"}, 0x17) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r5, 0x40204706, &(0x7f0000000040)={0x5, 0x0, 0x7fffffff, 0x3b, 0x12, "3e0a00009edf00002000f0c71000"}) r7 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 4.459919183s ago: executing program 2 (id=2622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200000, 0xaa) r2 = openat(r1, &(0x7f0000000280)='./file1\x00', 0xc2, 0x78) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) r5 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20008004) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000180)={r4, 0x0, 0x43, 0x7, &(0x7f0000000100)=[{0xb61, 0x5, 0x8, 0x8}, {0x7, 0x8, 0x1, 0xff73}, {0xb, 0x9, 0x6, 0x6}, {0xa, 0xd2, 0x4, 0x2}, {0xfff8, 0x79b, 0x4, 0x7}, {0x3, 0x1, 0x7e1, 0x4}, {0xd, 0x5, 0x1, 0x7}]}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1b, 0x8, 0x35, '\x00', 0x100}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.180297347s ago: executing program 2 (id=2625): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x8001, 0x0, 0x2, 0xe8b3, 0x30e971}) (async) r1 = socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) (async) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, &(0x7f00000000c0)={0x200, 0x200000}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001804}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000100001418b6d4f3ab16ea67bb00000000", @ANYRES32=r6, @ANYBLOB="05008a00010000000a000600ffffffffffff000005008a00000000000a000600ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x1) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xfc, r5, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x4f, 0x5b, "443e37c64c09ab1ea6f71c665cff45464f1c502ea4c2fed50982ba892d9d118be49da8736aa6d9f2d21ae3736f5c72bdb816be260878d59bf054edb8554768e2fe30af2c56c444076c9962"}, @NL80211_ATTR_FRAME_MATCH={0x87, 0x5b, "643f70517c54cee25282359e4c80f567dfdd47843c0a09b91d18b7c0f38dca111e45f9800dbe5e04554ea24a0bfae36a304ace2628d2b77277392f90070b611ccaf68f207066941e6ed9d52676a82ee7815a9ec15fee13101273b25037e97f8e93aecec650d8f64d7803ae4ea69df74dc003c2ba42204da7df99d9ca328e4cd3248d87"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40001) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/118, 0x76, 0x2, 0xd}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000740), 0x0, 0x2, 0x13}}, &(0x7f0000000800)={0x0, 0xffffffffffffff62, 0x40}}}], 0x0, 0x0, 0x0}) (async) dup3(r9, r8, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 2.88083383s ago: executing program 6 (id=2626): socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2c, 0x0, 0xf9a44e3dc499e975}, 0x44884) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{}, {0x0, "ad44abb9fe57a899"}}}}, 0xf) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2.732097316s ago: executing program 2 (id=2627): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="400102"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000940)={0x20, 0x10, 0x2, "a026"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f00000002c0)={0x20, 0x11, 0x2, "f52d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.676621643s ago: executing program 6 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="02006ecb91f103f0770780bf214b3ab8d4c25aae6ce0e8070befcfba7379659cf1c0f3d5f4548aea40", @ANYRES64=r0, @ANYBLOB="10002cbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b0000000000060011003b3a0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004014}, 0x8000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000050000000000090009000000e9fd0380000003800000018000000200000000000000030000000500b3128c1421794bb3d766aae9ae1c3d90daabf3813b8a568c0cd08c86e9268db1c425ff28623d4801aeed1d32ff1b5e17be6e6e026214153a0363a136ac079370d97a7294eccd29c60453ee493466b00ebadc1a65a69080121fbf70ceeed870d77e98999a621f4a4ecc5442156b8f772aecf6940bcb8f4b61767f693e6aea13e27fb3cfdb1bdf41584e8f06aeb0af629ce391085ffc85c43716532126aef1fc9e9eead8a190bf289ed26a4c01abb152f27f27e1448bcfe017fdafa69f5332b2e7faac540ae696ed34788835d977f67dc911412cbf4c2398caae08a3ea7b8d348bb6f524cdcc2d9929d3264cdbc076ee8eb23ffc01b17a3d7bdbac95bf005a8df33cd8a9689791d901f73d7f9e8e00ac331a4842adece840483b9248d5af47023cebd37c5610699661c1ae7c28ccff993a7d3100b61ac2d48797d49f3d1f75575d60ea6c360cd660ea21f9d91197a6d098522877b690e0e0b9ae96c450ccc7e93e6abddedbebb32a6855ef9bf45a715d9ee541c35386f6f2f1e3b861063d47a88d3188b39ffc0a32b3b0a3c65cb28bad527cea024fd419b158562fb05b84b6ae82865996a25a8e3953ba5463c6361aeeb497cbbb9ebb96642cffd15c51f5914b84e759b9d3477b46e897bcd0f1d90b067542a81835f3eea2dc0433fcae3f13e73dbce75eaa55ac9c0148da54973f0577755816d46de091683582bbe27610b42b869b3ac0d09a4d920b01e60ac7172cd1217e5d44a2c92af7990ae4b314fd328d8b37082aa20ef39ee0d0a29cbc970c09f8bf1f18d041a906d09ce24dc7950759f67cca192f5a3e70f136abe5b11ce93da48d46376dd1d50146ff5296e4c01c9d84abdf3d9830db94b81f587f736d0a58c3ea5e3e196641403738e176841ae82322c3e4692591cff7a1de01ea61229b5e67fca08b16b31145351652da726745fb87ccef7eef1cfddfb6ac4479e4c135c4685ea0bf3c33daa158132b22529ea7f26c4d31651ebd05e4308041e6c7e06dbb387a7c64856293dcbd6700fa3adceded8529118334143546f06b0be1b0cacfc4475a2f1ae4b254690003893ba3165f30b8642c08303ba0cfbc8d2762a7abad7d7f4b9f7a658fbaa7855ef9ca14cbced3682b39b65e70223fbd2a0a7afb9fcc64c777c5a6bd4ce8738d174acb98bfede3ec79c1e0c9cb88a5b00e3d84960b3578cccaaa98ba4c9dcc6be60caadd7a7c36aecfffaad6f9847ef024e56c50b8ccee8d29807024cf4a672e2eba6f47449766b44e83fda301e5b50a4283b423a053c49b84e766568e767e3f09d679f8be5268d697ec13fc662fef63711937de4eaf44a50ecffcb78e4c719545acaa742f253d7caaf05e42f648ae207dc4fc46d7ae1084ec14b0f6e8e248240f89faedc02d1c609095468d602d5dacc68a3f6a702b60584dc68e9d1f1c6666630c2436246566a2e9686e9e07b830371e78f03ae11bce73fa90352f0cfc20b21e73e68e056650c7c7e662fd4c8b995f69ff3f5673e6085b19db9263a31eeefd3df2b8b7872b0e1d2462a805263d0bcc1cc241f0d6c250cc0b2a154b866a1bc1c3690a3146f64966183ca3bb33a8938212ddcc5bd7c1d977f9f644e1de3793ee5673f888c0f7909b1c1e50f472e724c536c4680663af37f6f88ace3fe4337c9f4addab9f6b6cf3f6c358578d3a5b305bf3141e850589d5a76dee5afcb8c5d4248eb6bc8a2eecdcd5ea64b5d6e6cbe50250056e5e8d6457e3ec30967bd7bf333a66e71f0abc183616bb0c51d5c9d3436abf6df0f68d4c44cf72d5ca5ce03ba0c4f2c2110c59ef1a7d552d7c3be19900289c287483d7e3a29a7c8ac081ca290bcede10e53d6c473a8c78dfc1b671f3c4011fdaab600b69ebb35ba4a4cafe47c6754c57cb4c9fedbc887bce853d380815fd6f27419508c0d8a0218e267dd53b65b61a42f843236a15b7aec641e9e17ecc5e63b8068c4c27a89a2e3fed122d586666209b629e695112c4ec876e5642da6b3968ffff6f90d38455ea4f29f9d6c15556e59541ba23e0e9e11837379d8e7da4f459a5423c05d08e9abcb358d45244e8de7ba9eab991de6e8978bb165c460e33ff3e14fa9f72974905c542b2dbe08f327b30e101b6ef898772ce579c1d7c129bc85408dd1ae4b72c425e64e331e36e3bf94c44acb9fcd010c150fffeea7a0cbbc8ac76dfacd310579ac1538d93f9bf80092feaa7cfcb25e8934ef0344f3d6fa7aa98ba17d38a19c76c8e27ca7b48a13105f75bf48dff8cc1f594c94f69e41ffdeb1ad5ec2e58c324e0eee2706fa6a6a71cb69f5e5f0df8fbbabcef01210e0a6b72b23bf416b70af91a1eff8e09cf447c18eafc186f8c8b7d1c80379b06edc0bb0a840e999f9022099af0faa5b2b9ebe0917773cc1c31d2c45a173a1b3423ec0ddbc0015704232e1130d7619e50d93239d79ded27551ad12c665c952b52cb9625c6160e97412c89662e800957327b9602a5e763d93564da9eacb5fd38aa65aecf17aeac814c949b28f3dfc14e5f76d49fd5238464d02f023d31cb340c51203d6af4bf20683a6fb85b3ead2dd4e84e2fe3a29391792fb2416fe5fe183679c38f3a58c863250db6ea2fa5ab8407ef5b8e44717edc25d7417a0f54b8d3f63c5013fe12409720e64f11991be4ae46a596605adf841bfd8957cd47fbc3917dedf967277146c16e3c70f2366702f77c7a00cfc0dc66773c13f1636b048409b2e9ad740e7a60b17265c711f4e6139c552c67b8be2a8f505b388d4daa84687638dd9bcee84fb9b808d4dc0a73e5e93eb8f07089a2281eb9457a6f38e5c0f6194a80cfa6919d90a47a747cc36b5aa549a759aa31fd456278ac00933e4e53b6ef60990de6d06aa5e6d26a09e83088fbdef70f6cbb05b4adf066a52c7d7c412b175fdddd1bc9f97a66c16aa1be9dfae524095f95081ce59da9d9f919de41d3fac48a1af7822f22b78e31ebc6fb473528b1f41708f50a6b39ca1a14963e5dfefd48a28401f656987a5bf7098f6ebc6eb99c04daab8c0c4a56ec511cb760d2ea1ae299c0b25229075563c8d09aae68084e512476ad7a70575bed903962588585583646b9e9a87a59977e4ac62db8d0fa2b4e85fb8bde7906d5543e72f1890688af6305394c64a3d9ff7c7fb3fcb12d9966d9e5de8443eb9fef171816cdd7c42fd5ea60c6fbdbfc556413d0fc85685304c084221ac54bbe7b9aa9140600fadfec9240509519663b8254fb183c239cd93e4d5c821985ee7847de7103043cce4248c316121bfc7a97c6b604f58ad33ead53a2ca68380f17f366e7a2bbdb3bcd24f9901076d4f5bacf32f435ea0582800cc2dc51f705b1f928168590c395c665a7fc33615c5ac5d70db918bb16aeafbf313dbf4ba81958a1cb7a1dde2c260ccd9f88a2c5ee24181681cc6abf27c0d5139f8017efcae7f096f4bc98ce927a120a94672187cae705e7d238ba81fb462491fd310a5f25a1482e1af836bc558c413c0d89cd228bd60e8af1b99ef63b8d848ba4ea37f6099c99a74327f5fd05d68143adf12ae4c6df46acb431605d548808033fc62652656196bbb862cca026c160f16dd70d726dcf8ed3c51f2c0c0edb17f4e0f389e76db84dd890cbd2af34a68ace2042b4863a1de86e3d3100e746df0eafb32c877b0783a49ea3b67ffb7f64c3b9ffa36ded4a37dfa0b5840a6116379ea728c943386a2105f30032aba1367d44d0d3c3b13ceb04ec8164cdfd58fbcd7ef6eda2da2a70c915cb8cbaa97e60422b2c005d551e288534219b46e1de49cde4a9c785adac24832d34fc1f7543b8409e17e69944a109c1691fb8ab4bcaba5975593fbc18159cd3dd10530c02d5969284828ffa79ace427979fc794532dc6e4fafeabc626d2fd37631bd447a6ef12f3ee5675bfccd0b6bbeec2ae998abdce9f85e94cfc434f5a7359b604101ff097b6e18e8997fd6d0b4f0910154fe01767547930eb9926936df9ae08da9b736b7f00641d7d8f578e20ba1cf1b2904851633058b867871b9a64be60d30d2c4918fd13b7d3df8917e741025ea1f407c94ff804cc16bdbf288f0810839e1c4f2d1f6717317d94ba0a94cd84874175542dc4de591a1d0f2120335670f264c9423f005c389bc13fb0b9ed466c43ac9142bf9e093380d880a327bd57389d278882e99cb9849a09a3579624801a3dfc67f05460493bc1abd9c2eb3ca7bbbb91363d3c0e6080be1c56731d756f62aaebca6bc719834651b6c04f4621c53dc9631ae5737f53d2b19a874e8c14f7154de4e73f07cdafe7068dd78dae96b8a651e27f47681d37e0a919516d810d36605b2befbf921b37bb48debf93f7220e547e24084b0c36a3a89186bab9bcb1697c839fc27891aff9038b0807b486602aba616019a78d4d28e57305a9926be279ab6a15056d8a9da00617f69a06db7c48d7be1703c0a8f01058f539eeca31965f97e448bd495c3bfa7f0b12711da2784c1b5d180d4704616a68273a5fc3a75a513edf3096c92a85e06ae84fedc62cc170ea0be662103d3e03cdec7f7ced9072f536d952ac93e300d4582cc3d3e7900045860e3d2e13918bde8d0c946f8bffd640933d1f5f349638dcde77abbf309e8e3e852d36a674ea275bae725213156e6ea7fa5f64aafbc3bc4d387c791f34fab197244a49035d83bf0e4effed271c2eb85822c6098ecb122376ad3ae9d669831ee01471af38f29428adbc3ed8d93940db4aa6f346b95c78d21a9ea73c4de08bb9e9cc9757e76867a4a3e75a00c8d3853c1b187d10faa4655bedadcfc001ede1c656d3626e26255e21538294a08e9773e7cc52e8d467e4d70f448989e1d2145e9f8f0d9fbe32690d0fa855996792c2208fc27a5d0c19b112ec5ddfe22798973ec8d804ae6ec4cf8cffee2c5f3643cfe3a93ea57d998278d5f5a1d9b24b1706d6c17ddd7b5d84cdc783925cd76fe4f8aa1bb58fbf554733f806629e34f27178a0b75c781ee4fb8132be796513f35bdc87f2f63bd3c6a64522e7e693987d41e84120d1b5597acbd521b13958beccfbcffad8b01258d57313b4fd47cad972a435ca905df4def3808bff3b1aff0b176eff72fe28205a061913090d2b2cdccca5cc382e8ad9f483cf36b17f97ee36178ca974328d766a3de36dfbfd5863c19d3c97c7202e83fa1826b2fe512eb84095dd9b61543385ba823b4a77f11f741a7bb8d510439b8ec6c81c12ad613776e0addfc767a43d2828d67e93ca26b736a3c14c06c8ca212e5dd7b783c7185ae77d832eaf8ed8cfb381f74582e78fc0961c708f3909d274703bdc3066c0923ffe15accb221847de2056c879e1e6d5ca96be42d70c330ade5cea109427638fd08c23155d5ac78d7e89398fcf066895cfb7a316c0485c04e087adc8fd7f97ce7aca946dd56eab150761b69e00da1250c4cbe39c5a07646a64afe89969b1331331dd03b6511ce089c1fb821c78aec2a5b0042767c6e0528614968e01007878b409eee92a0422465763858a8ca7197fb4dc1aae44668b969b4ebc2fc25faa7789c86a86384a76819d89b1a1db2c98613744c2e0ed511b743a8d736104282f90304e974735195f125d242648af94b36a94ca9f1a839539c72f78c36544effba4c4ca1c91916e1cc6c9b702f4b3aa19f2ee3db809d005c2501c70439a4d4a2e564f7498a660f9181adce6d210cbeacf25a5c3f3d9510a00abbb0f8ae3883186f18f2a63fd5005f79bf5853c6803c2a713c06eb3b4bcad9b229f922cf7fd5f5b0656c12eede6e6a4f19baa5d00"/4131], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x24040080) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @any, 0x3}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f00000000c0)) preadv(r2, &(0x7f0000003fc0)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/78, 0x4e}], 0x2, 0x9, 0x7ffffffe) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000003c0)={0x5, r0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0xc800) ioctl$FE_READ_STATUS(r4, 0x80046f45, &(0x7f0000000380)) 2.530528478s ago: executing program 3 (id=2629): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fe", 0x51}, {&(0x7f0000000880)="a1755527af3bc7c4671a", 0xa}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_parport\x00', [0x30, 0x2, 0x7fffffff, 0x84e1, 0x6f8a, 0x2006, 0x9, 0x8, 0x80ffa, 0x0, 0x0, 0x84fe, 0x1003, 0xe, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x200, 0x7, 0x5, 0x5, 0x8, 0x400, 0x8, 0x10000, 0x4, 0x7ffd]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_SET_MACPARAMS(r2, 0x0, 0x4008000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/68, 0x20000253}], 0x2, 0x0, 0xd}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012abd7000fddbdf2505000000080009000c000009000000000008000900"], 0x44}}, 0x1004c001) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0), 0x2100, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.263276372s ago: executing program 3 (id=2630): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040800001b0000000002000000400004803c0001800900010068617368000000002c000280080003400000000008000240000000000800014000000000080004400000000008000640000100010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r3 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xfffffffffffffd75}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x39, 0x10, 0x0, 0x0}) lseek(r1, 0x38, 0x0) (async) lseek(r1, 0x38, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2c7bb18}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2c7bb18}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1.908917445s ago: executing program 3 (id=2631): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)}}], 0x1, 0x4008040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000a1fa000324bd7002fd"], 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.574515325s ago: executing program 6 (id=2632): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) futex(0x0, 0xa, 0xfffffff8, 0x0, 0x0, 0x1) ioctl$TUNSETVNETLE(r0, 0x5452, &(0x7f0000000000)) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2710, @host}, 0x10, 0x41000) sendmmsg$sock(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="5193f0b40db29d9ce06ff5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a199c1d633207a53c00000000000000000000000000008e0b65", 0x42}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000500)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x80, &(0x7f0000000600)}}], 0x2, 0x20000044) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000600)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xc, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000040)="ce", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) recvmmsg(r4, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.127506198s ago: executing program 6 (id=2633): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x2, 0x2d, {0x2d, 0x24, "5206a13f3403096fff31f49b476ae6190a544cfd1d8cf98933a30de86fceb20510432664d6fe3eb51d2ac8"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x40, 0x5, 0xe7, "3c5fc4d90bf95527b1173a09430c98c4fc7fa7cee03e94e0e4d7667d06f629b3ab1c2f9508acff79d9e3b34997d52b23170ebfec5cdce7543ffbe6f201ef4bae10c88d54ddf2626344ae92b288cb05d302b4f7fd59162f802c4175cb643367734fcb6983557fb63fae8eb6b6479737091977cde0237f39d8df061d263ac0423e6db5a404d9e1870dae45d187ef46c4af67080692b04a8422d85c3aeecd9267708104700c4bb38046dba2124a2a4965cf3c559de4fcea45cf4fef90c143ea6832a91c1cdfed6fc0616955974172b331ca821149c9591bc2d9476600802c9db2f860033d01713ebc"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xe6}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 704.260108ms ago: executing program 3 (id=2634): mkdir(&(0x7f0000000000)='./file0\x00', 0x1cd) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 413.697676ms ago: executing program 3 (id=2635): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2c, 0x0, 0xf9a44e3dc499e975}, 0x44884) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_local_features={{}, {0x0, "ad44abb9fe57a899"}}}}, 0xf) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 0s ago: executing program 3 (id=2636): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x285) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x111) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfff, 0x0, 0x1}, 'syz1\x00', 0x3a}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): /devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.239/input/input39 [ 458.174021][ T4963] bcm5974 3-1:12.239: could not read from device [ 458.676308][ T1250] bcm5974 3-1:12.239: could not read from device [ 458.772336][ T9] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 458.851357][ T9] usb 6-1: USB disconnect, device number 11 [ 458.917830][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.949087][ T4963] bcm5974 3-1:12.239: could not read from device [ 459.183184][ T1250] input: failed to attach handler mousedev to device input39, error: -5 [ 459.222927][ T1250] usb 3-1: USB disconnect, device number 64 [ 459.625048][ T1250] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 459.706318][T12361] FAULT_INJECTION: forcing a failure. [ 459.706318][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 459.706421][T12361] CPU: 0 UID: 0 PID: 12361 Comm: syz.3.2355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 459.706448][T12361] Tainted: [L]=SOFTLOCKUP [ 459.706454][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.706464][T12361] Call Trace: [ 459.706472][T12361] [ 459.706479][T12361] dump_stack_lvl+0xe8/0x150 [ 459.706508][T12361] should_fail_ex+0x46b/0x600 [ 459.706538][T12361] should_failslab+0xa8/0x100 [ 459.706564][T12361] __kmalloc_noprof+0xdf/0x7b0 [ 459.706587][T12361] ? tomoyo_encode+0x28b/0x550 [ 459.706615][T12361] tomoyo_encode+0x28b/0x550 [ 459.706645][T12361] tomoyo_realpath_from_path+0x58d/0x5d0 [ 459.706680][T12361] ? tomoyo_path_number_perm+0x219/0x630 [ 459.706703][T12361] tomoyo_path_number_perm+0x246/0x630 [ 459.706727][T12361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 459.706748][T12361] ? __lock_acquire+0x6b5/0x2d10 [ 459.706776][T12361] ? do_raw_spin_lock+0x12b/0x2f0 [ 459.706832][T12361] ? __fget_files+0x2a/0x420 [ 459.706855][T12361] ? __fget_files+0x2a/0x420 [ 459.706874][T12361] ? __fget_files+0x3a6/0x420 [ 459.706892][T12361] ? __fget_files+0x2a/0x420 [ 459.706915][T12361] security_file_ioctl+0xc3/0x2a0 [ 459.706938][T12361] __se_sys_ioctl+0x47/0x170 [ 459.706962][T12361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.706983][T12361] do_syscall_64+0x15f/0xf80 [ 459.707012][T12361] ? clear_bhb_loop+0x40/0x90 [ 459.707035][T12361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.707053][T12361] RIP: 0033:0x7f0a1432cdd9 [ 459.707071][T12361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.707087][T12361] RSP: 002b:00007f0a12586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.707108][T12361] RAX: ffffffffffffffda RBX: 00007f0a145a5fa0 RCX: 00007f0a1432cdd9 [ 459.707120][T12361] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 459.707131][T12361] RBP: 00007f0a12586090 R08: 0000000000000000 R09: 0000000000000000 [ 459.707143][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.707154][T12361] R13: 00007f0a145a6038 R14: 00007f0a145a5fa0 R15: 00007ffd71c18678 [ 459.707185][T12361] [ 459.768352][ T1250] usb 3-1: device descriptor read/64, error -71 [ 459.773328][T12361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.129836][ T1250] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 460.262310][ T1250] usb 3-1: device descriptor read/64, error -71 [ 460.375774][ T1250] usb usb3-port1: attempt power cycle [ 460.762352][ T1250] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 460.783157][ T1250] usb 3-1: device descriptor read/8, error -71 [ 460.942340][ T5706] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 461.022385][ T1250] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 461.046550][ T1250] usb 3-1: device descriptor read/8, error -71 [ 461.116658][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 461.118808][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 461.118839][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16451, setting to 1024 [ 461.118865][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.118913][ T5706] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 461.118935][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.127629][ T5706] usb 4-1: config 0 descriptor?? [ 461.188162][ T1250] usb usb3-port1: unable to enumerate USB device [ 461.514390][T12269] net_ratelimit: 32 callbacks suppressed [ 461.514411][T12269] Set syz1 is full, maxelem 65536 reached [ 461.570184][ T5706] hid_parser_main: 28 callbacks suppressed [ 461.570210][ T5706] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 461.570240][ T5706] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 461.570266][ T5706] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 461.570291][ T5706] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 461.570316][ T5706] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 461.570340][ T5706] belkin 0003:1020:0006.0009: unknown main item tag 0x0 [ 461.570371][ T5706] belkin 0003:1020:0006.0009: unknown global tag 0xd [ 461.570385][ T5706] belkin 0003:1020:0006.0009: item 0 1 1 13 parsing failed [ 461.571078][ T5706] belkin 0003:1020:0006.0009: parse failed [ 461.571148][ T5706] belkin 0003:1020:0006.0009: probe with driver belkin failed with error -22 [ 461.757827][ T1250] usb 4-1: USB disconnect, device number 95 [ 462.052441][ T5718] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 462.149320][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 462.188296][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 462.189785][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.199443][ T4927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.223259][ T4927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 462.233584][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 462.286804][ T5718] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 462.286837][ T5718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.286855][ T5718] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.298260][ T5718] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.298289][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.298307][ T5718] usb 6-1: Product: syz [ 462.298320][ T5718] usb 6-1: Manufacturer: syz [ 462.298333][ T5718] usb 6-1: SerialNumber: syz [ 462.363043][ T5718] usb 6-1: 0:2 : does not exist [ 462.529076][ T1250] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 462.675034][ T1250] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.675069][ T1250] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.675095][ T1250] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.675136][ T1250] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 462.675159][ T1250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.781301][T12390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 463.461034][ T5718] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 463.680651][ T5718] usb 6-1: USB disconnect, device number 12 [ 464.374259][ T4927] Bluetooth: hci6: command tx timeout [ 464.825996][ T1250] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 464.844314][ T1250] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input40 [ 465.035214][ T1250] usb 3-1: USB disconnect, device number 69 [ 465.035323][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 465.748985][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.421907][T12421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.443330][ T4927] Bluetooth: hci6: command tx timeout [ 466.500742][T12436] FAULT_INJECTION: forcing a failure. [ 466.500742][T12436] name failslab, interval 1, probability 0, space 0, times 0 [ 466.500778][T12436] CPU: 1 UID: 0 PID: 12436 Comm: syz.3.2377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 466.500804][T12436] Tainted: [L]=SOFTLOCKUP [ 466.500811][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 466.500821][T12436] Call Trace: [ 466.500829][T12436] [ 466.500836][T12436] dump_stack_lvl+0xe8/0x150 [ 466.500864][T12436] should_fail_ex+0x46b/0x600 [ 466.500895][T12436] should_failslab+0xa8/0x100 [ 466.500922][T12436] kmem_cache_alloc_noprof+0x87/0x680 [ 466.500944][T12436] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 466.500973][T12436] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 466.501009][T12436] mmu_topup_memory_caches+0x21/0x170 [ 466.501036][T12436] kvm_mmu_load+0x9d/0x2320 [ 466.501059][T12436] ? kvm_msr_allowed+0x9a/0x490 [ 466.501086][T12436] ? kvm_msr_allowed+0x9a/0x490 [ 466.501111][T12436] ? kvm_msr_allowed+0x3f4/0x490 [ 466.501136][T12436] ? kvm_msr_allowed+0x9a/0x490 [ 466.501164][T12436] ? kvm_apic_has_interrupt+0x73c/0x770 [ 466.501184][T12436] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 466.501211][T12436] vcpu_run+0x5c84/0x7860 [ 466.501300][T12436] ? __pfx_vcpu_run+0x10/0x10 [ 466.501319][T12436] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 466.501341][T12436] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 466.501380][T12436] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 466.501414][T12436] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 466.501434][T12436] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 466.501458][T12436] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.501493][T12436] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.501512][T12436] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.501531][T12436] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.501550][T12436] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 466.501581][T12436] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.501607][T12436] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.501629][T12436] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.501647][T12436] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.501666][T12436] ? rt_write_unlock+0x190/0x230 [ 466.501693][T12436] kvm_vcpu_ioctl+0xa65/0xfe0 [ 466.501725][T12436] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 466.501772][T12436] ? __fget_files+0x2a/0x420 [ 466.501795][T12436] ? __fget_files+0x2a/0x420 [ 466.501813][T12436] ? __fget_files+0x3a6/0x420 [ 466.501832][T12436] ? __fget_files+0x2a/0x420 [ 466.501854][T12436] ? bpf_lsm_file_ioctl+0x9/0x20 [ 466.501878][T12436] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 466.501904][T12436] __se_sys_ioctl+0xff/0x170 [ 466.501927][T12436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.501947][T12436] do_syscall_64+0x15f/0xf80 [ 466.501964][T12436] ? trace_irq_disable+0x3b/0x140 [ 466.501985][T12436] ? clear_bhb_loop+0x40/0x90 [ 466.502006][T12436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.502024][T12436] RIP: 0033:0x7f0a1432cdd9 [ 466.502044][T12436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.502060][T12436] RSP: 002b:00007f0a12565028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.502080][T12436] RAX: ffffffffffffffda RBX: 00007f0a145a6090 RCX: 00007f0a1432cdd9 [ 466.502093][T12436] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 466.502104][T12436] RBP: 00007f0a12565090 R08: 0000000000000000 R09: 0000000000000000 [ 466.502115][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.502126][T12436] R13: 00007f0a145a6128 R14: 00007f0a145a6090 R15: 00007ffd71c18678 [ 466.502153][T12436] [ 466.945476][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.264769][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2380'. [ 467.501626][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.634362][ T5718] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 467.818675][ T5718] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 467.818705][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.818724][ T5718] usb 4-1: Product: syz [ 467.818734][ T5718] usb 4-1: Manufacturer: syz [ 467.818742][ T5718] usb 4-1: SerialNumber: syz [ 467.828893][ T5718] usb 4-1: config 0 descriptor?? [ 468.086094][ T5718] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.143075][ T5690] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 468.312282][ T5690] usb 6-1: Using ep0 maxpacket: 32 [ 468.330689][ T5690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.347940][ T5690] usb 6-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 468.347971][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.347990][ T5690] usb 6-1: Product: syz [ 468.348545][ T5690] usb 6-1: Manufacturer: syz [ 468.348561][ T5690] usb 6-1: SerialNumber: syz [ 468.398364][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.523549][ T4927] Bluetooth: hci6: command tx timeout [ 469.102081][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.116385][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.754620][ T5690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 469.754879][ T5690] usb 6-1: MIDIStreaming interface descriptor not found [ 469.844425][ T5718] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 469.868477][ T5718] usb 4-1: USB disconnect, device number 96 [ 470.328291][ T5690] usb 6-1: USB disconnect, device number 13 [ 470.612329][ T4927] Bluetooth: hci6: command tx timeout [ 470.853854][T11536] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 470.970883][T11942] udevd[11942]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 471.044660][T11536] usb 3-1: config 2 has an invalid interface number: 184 but max is 0 [ 471.044686][T11536] usb 3-1: config 2 has no interface number 0 [ 471.044723][T11536] usb 3-1: config 2 interface 184 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 16 [ 471.044745][T11536] usb 3-1: config 2 interface 184 has no altsetting 0 [ 471.048206][T11536] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=ca.78 [ 471.048235][T11536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.048256][T11536] usb 3-1: Product: syz [ 471.048271][T11536] usb 3-1: Manufacturer: syz [ 471.048285][T11536] usb 3-1: SerialNumber: syz [ 471.173329][T12484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 471.299854][T12387] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.300144][T12387] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.300465][T12387] bridge_slave_0: entered allmulticast mode [ 471.303926][T12387] bridge_slave_0: entered promiscuous mode [ 471.341153][T12387] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.341670][T12387] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.342006][T12387] bridge_slave_1: entered allmulticast mode [ 471.350154][T12387] bridge_slave_1: entered promiscuous mode [ 471.440796][T11536] usbtouchscreen 3-1:2.184: probe with driver usbtouchscreen failed with error -71 [ 471.468135][T11536] usb 3-1: USB disconnect, device number 70 [ 472.066641][ T5718] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 472.102674][T12387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.130214][T12387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.235663][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 472.237608][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.237642][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.237665][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 472.237707][ T5718] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 472.237730][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.250633][ T5718] usb 6-1: config 0 descriptor?? [ 472.692167][T12504] /dev/nullb0: Can't open blockdev [ 472.838650][ T148] bridge_slave_1: left allmulticast mode [ 472.838683][ T148] bridge_slave_1: left promiscuous mode [ 472.873845][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.976341][ T5718] microsoft 0003:045E:07DA.000A: report_id 4294934527 is invalid [ 472.976367][ T5718] microsoft 0003:045E:07DA.000A: item 0 4 1 8 parsing failed [ 472.979440][ T5718] microsoft 0003:045E:07DA.000A: parse failed [ 472.979550][ T5718] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 473.014788][ T148] bridge_slave_0: left allmulticast mode [ 473.014819][ T148] bridge_slave_0: left promiscuous mode [ 473.017707][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.238179][ T5718] usb 6-1: USB disconnect, device number 14 [ 474.005646][ T822] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 474.230373][ T822] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 474.230455][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.230477][ T822] usb 4-1: Product: syz [ 474.230491][ T822] usb 4-1: Manufacturer: syz [ 474.230504][ T822] usb 4-1: SerialNumber: syz [ 474.286216][ T822] usb 4-1: config 0 descriptor?? [ 474.499298][ T822] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.174727][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.254053][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.307213][ T148] bond0 (unregistering): Released all slaves [ 475.522002][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.530894][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.923095][T12387] team0: Port device team_slave_0 added [ 476.134586][T12531] netlink: 'syz.2.2401': attribute type 10 has an invalid length. [ 476.260719][T12387] team0: Port device team_slave_1 added [ 476.302655][ T822] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 476.330732][ T822] usb 4-1: USB disconnect, device number 97 [ 476.346483][T12531] team_slave_0: left promiscuous mode [ 476.375501][T12531] team0 (unregistering): Port device team_slave_0 removed [ 476.513804][T12531] team0 (unregistering): Port device team_slave_1 removed [ 477.054988][T12548] FAULT_INJECTION: forcing a failure. [ 477.054988][T12548] name failslab, interval 1, probability 0, space 0, times 0 [ 477.055025][T12548] CPU: 0 UID: 0 PID: 12548 Comm: syz.3.2405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 477.055049][T12548] Tainted: [L]=SOFTLOCKUP [ 477.055056][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 477.055066][T12548] Call Trace: [ 477.055073][T12548] [ 477.055081][T12548] dump_stack_lvl+0xe8/0x150 [ 477.055107][T12548] should_fail_ex+0x46b/0x600 [ 477.055134][T12548] should_failslab+0xa8/0x100 [ 477.055158][T12548] __kmalloc_noprof+0xdf/0x7b0 [ 477.055178][T12548] ? kfree+0x4d/0x6c0 [ 477.055197][T12548] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 477.055227][T12548] tomoyo_realpath_from_path+0xe3/0x5d0 [ 477.055253][T12548] ? tomoyo_domain+0xd7/0x130 [ 477.055282][T12548] ? tomoyo_path_number_perm+0x219/0x630 [ 477.055305][T12548] tomoyo_path_number_perm+0x246/0x630 [ 477.055328][T12548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.055350][T12548] ? __lock_acquire+0x6b5/0x2d10 [ 477.055379][T12548] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.055428][T12548] ? __fget_files+0x2a/0x420 [ 477.055449][T12548] ? __fget_files+0x2a/0x420 [ 477.055467][T12548] ? __fget_files+0x3a6/0x420 [ 477.055484][T12548] ? __fget_files+0x2a/0x420 [ 477.055513][T12548] security_file_ioctl+0xc3/0x2a0 [ 477.055538][T12548] __se_sys_ioctl+0x47/0x170 [ 477.055563][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.055583][T12548] do_syscall_64+0x15f/0xf80 [ 477.055603][T12548] ? trace_irq_disable+0x3b/0x140 [ 477.055628][T12548] ? clear_bhb_loop+0x40/0x90 [ 477.055651][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.055669][T12548] RIP: 0033:0x7f0a1432cdd9 [ 477.055687][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.055705][T12548] RSP: 002b:00007f0a12586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.055725][T12548] RAX: ffffffffffffffda RBX: 00007f0a145a5fa0 RCX: 00007f0a1432cdd9 [ 477.055739][T12548] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 477.055751][T12548] RBP: 00007f0a12586090 R08: 0000000000000000 R09: 0000000000000000 [ 477.055763][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.055775][T12548] R13: 00007f0a145a6038 R14: 00007f0a145a5fa0 R15: 00007ffd71c18678 [ 477.055809][T12548] [ 477.055889][T12548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 477.092449][ T4927] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 477.092777][ T4927] Bluetooth: hci4: Injecting HCI hardware error event [ 477.106771][T12012] Bluetooth: hci4: hardware error 0x00 [ 477.826359][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 477.828790][T12387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.828804][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.828829][T12387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.834557][T12387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.834572][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.834597][T12387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.082847][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 478.260010][T12387] hsr_slave_0: entered promiscuous mode [ 478.265161][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 478.270320][T12387] hsr_slave_1: entered promiscuous mode [ 478.273651][T12387] debugfs: 'hsr0' already exists in 'hsr' [ 478.273678][T12387] Cannot create hsr debugfs directory [ 478.293206][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 478.309570][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 478.309600][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.309620][ T9] usb 4-1: Product: syz [ 478.309632][ T9] usb 4-1: Manufacturer: syz [ 478.309645][ T9] usb 4-1: SerialNumber: syz [ 478.362396][ T822] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 478.367484][ T9] usb 4-1: config 0 descriptor?? [ 478.388946][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 478.389002][ T9] usb 4-1: setting power ON [ 478.389021][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 478.428399][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 478.429076][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 478.429125][ T9] usb 4-1: media controller created [ 478.465839][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.497342][ T9] usb 4-1: selecting invalid altsetting 6 [ 478.497368][ T9] usb 4-1: digital interface selection failed (-22) [ 478.497384][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 478.498172][ T9] usb 4-1: setting power OFF [ 478.498193][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 478.498236][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 478.498249][ T9] (NULL device *): no alternate interface [ 478.543493][ T822] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 478.543525][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.543544][ T822] usb 3-1: Product: syz [ 478.543558][ T822] usb 3-1: Manufacturer: syz [ 478.543572][ T822] usb 3-1: SerialNumber: syz [ 478.561657][ T822] usb 3-1: config 0 descriptor?? [ 478.713433][T12568] dvb-usb: bulk message failed: -22 (3/0) [ 478.713460][T12568] dvb-usb: bulk message failed: -22 (3/0) [ 478.766483][ T822] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.173045][T12012] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 479.332343][T11536] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 479.484261][T11536] usb 6-1: Using ep0 maxpacket: 8 [ 479.489497][T11536] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 479.566196][T11536] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 479.566228][T11536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.566247][T11536] usb 6-1: Product: syz [ 479.566261][T11536] usb 6-1: Manufacturer: syz [ 479.566275][T11536] usb 6-1: SerialNumber: syz [ 479.613257][T11536] usb 6-1: config 0 descriptor?? [ 479.645035][T11536] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 479.645088][T11536] usb 6-1: setting power ON [ 479.645107][T11536] dvb-usb: bulk message failed: -22 (2/0) [ 479.669988][T11536] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 479.670711][T11536] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 479.670764][T11536] usb 6-1: media controller created [ 479.712336][T11536] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.776146][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.799358][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.801513][T11536] usb 6-1: selecting invalid altsetting 6 [ 479.801534][T11536] usb 6-1: digital interface selection failed (-22) [ 479.801548][T11536] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 479.843538][T11536] usb 6-1: setting power OFF [ 479.843562][T11536] dvb-usb: bulk message failed: -22 (2/0) [ 479.843580][T11536] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 479.843591][T11536] (NULL device *): no alternate interface [ 479.912814][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.916044][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.948922][T12576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.956180][T12576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.984004][T11536] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 480.000682][T11536] usb 6-1: USB disconnect, device number 15 [ 480.447338][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 480.571845][ T822] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 480.591612][ T822] usb 3-1: USB disconnect, device number 71 [ 480.726564][ T148] hsr_slave_0: left promiscuous mode [ 480.761947][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 480.786425][ T9] usb 4-1: USB disconnect, device number 98 [ 480.790156][ T148] hsr_slave_1: left promiscuous mode [ 480.791188][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.791205][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.808788][T12588] netlink: 'syz.5.2412': attribute type 2 has an invalid length. [ 480.808808][T12588] netlink: 'syz.5.2412': attribute type 1 has an invalid length. [ 480.847895][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.847920][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.187772][ T5804] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 481.216610][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 481.235357][T12594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2415'. [ 481.270775][ T148] veth1_macvtap: left promiscuous mode [ 481.270885][ T148] veth0_macvtap: left promiscuous mode [ 481.271163][ T148] veth1_vlan: left promiscuous mode [ 481.283657][ T148] veth0_vlan: left promiscuous mode [ 481.336594][ T5804] usb 6-1: Using ep0 maxpacket: 8 [ 481.348788][ T5804] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 481.348819][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.348841][ T5804] usb 6-1: Product: syz [ 481.348855][ T5804] usb 6-1: Manufacturer: syz [ 481.348870][ T5804] usb 6-1: SerialNumber: syz [ 481.385726][ T9] usb 4-1: device descriptor read/64, error -71 [ 481.419558][ T5804] usb 6-1: config 0 descriptor?? [ 481.436364][ T5804] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 481.632363][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 481.762397][ T9] usb 4-1: device descriptor read/64, error -71 [ 481.836930][ T5804] gspca_sonixj: reg_r err -71 [ 481.837089][ T5804] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 481.865305][ T5804] usb 6-1: USB disconnect, device number 16 [ 481.881816][ T9] usb usb4-port1: attempt power cycle [ 482.222336][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 482.244096][ T9] usb 4-1: device descriptor read/8, error -71 [ 482.493594][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 482.513536][ T9] usb 4-1: device descriptor read/8, error -71 [ 482.628295][ T9] usb usb4-port1: unable to enumerate USB device [ 483.053332][ T148] team0 (unregistering): Port device team_slave_1 removed [ 483.114113][ T148] team0 (unregistering): Port device team_slave_0 removed [ 483.985256][T12608] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2420'. [ 484.064655][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2420'. [ 484.162869][ T5804] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 484.375811][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 484.377763][ T5804] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 484.407589][ T5804] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 484.407619][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.407640][ T5804] usb 3-1: Product: syz [ 484.407654][ T5804] usb 3-1: Manufacturer: syz [ 484.407668][ T5804] usb 3-1: SerialNumber: syz [ 484.459607][ T5804] usb 3-1: config 0 descriptor?? [ 484.500912][ T5804] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 484.500958][ T5804] usb 3-1: setting power ON [ 484.500977][ T5804] dvb-usb: bulk message failed: -22 (2/0) [ 484.560851][ T5804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.561604][ T5804] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 484.561656][ T5804] usb 3-1: media controller created [ 484.642273][ T822] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 484.695072][ T5804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.713650][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.726382][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.728311][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.730183][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.770912][ T5804] usb 3-1: selecting invalid altsetting 6 [ 484.770933][ T5804] usb 3-1: digital interface selection failed (-22) [ 484.770946][ T5804] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 484.781662][ T5804] usb 3-1: setting power OFF [ 484.781688][ T5804] dvb-usb: bulk message failed: -22 (2/0) [ 484.781705][ T5804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 484.781717][ T5804] (NULL device *): no alternate interface [ 484.820171][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 484.834101][ T822] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 484.834131][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.834151][ T822] usb 4-1: Product: syz [ 484.834165][ T822] usb 4-1: Manufacturer: syz [ 484.834180][ T822] usb 4-1: SerialNumber: syz [ 484.881385][ T822] usb 4-1: config 0 descriptor?? [ 484.935589][ T822] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 485.023570][ T5804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 485.058301][ T5804] usb 3-1: USB disconnect, device number 72 [ 485.571607][T12629] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2424'. [ 486.044146][T12636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2426'. [ 486.317156][T12639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2421'. [ 486.841508][ T148] IPVS: stop unused estimator thread 0... [ 486.874835][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 487.397679][T12387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 487.473598][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.518442][T12387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 487.833530][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.863807][T12387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 487.977819][ T5706] usb 4-1: USB disconnect, device number 103 [ 488.052332][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 488.203888][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 488.211883][ T9] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 488.230453][ T9] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 488.230483][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.230500][ T9] usb 6-1: Product: syz [ 488.230513][ T9] usb 6-1: Manufacturer: syz [ 488.230527][ T9] usb 6-1: SerialNumber: syz [ 488.286559][ T9] usb 6-1: config 0 descriptor?? [ 488.289748][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.305264][T12387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 488.305597][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 488.305645][ T9] usb 6-1: setting power ON [ 488.305664][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 488.332434][ T5804] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 488.350901][T12387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.363855][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.364618][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 488.364665][ T9] usb 6-1: media controller created [ 488.401550][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.430979][ T9] usb 6-1: selecting invalid altsetting 6 [ 488.431003][ T9] usb 6-1: digital interface selection failed (-22) [ 488.431018][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 488.460075][ T9] usb 6-1: setting power OFF [ 488.460102][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 488.460119][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 488.460132][ T9] (NULL device *): no alternate interface [ 488.477410][ T5804] usb 3-1: device descriptor read/64, error -71 [ 488.515251][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.547244][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.548734][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.549067][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.664480][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 488.680728][ T9] usb 6-1: USB disconnect, device number 17 [ 488.712298][ T5804] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 488.844512][ T5804] usb 3-1: device descriptor read/64, error -71 [ 488.967255][ T5804] usb usb3-port1: attempt power cycle [ 489.103150][T12387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.287142][T12387] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.307450][ T5804] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 489.333255][ T5804] usb 3-1: device descriptor read/8, error -71 [ 489.415147][ T2373] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.415331][T12686] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2434'. [ 489.416670][ T2373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.422392][ T37] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 489.490152][ T2373] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.490399][ T2373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.591307][ T37] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 489.591337][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.591358][ T37] usb 4-1: Product: syz [ 489.591373][ T37] usb 4-1: Manufacturer: syz [ 489.591388][ T37] usb 4-1: SerialNumber: syz [ 489.602309][ T5804] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 489.625434][ T5804] usb 3-1: device descriptor read/8, error -71 [ 489.629458][ T37] usb 4-1: config 0 descriptor?? [ 489.732701][ T5804] usb usb3-port1: unable to enumerate USB device [ 489.754246][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 490.518464][T12698] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2436'. [ 490.669179][ T37] usb 4-1: Firmware version (0.0) predates our first public release. [ 490.669212][ T37] usb 4-1: Please update to version 0.2 or newer [ 490.823639][ T37] usb 4-1: USB disconnect, device number 104 [ 491.577750][T12712] netlink: 'syz.2.2437': attribute type 1 has an invalid length. [ 491.577773][T12712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2437'. [ 491.577796][T12712] netlink: 'syz.2.2437': attribute type 1 has an invalid length. [ 491.805503][T12387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.948618][ T37] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 492.002320][ T5706] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 492.104627][ T37] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 492.104658][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.115193][ T37] usb 6-1: config 0 descriptor?? [ 492.148750][ T37] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 492.162359][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 492.170971][ T5706] usb 3-1: config 0 has no interfaces? [ 492.189510][ T5706] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 492.189542][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.189562][ T5706] usb 3-1: Product: syz [ 492.189629][ T5706] usb 3-1: Manufacturer: syz [ 492.189647][ T5706] usb 3-1: SerialNumber: syz [ 492.217962][ T5706] usb 3-1: config 0 descriptor?? [ 492.432310][ T5706] usb 3-1: USB disconnect, device number 77 [ 492.925935][T12387] veth0_vlan: entered promiscuous mode [ 492.983819][T12387] veth1_vlan: entered promiscuous mode [ 493.274515][ T5804] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 493.360585][T12387] veth0_macvtap: entered promiscuous mode [ 493.402741][T12387] veth1_macvtap: entered promiscuous mode [ 493.432310][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 493.436084][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 493.436116][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16451, setting to 1024 [ 493.436142][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 493.436178][ T5804] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 493.436200][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.452051][ T1250] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 493.478288][ T5804] usb 4-1: config 0 descriptor?? [ 493.602325][ T1250] usb 3-1: Using ep0 maxpacket: 8 [ 493.608778][ T1250] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 493.628179][ T1250] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 493.628210][ T1250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.628231][ T1250] usb 3-1: Product: syz [ 493.628245][ T1250] usb 3-1: Manufacturer: syz [ 493.628259][ T1250] usb 3-1: SerialNumber: syz [ 493.674429][ T1250] usb 3-1: config 0 descriptor?? [ 493.736657][ T1250] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 493.736766][ T1250] usb 3-1: setting power ON [ 493.736780][ T1250] dvb-usb: bulk message failed: -22 (2/0) [ 493.914254][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.915066][ T1250] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 493.931561][ T1250] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 493.931620][ T1250] usb 3-1: media controller created [ 493.956220][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.995890][ T5804] belkin 0003:1020:0006.000B: unknown main item tag 0x0 [ 493.995927][ T5804] belkin 0003:1020:0006.000B: unknown main item tag 0x0 [ 493.995956][ T5804] belkin 0003:1020:0006.000B: unknown main item tag 0x0 [ 493.995983][ T5804] belkin 0003:1020:0006.000B: unknown main item tag 0x0 [ 493.996009][ T5804] belkin 0003:1020:0006.000B: unknown main item tag 0x0 [ 493.996034][ T5804] belkin 0003:1020:0006.000B: unknown main item tag 0x0 [ 493.996059][ T5804] belkin 0003:1020:0006.000B: unknown global tag 0xd [ 493.996074][ T5804] belkin 0003:1020:0006.000B: item 0 1 1 13 parsing failed [ 493.996865][ T5804] belkin 0003:1020:0006.000B: parse failed [ 493.996935][ T5804] belkin 0003:1020:0006.000B: probe with driver belkin failed with error -22 [ 494.025401][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.026001][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.126320][ T1250] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.133622][T12387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.234506][ T5804] usb 4-1: USB disconnect, device number 105 [ 494.244081][ T1250] usb 3-1: selecting invalid altsetting 6 [ 494.244103][ T1250] usb 3-1: digital interface selection failed (-22) [ 494.244117][ T1250] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 494.266398][ T1250] usb 3-1: setting power OFF [ 494.266422][ T1250] dvb-usb: bulk message failed: -22 (2/0) [ 494.266440][ T1250] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 494.266451][ T1250] (NULL device *): no alternate interface [ 494.373597][T12387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.429943][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.430201][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.430238][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.430267][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.497322][ T1250] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 494.509049][ T1250] usb 3-1: USB disconnect, device number 78 [ 494.596773][ T37] usb 6-1: USB disconnect, device number 18 [ 495.065831][ T5804] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 495.272292][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 495.294714][ T5804] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 495.294742][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.294758][ T5804] usb 3-1: Product: syz [ 495.294770][ T5804] usb 3-1: Manufacturer: syz [ 495.294784][ T5804] usb 3-1: SerialNumber: syz [ 495.321060][ T5804] usb 3-1: config 0 descriptor?? [ 495.355381][ T5804] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 495.421529][ T5718] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 495.617305][ T5718] usb 4-1: device descriptor read/64, error -71 [ 495.683821][ T5621] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 495.841986][ T5621] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 495.842014][ T5621] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 495.857468][ T5621] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 495.857497][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.857517][ T5621] usb 6-1: Product: syz [ 495.857530][ T5621] usb 6-1: Manufacturer: syz [ 495.857545][ T5621] usb 6-1: SerialNumber: syz [ 495.942424][ T5718] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 495.990313][ T5621] usb 6-1: config 0 descriptor?? [ 496.070227][ T5621] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 496.162334][ T5718] usb 4-1: device descriptor read/64, error -71 [ 496.289502][ T5718] usb usb4-port1: attempt power cycle [ 496.589228][ T2374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.589247][ T2374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.682454][ T5718] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 496.708825][ T5718] usb 4-1: device descriptor read/8, error -71 [ 496.774154][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.774169][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.972589][ T5718] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 496.996858][ T5718] usb 4-1: device descriptor read/8, error -71 [ 497.102787][ T5718] usb usb4-port1: unable to enumerate USB device [ 497.419093][ T5804] gspca_ov534_9: reg_r err -71 [ 497.672953][ T5804] gspca_ov534_9: Unknown sensor 0000 [ 497.673019][ T5804] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 497.681384][ T5804] usb 3-1: USB disconnect, device number 79 [ 497.802352][T11536] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 498.002320][T11536] usb 7-1: Using ep0 maxpacket: 8 [ 498.006408][T11536] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 498.006462][T11536] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.006486][T11536] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.006511][T11536] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.006534][T11536] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.006575][T11536] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.006598][T11536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.231383][T11536] usb 7-1: usb_control_msg returned -32 [ 498.231444][T11536] usbtmc 7-1:16.0: can't read capabilities [ 498.247540][T12751] TCP: TCP_TX_DELAY enabled [ 498.276729][T12751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.277309][T12751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.354316][ T9] usb 6-1: USB disconnect, device number 19 [ 498.433456][ T5621] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 498.615714][ T5621] usb 3-1: config 114 has an invalid interface number: 32 but max is 0 [ 498.615745][ T5621] usb 3-1: config 114 has no interface number 0 [ 498.615777][ T5621] usb 3-1: config 114 interface 32 has no altsetting 0 [ 498.627933][ T5621] usb 3-1: New USB device found, idVendor=6231, idProduct=cc69, bcdDevice=2d.44 [ 498.627962][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.627980][ T5621] usb 3-1: Product: syz [ 498.627994][ T5621] usb 3-1: Manufacturer: syz [ 498.628007][ T5621] usb 3-1: SerialNumber: syz [ 498.827301][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.827895][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.859157][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2449'. [ 498.873934][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.888534][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.907481][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.908411][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.949579][T12764] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 499.066319][ T5621] cdc_eem 3-1:114.32: probe with driver cdc_eem failed with error -22 [ 499.113371][ T5621] usb 3-1: USB disconnect, device number 80 [ 499.274515][T11536] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 499.296937][ T5804] usb 7-1: USB disconnect, device number 2 [ 499.424803][T11536] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.424830][T11536] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 499.424848][T11536] usb 4-1: config 1 has no interface number 0 [ 499.424874][T11536] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.424889][T11536] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 499.424903][T11536] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 499.427603][T11536] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.427620][T11536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.427630][T11536] usb 4-1: Product: syz [ 499.427638][T11536] usb 4-1: Manufacturer: syz [ 499.427645][T11536] usb 4-1: SerialNumber: syz [ 499.467855][T12768] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 499.788905][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 499.920622][T12768] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 500.007145][T12780] fuse: Unknown parameter 'group_id'Ñò€ŒµêmµÇ †(aŒJ A¸úú÷^}J4' [ 500.024209][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 500.091694][T12012] Bluetooth: hci6: Unknown advertising packet type: 0x14 [ 500.182431][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 500.197811][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.197838][ T9] usb 6-1: config 0 has no interfaces? [ 500.230516][ T9] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 500.230546][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.230566][ T9] usb 6-1: Product: syz [ 500.230581][ T9] usb 6-1: Manufacturer: syz [ 500.230594][ T9] usb 6-1: SerialNumber: syz [ 500.285317][ T9] usb 6-1: config 0 descriptor?? [ 500.475630][T11536] cdc_ncm 4-1:1.1: bind() failure [ 501.151508][ T5706] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 501.309155][ T5706] usb 7-1: Using ep0 maxpacket: 32 [ 501.438749][ T5706] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 501.438779][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.438799][ T5706] usb 7-1: Product: syz [ 501.438814][ T5706] usb 7-1: Manufacturer: syz [ 501.438828][ T5706] usb 7-1: SerialNumber: syz [ 501.491001][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.491189][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.502291][ T5706] usb 7-1: config 0 descriptor?? [ 501.584615][ T5706] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 501.584721][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 501.584738][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 501.584816][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 501.584824][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 501.618997][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 501.628664][ T5706] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 501.628720][ T5706] usb 7-1: media controller created [ 501.739600][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.770811][ T9] usb 4-1: USB disconnect, device number 110 [ 501.892829][ T5706] usb 7-1: selecting invalid altsetting 3 [ 501.892852][ T5706] ttusb2: set interface to alts=3 failed [ 501.899988][T12791] dvb-usb: bulk message failed: -22 (7/0) [ 501.900009][T12791] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 501.900054][T12791] ttusb2: i2c transfer failed. [ 501.941245][T12789] overlayfs: conflicting lowerdir path [ 502.170184][ T5706] DVB: Unable to find symbol tda10086_attach() [ 502.170200][ T5706] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 502.174031][ T5706] dvb-usb: bulk message failed: -22 (4/0) [ 502.174049][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 502.174140][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 502.174151][ T5706] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 502.174199][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 502.196849][ T5706] usb 7-1: USB disconnect, device number 3 [ 502.419379][ T5706] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 502.623572][ T37] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 502.668919][T12820] netlink: 536 bytes leftover after parsing attributes in process `syz.3.2460'. [ 502.668948][T12820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2460'. [ 502.793311][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 502.800977][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.818720][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2461'. [ 502.819289][ T37] usb 3-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 502.819314][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.819332][ T37] usb 3-1: Product: syz [ 502.819345][ T37] usb 3-1: Manufacturer: syz [ 502.819358][ T37] usb 3-1: SerialNumber: syz [ 502.967666][ T5706] usb 6-1: USB disconnect, device number 20 [ 503.216960][T12826] comedi comedi3: dt2817: I/O base address or length out of range [ 504.386060][ T37] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.386130][ T37] usb 3-1: MIDIStreaming interface descriptor not found [ 504.795680][T12857] tc_dump_action: action bad kind [ 504.810184][ T37] usb 3-1: USB disconnect, device number 81 [ 505.098142][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 505.295260][T11536] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 505.312937][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 505.426175][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.432375][ T5804] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 505.475160][T11536] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.475194][T11536] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 505.475221][T11536] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.476701][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 505.476730][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 505.476825][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.476849][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.482419][T11536] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 505.482445][T11536] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 505.482465][T11536] usb 7-1: Product: syz [ 505.482478][T11536] usb 7-1: Manufacturer: syz [ 505.482491][T11536] usb 7-1: SerialNumber: syz [ 505.615051][T12867] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 505.667014][T11536] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input44 [ 505.739507][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 505.751565][ T5804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.751591][ T5804] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 505.783661][ T5804] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 505.783690][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.783710][ T5804] usb 4-1: Product: syz [ 505.783723][ T5804] usb 4-1: Manufacturer: syz [ 505.783787][ T5804] usb 4-1: SerialNumber: syz [ 505.867400][ T9] usb 6-1: usb_control_msg returned -32 [ 505.867451][ T9] usbtmc 6-1:16.0: can't read capabilities [ 506.251641][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 506.251697][ T5706] usb 7-1: USB disconnect, device number 4 [ 506.297965][ T5804] usb 4-1: unit 8 not found! [ 506.360406][ T5804] usb 4-1: cannot find UAC_HEADER [ 506.527313][ T5706] appletouch 7-1:1.0: input: appletouch disconnected [ 506.624303][T12892] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2475'. [ 506.699316][ T5804] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 506.711806][ T5804] usb 4-1: USB disconnect, device number 111 [ 506.983839][ T5706] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 507.041454][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.112380][ T5706] usb 7-1: device descriptor read/64, error -71 [ 507.352324][ T5706] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 507.494428][ T5706] usb 7-1: device descriptor read/64, error -71 [ 507.574563][ T5804] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 507.596475][T11536] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 507.602661][ T5706] usb usb7-port1: attempt power cycle [ 507.727200][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 507.732045][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.747196][T11536] usb 4-1: Using ep0 maxpacket: 16 [ 507.774851][T11536] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 507.774868][T11536] usb 4-1: config 0 has no interface number 0 [ 507.774895][T11536] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 507.774909][T11536] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 507.774921][T11536] usb 4-1: config 0 interface 41 has no altsetting 0 [ 507.832799][T11536] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 507.832829][T11536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.832849][T11536] usb 4-1: Product: syz [ 507.832864][T11536] usb 4-1: Manufacturer: syz [ 507.832877][T11536] usb 4-1: SerialNumber: syz [ 507.835684][ T5804] usb 3-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 507.835714][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.835735][ T5804] usb 3-1: Product: syz [ 507.835749][ T5804] usb 3-1: Manufacturer: syz [ 507.835763][ T5804] usb 3-1: SerialNumber: syz [ 507.943353][T11536] usb 4-1: config 0 descriptor?? [ 507.944347][T12908] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 507.945528][T12908] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 507.963550][ T5706] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 507.983240][ T5706] usb 7-1: device descriptor read/8, error -71 [ 508.071151][ T822] usb 6-1: USB disconnect, device number 21 [ 508.211671][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2481'. [ 508.222322][ T5706] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 508.243578][ T5706] usb 7-1: device descriptor read/8, error -71 [ 508.298414][T12908] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 508.298532][T12908] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 508.353231][ T5706] usb usb7-port1: unable to enumerate USB device [ 508.916643][T11536] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 508.953582][ T5706] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 509.112311][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 509.118469][T11536] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 509.118497][T11536] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 509.118919][T11536] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 509.152370][ T5706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.152403][ T5706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.152425][ T5706] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 509.152484][ T5706] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 509.152507][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.266774][T11536] usb 4-1: USB disconnect, device number 112 [ 509.318444][ T5706] usb 6-1: config 0 descriptor?? [ 509.453549][ T5804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.453606][ T5804] usb 3-1: MIDIStreaming interface descriptor not found [ 509.729591][ T5804] usb 3-1: USB disconnect, device number 82 [ 509.797287][ T5706] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 509.797325][ T5706] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 509.797350][ T5706] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 509.797376][ T5706] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 509.797401][ T5706] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 509.816053][ T5706] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 510.095253][T12943] FAULT_INJECTION: forcing a failure. [ 510.095253][T12943] name failslab, interval 1, probability 0, space 0, times 0 [ 510.095288][T12943] CPU: 1 UID: 0 PID: 12943 Comm: syz.3.2485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 510.095315][T12943] Tainted: [L]=SOFTLOCKUP [ 510.095322][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.095333][T12943] Call Trace: [ 510.095341][T12943] [ 510.095350][T12943] dump_stack_lvl+0xe8/0x150 [ 510.095377][T12943] should_fail_ex+0x46b/0x600 [ 510.095410][T12943] should_failslab+0xa8/0x100 [ 510.095436][T12943] kmem_cache_alloc_noprof+0x87/0x680 [ 510.095457][T12943] ? skb_clone+0x212/0x3a0 [ 510.095479][T12943] skb_clone+0x212/0x3a0 [ 510.095500][T12943] __netlink_deliver_tap+0x424/0x8b0 [ 510.095536][T12943] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.095564][T12943] netlink_deliver_tap+0x19c/0x1b0 [ 510.095592][T12943] netlink_unicast+0x754/0x920 [ 510.095626][T12943] netlink_sendmsg+0x813/0xb40 [ 510.095661][T12943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.095689][T12943] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 510.095721][T12943] ? aa_sock_msg_perm+0x122/0x200 [ 510.095746][T12943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.095771][T12943] sock_sendmsg_nosec+0x112/0x150 [ 510.095796][T12943] ____sys_sendmsg+0x55c/0x870 [ 510.095829][T12943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.095865][T12943] ? import_iovec+0x73/0xa0 [ 510.095887][T12943] ___sys_sendmsg+0x2a5/0x360 [ 510.095904][T12943] ? __lock_acquire+0x6b5/0x2d10 [ 510.095934][T12943] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.095991][T12943] ? __fget_files+0x2a/0x420 [ 510.096011][T12943] ? __fget_files+0x3a6/0x420 [ 510.096040][T12943] __x64_sys_sendmsg+0x1c3/0x2a0 [ 510.096062][T12943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.096089][T12943] ? __pfx_ksys_write+0x10/0x10 [ 510.096121][T12943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.096142][T12943] do_syscall_64+0x15f/0xf80 [ 510.096160][T12943] ? trace_irq_disable+0x3b/0x140 [ 510.096184][T12943] ? clear_bhb_loop+0x40/0x90 [ 510.096206][T12943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.096225][T12943] RIP: 0033:0x7f0a1432cdd9 [ 510.096243][T12943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.096259][T12943] RSP: 002b:00007f0a12586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.096280][T12943] RAX: ffffffffffffffda RBX: 00007f0a145a5fa0 RCX: 00007f0a1432cdd9 [ 510.096295][T12943] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 510.096307][T12943] RBP: 00007f0a12586090 R08: 0000000000000000 R09: 0000000000000000 [ 510.096319][T12943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.096330][T12943] R13: 00007f0a145a6038 R14: 00007f0a145a5fa0 R15: 00007ffd71c18678 [ 510.096360][T12943] [ 510.237944][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.709514][ T5706] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 510.709882][ T5706] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 510.920600][ T5706] usb 6-1: USB disconnect, device number 22 [ 510.953522][ T5690] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 510.953628][ T5690] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 510.953694][ T5690] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 510.953763][ T5690] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 511.102680][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 511.118418][ T37] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 511.339491][ T37] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 511.339521][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.339543][ T37] usb 7-1: Product: syz [ 511.339558][ T37] usb 7-1: Manufacturer: syz [ 511.339572][ T37] usb 7-1: SerialNumber: syz [ 511.392876][ T37] usb 7-1: config 0 descriptor?? [ 511.604721][ T37] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 511.632291][ T5621] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 511.782319][ T5621] usb 4-1: Using ep0 maxpacket: 16 [ 511.791605][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.791637][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.791674][ T5621] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 511.791699][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.869353][ T5621] usb 4-1: config 0 descriptor?? [ 512.434044][ T5621] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 512.678296][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.704653][ T5621] corsair 0003:1B1C:1B02.000D: Read invalid backlight brightness: ea. [ 512.789440][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.936270][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.936826][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.577125][ T37] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 513.619486][ T37] usb 7-1: USB disconnect, device number 9 [ 513.889616][ T38] audit: type=1326 audit(1778013141.556:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12968 comm="syz.5.2494" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf121ccdd9 code=0x0 [ 513.948072][T12970] comedi comedi2: 8255: I/O port conflict (0x8,4) [ 514.785417][T12963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 514.815434][T12963] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 514.815574][T12963] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 515.274201][T12963] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 515.812940][ T5718] usb 4-1: USB disconnect, device number 113 [ 515.868145][T11536] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 515.872362][ T5804] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 516.022524][T11536] usb 7-1: Using ep0 maxpacket: 8 [ 516.028444][T11536] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.028471][T11536] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 516.040216][ T5804] usb 3-1: Using ep0 maxpacket: 8 [ 516.042697][T12012] Bluetooth: hci3: command 0x0406 tx timeout [ 516.099679][T11536] usb 7-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 516.099709][T11536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.099783][T11536] usb 7-1: Product: syz [ 516.099798][T11536] usb 7-1: Manufacturer: syz [ 516.099812][T11536] usb 7-1: SerialNumber: syz [ 516.152464][ T5804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.159074][ T5804] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 516.159100][ T5804] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 516.159120][ T5804] usb 3-1: config 4 has no interface number 0 [ 516.205597][ T5804] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 516.205629][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.205856][ T5804] usb 3-1: Product: syz [ 516.205872][ T5804] usb 3-1: Manufacturer: syz [ 516.205888][ T5804] usb 3-1: SerialNumber: syz [ 516.375330][ T37] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 516.479027][ T5718] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 516.510657][T11536] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 516.510746][T11536] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 516.510767][T11536] usb 7-1: 1:1 : sample bitwidth 236 in over sample bytes 2 [ 516.510793][T11536] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 516.511467][T11536] usb 7-1: 0:2 : does not exist [ 516.533500][ T37] usb 6-1: Using ep0 maxpacket: 8 [ 516.573450][ T37] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 516.573484][ T37] usb 6-1: config 0 interface 0 has no altsetting 0 [ 516.576150][ T37] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 516.576178][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.576197][ T37] usb 6-1: Product: syz [ 516.576211][ T37] usb 6-1: Manufacturer: syz [ 516.576226][ T37] usb 6-1: SerialNumber: syz [ 516.586805][T12981] dlm: no local IP address has been set [ 516.586819][T12981] dlm: cannot start dlm midcomms -107 [ 516.642349][ T5718] usb 4-1: Using ep0 maxpacket: 16 [ 516.674384][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 516.689904][ T5718] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 516.689934][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.689953][ T5718] usb 4-1: Product: syz [ 516.689968][ T5718] usb 4-1: Manufacturer: syz [ 516.689982][ T5718] usb 4-1: SerialNumber: syz [ 516.734887][ T37] usb 6-1: config 0 descriptor?? [ 516.846186][T12012] Bluetooth: hci6: command 0x0c1a tx timeout [ 516.992355][ T37] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 517.053237][T11536] usb 7-1: USB disconnect, device number 10 [ 517.142123][T12996] netlink: 'syz.3.2503': attribute type 4 has an invalid length. [ 517.143806][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'. [ 517.221487][ T37] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 517.272089][ T37] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 517.366983][ T5718] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 517.389180][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.398416][ T5718] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 517.398894][ T5718] usb 4-1: unit 6 not found! [ 517.812397][ T9928] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 517.922415][ T5718] usb 4-1: USB disconnect, device number 114 [ 517.967861][ T9928] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 517.967892][ T9928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.967912][ T9928] usb 7-1: Product: syz [ 517.967927][ T9928] usb 7-1: Manufacturer: syz [ 517.967941][ T9928] usb 7-1: SerialNumber: syz [ 517.992822][ T9928] usb 7-1: config 0 descriptor?? [ 518.085115][ T5804] uvcvideo 3-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 518.085215][ T5804] uvcvideo 3-1:4.147: No valid video chain found. [ 518.091301][ T5804] usb 3-1: USB disconnect, device number 83 [ 518.225497][ T9928] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 518.569338][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.783788][ T5718] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 518.884631][ T5804] usb 6-1: USB disconnect, device number 24 [ 518.922358][T12012] Bluetooth: hci6: command 0x0c1a tx timeout [ 518.932386][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 518.938891][ T5718] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.985010][ T5718] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 518.985099][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.985121][ T5718] usb 4-1: Product: syz [ 518.985136][ T5718] usb 4-1: Manufacturer: syz [ 518.985151][ T5718] usb 4-1: SerialNumber: syz [ 519.046953][ T5718] usb 4-1: config 0 descriptor?? [ 519.090916][T13009] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.249781][T12999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.263593][T12999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.300181][T13006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2507'. [ 519.964522][ T9928] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 519.994062][ T9928] usb 7-1: USB disconnect, device number 11 [ 520.273340][ T5718] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 520.356058][T11536] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 520.442441][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 520.451048][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.451097][ T5718] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 520.451120][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.471431][ T5718] usb 3-1: config 0 descriptor?? [ 520.517267][T11536] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 520.517325][T11536] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 520.517349][T11536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.557474][T11536] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 520.700120][T12012] Bluetooth: hci6: unexpected event for opcode 0x0009 [ 520.777567][ T5718] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 521.069937][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.099484][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.272322][T11536] usb 4-1: USB disconnect, device number 115 [ 521.535382][ T5718] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 521.635095][ T5706] usb 6-1: USB disconnect, device number 25 [ 521.694454][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 521.714001][ T5718] usb 7-1: unable to get BOS descriptor or descriptor too short [ 521.721792][ T5718] usb 7-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 521.721879][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.721899][ T5718] usb 7-1: Product: syz [ 521.721913][ T5718] usb 7-1: Manufacturer: syz [ 521.721928][ T5718] usb 7-1: SerialNumber: syz [ 522.172816][ T5621] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 522.324260][ T5621] usb 4-1: Using ep0 maxpacket: 16 [ 522.337184][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 522.337218][ T5621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16451, setting to 1024 [ 522.337245][ T5621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.337287][ T5621] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 522.337309][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.402765][ T5621] usb 4-1: config 0 descriptor?? [ 522.830022][ T5621] belkin 0003:1020:0006.000E: unknown main item tag 0x0 [ 522.830058][ T5621] belkin 0003:1020:0006.000E: unknown main item tag 0x0 [ 522.830084][ T5621] belkin 0003:1020:0006.000E: unknown main item tag 0x0 [ 522.830111][ T5621] belkin 0003:1020:0006.000E: unknown main item tag 0x0 [ 522.830137][ T5621] belkin 0003:1020:0006.000E: unknown main item tag 0x0 [ 522.830162][ T5621] belkin 0003:1020:0006.000E: unknown main item tag 0x0 [ 522.830188][ T5621] belkin 0003:1020:0006.000E: unknown global tag 0xd [ 522.830202][ T5621] belkin 0003:1020:0006.000E: item 0 1 1 13 parsing failed [ 522.830867][ T5621] belkin 0003:1020:0006.000E: parse failed [ 522.865169][ T5621] belkin 0003:1020:0006.000E: probe with driver belkin failed with error -22 [ 522.957049][ T9928] usb 3-1: USB disconnect, device number 84 [ 522.957138][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 523.109404][ T5706] usb 4-1: USB disconnect, device number 116 [ 523.339053][ T5718] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.339110][ T5718] usb 7-1: MIDIStreaming interface descriptor not found [ 523.567381][ T5718] usb 7-1: USB disconnect, device number 12 [ 523.762333][ T5804] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 523.827283][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.938053][ T5804] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 523.938082][ T5804] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 523.938103][ T5804] usb 6-1: config 0 has no interface number 0 [ 523.938149][ T5804] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 49352, setting to 8 [ 523.938192][ T5804] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 523.938217][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.959284][ T5804] usb 6-1: config 0 descriptor?? [ 523.983770][T13057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.414742][ T5718] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 524.563169][ T5718] usb 7-1: Using ep0 maxpacket: 16 [ 524.594166][ T5718] usb 7-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 524.594197][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.594217][ T5718] usb 7-1: Product: syz [ 524.594232][ T5718] usb 7-1: Manufacturer: syz [ 524.594246][ T5718] usb 7-1: SerialNumber: syz [ 524.667755][ T5804] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input48 [ 524.948870][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.968953][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.437704][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.482571][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.551146][T13078] netlink: zone id is out of range [ 525.551167][T13078] netlink: zone id is out of range [ 525.551175][T13078] netlink: zone id is out of range [ 525.551183][T13078] netlink: zone id is out of range [ 525.551191][T13078] netlink: del zone limit has 4 unknown bytes [ 525.552064][T13064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.569402][T13064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.790569][ T5718] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 525.859110][ T5706] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 526.018223][ T5706] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 526.018325][ T5706] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 526.018351][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.111511][ T5706] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 526.159470][ T5718] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 526.169852][ T5718] usb 7-1: USB disconnect, device number 13 [ 526.318663][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.555109][ T5804] usb 6-1: USB disconnect, device number 26 [ 526.555201][ C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 526.662270][T12876] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 526.817083][T12876] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 526.817116][T12876] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 526.817136][T12876] usb 3-1: Product: syz [ 526.817151][T12876] usb 3-1: SerialNumber: syz [ 526.842620][ T5718] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 526.868441][T12876] usb 3-1: config 0 descriptor?? [ 527.020551][ T5718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.020584][ T5718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.020620][ T5718] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.020663][ T5718] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.020686][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.032000][ T5718] usb 7-1: config 0 descriptor?? [ 527.093507][ T5804] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 527.123746][T12876] hso 3-1:0.0: Failed to find BULK eps [ 527.182623][ T5706] stv0680 4-1:4.0: Could not get descriptor 0200 [ 527.243760][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 527.253521][ T5804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 527.278413][ T5804] usb 6-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 527.278453][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.278474][ T5804] usb 6-1: Product: syz [ 527.278489][ T5804] usb 6-1: Manufacturer: syz [ 527.278503][ T5804] usb 6-1: SerialNumber: syz [ 527.414137][ T5706] stv0680 4-1:4.0: last error: 21, command = 0x34 [ 527.612934][ T5804] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.613005][ T5804] usb 6-1: MIDIStreaming interface descriptor not found [ 527.637342][ T37] usb 4-1: USB disconnect, device number 117 [ 527.716120][ T5804] usb 6-1: USB disconnect, device number 27 [ 528.069728][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.091909][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 528.103580][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.203650][ T5718] usbhid 7-1:0.0: can't add hid device: -71 [ 528.203761][ T5718] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 528.233950][ T5718] usb 7-1: USB disconnect, device number 14 [ 528.773287][ T5621] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 528.935527][ T5621] usb 6-1: Using ep0 maxpacket: 8 [ 528.940157][ T5621] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.950785][ T5621] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 528.950812][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.950828][ T5621] usb 6-1: Product: syz [ 528.950840][ T5621] usb 6-1: Manufacturer: syz [ 528.950852][ T5621] usb 6-1: SerialNumber: syz [ 529.033279][ T5621] usb 6-1: config 0 descriptor?? [ 529.083746][ T5621] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 529.083882][ T5621] usb 6-1: selecting invalid altsetting 1 [ 529.202352][ T37] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 529.242452][ T5621] gspca_stk014: init reg: 0x00 [ 529.242540][ T5621] stk014 6-1:0.0: probe with driver stk014 failed with error -5 [ 529.260683][ T5804] usb 3-1: USB disconnect, device number 85 [ 529.386899][ T37] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 529.386926][ T37] usb 7-1: config 0 has no interface number 0 [ 529.386971][ T37] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.390529][ T37] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 529.390556][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.390567][ T37] usb 7-1: Product: syz [ 529.390580][ T37] usb 7-1: Manufacturer: syz [ 529.390594][ T37] usb 7-1: SerialNumber: syz [ 529.419001][ T37] usb 7-1: config 0 descriptor?? [ 529.446250][ T5718] usb 6-1: USB disconnect, device number 28 [ 529.626220][ T37] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 529.726080][ C1] yurex 7-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 530.082598][ T5804] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 530.237033][ T5804] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 530.237063][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.237082][ T5804] usb 4-1: Product: syz [ 530.237095][ T5804] usb 4-1: Manufacturer: syz [ 530.237108][ T5804] usb 4-1: SerialNumber: syz [ 530.291778][ T5804] usb 4-1: config 0 descriptor?? [ 530.324138][ T5804] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 530.352374][ T5621] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 530.503624][ T5621] usb 6-1: Using ep0 maxpacket: 32 [ 530.538067][ T5621] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 530.538104][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.538124][ T5621] usb 6-1: Product: syz [ 530.538139][ T5621] usb 6-1: Manufacturer: syz [ 530.538550][ T5621] usb 6-1: SerialNumber: syz [ 530.587657][ T5621] usb 6-1: config 0 descriptor?? [ 530.606786][ T5621] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 531.564481][ T9928] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 531.721907][ T9928] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 531.721938][ T9928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.721958][ T9928] usb 3-1: Product: syz [ 531.721973][ T9928] usb 3-1: Manufacturer: syz [ 531.721987][ T9928] usb 3-1: SerialNumber: syz [ 531.764544][ T9928] usb 3-1: config 0 descriptor?? [ 531.971929][T12876] usb 7-1: USB disconnect, device number 15 [ 531.993360][T12876] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 532.033175][ T5621] gspca_ov534_9: reg_r err -32 [ 532.040958][ T9928] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 532.251110][T13112] overlayfs: failed to resolve './file1': -2 [ 532.292364][ T5621] gspca_ov534_9: Unknown sensor 0000 [ 532.292516][ T5621] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 532.302900][ T5621] usb 6-1: USB disconnect, device number 29 [ 532.452859][T12876] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 532.604142][T12876] usb 7-1: Using ep0 maxpacket: 32 [ 532.618747][T12876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 532.636337][T12876] usb 7-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 532.636358][T12876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.636379][T12876] usb 7-1: Product: syz [ 532.636392][T12876] usb 7-1: Manufacturer: syz [ 532.636618][T12876] usb 7-1: SerialNumber: syz [ 532.957502][T12876] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 532.957758][T12876] usb 7-1: MIDIStreaming interface descriptor not found [ 533.208690][ T5804] gspca_stk1135: reg_w 0x300 err -71 [ 533.213507][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213525][ T5804] gspca_stk1135: Sensor write failed [ 533.213552][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213562][ T5804] gspca_stk1135: Sensor write failed [ 533.213588][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213598][ T5804] gspca_stk1135: Sensor read failed [ 533.213625][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213634][ T5804] gspca_stk1135: Sensor read failed [ 533.213641][ T5804] gspca_stk1135: Detected sensor type unknown (0x0) [ 533.213673][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213683][ T5804] gspca_stk1135: Sensor read failed [ 533.213710][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213719][ T5804] gspca_stk1135: Sensor read failed [ 533.213748][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213757][ T5804] gspca_stk1135: Sensor write failed [ 533.213783][ T5804] gspca_stk1135: serial bus timeout: status=0x00 [ 533.213793][ T5804] gspca_stk1135: Sensor write failed [ 533.213883][ T5804] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 533.234045][T12876] usb 7-1: USB disconnect, device number 16 [ 533.248362][ T5804] usb 4-1: USB disconnect, device number 118 [ 533.311404][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.319541][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.726155][T11942] udevd[11942]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.764737][T13131] sg_write: data in/out 495175/136 bytes for SCSI command 0x0-- guessing data in; [ 533.764737][T13131] program syz.6.2545 not setting count and/or reply_len properly [ 533.828217][ T9928] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 533.847532][ T9928] usb 3-1: USB disconnect, device number 86 [ 533.922380][ T37] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 534.078538][ T37] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 534.078569][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.078589][ T37] usb 6-1: Product: syz [ 534.078604][ T37] usb 6-1: Manufacturer: syz [ 534.078617][ T37] usb 6-1: SerialNumber: syz [ 534.119327][ T37] usb 6-1: config 0 descriptor?? [ 534.298211][T12012] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 534.326102][ T37] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 534.556778][T13144] misc userio: Can't change port type on an already running userio instance [ 534.882319][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 535.035545][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 535.042481][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 535.042509][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.042524][ T9] usb 3-1: Product: syz [ 535.042532][ T9] usb 3-1: Manufacturer: syz [ 535.042539][ T9] usb 3-1: SerialNumber: syz [ 535.104675][ T9] usb 3-1: config 0 descriptor?? [ 535.117732][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 535.344970][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.345929][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.522396][T12876] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 535.672605][T12876] usb 7-1: Using ep0 maxpacket: 32 [ 535.688048][T12876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 535.700385][T12876] usb 7-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 535.700445][T12876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.700465][T12876] usb 7-1: Product: syz [ 535.700480][T12876] usb 7-1: Manufacturer: syz [ 535.700495][T12876] usb 7-1: SerialNumber: syz [ 535.877739][T11536] team_slave_0: entered promiscuous mode [ 535.877787][T11536] team_slave_1: entered promiscuous mode [ 535.884039][T13154] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 535.886972][T13154] team_slave_0: left promiscuous mode [ 535.899217][T13154] team_slave_1: left promiscuous mode [ 536.003678][T12876] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.003820][T12876] usb 7-1: MIDIStreaming interface descriptor not found [ 536.199625][T12876] usb 7-1: USB disconnect, device number 17 [ 536.286926][T13154] team0 (unregistering): Port device team_slave_0 removed [ 536.448720][T11942] udevd[11942]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.539201][T13154] team0 (unregistering): Port device team_slave_1 removed [ 536.546108][ T9] gspca_ov534_9: reg_r err -32 [ 536.802267][ T9] gspca_ov534_9: Unknown sensor 0000 [ 536.802406][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 536.815465][ T9] usb 3-1: USB disconnect, device number 87 [ 536.863123][ T37] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 537.372353][ T37] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 537.526297][ T37] usb 7-1: unable to get BOS descriptor or descriptor too short [ 537.527191][ T37] usb 7-1: not running at top speed; connect to a high speed hub [ 537.553638][ T37] usb 7-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 537.553670][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.553690][ T37] usb 7-1: Product: syz [ 537.553705][ T37] usb 7-1: Manufacturer: syz [ 537.553719][ T37] usb 7-1: SerialNumber: syz [ 537.603643][ T9928] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 537.772351][ T9928] usb 4-1: Using ep0 maxpacket: 16 [ 537.775364][ T9928] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 537.775392][ T9928] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 537.775414][ T9928] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 537.775434][ T9928] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 537.775519][ T9928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 537.775541][ T9928] usb 4-1: config 0 has no interface number 0 [ 537.775586][ T9928] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 537.775688][ T9928] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 537.775712][ T9928] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.775747][ T9928] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.775826][ T9928] usb 4-1: config 0 interface 125 has no altsetting 0 [ 537.775845][ T9928] usb 4-1: config 0 interface 125 has no altsetting 2 [ 537.779348][ T9928] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 537.779429][ T9928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.779449][ T9928] usb 4-1: Product: syz [ 537.779465][ T9928] usb 4-1: Manufacturer: syz [ 537.779479][ T9928] usb 4-1: SerialNumber: syz [ 537.837989][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.838588][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.995923][ T9928] usb 4-1: config 0 descriptor?? [ 538.014672][ T9928] usb 4-1: selecting invalid altsetting 2 [ 538.099422][ T37] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 538.136350][ T37] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 538.155335][ T37] usb 7-1: unable to issue vendor read request (ret = -71) [ 538.156602][ T37] usb 7-1: unable to issue vendor read request (ret = -71) [ 538.159002][ T37] usb 7-1: unable to issue vendor read request (ret = -71) [ 538.194513][ T37] usb 7-1: unable to issue vendor read request (ret = -71) [ 538.335318][ C1] usb 4-1: async_complete: urb error -71 [ 538.335593][ C1] usb 4-1: async_complete: urb error -71 [ 538.335677][ C1] usb 4-1: async_complete: urb error -71 [ 538.335751][ C1] usb 4-1: async_complete: urb error -71 [ 538.338051][ T9928] get_1284_register: usb error -71 [ 538.390966][T12012] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 538.391184][T12012] Bluetooth: hci6: Injecting HCI hardware error event [ 538.397258][ T4927] Bluetooth: hci6: hardware error 0x00 [ 538.452388][ T37] usb 7-1: USB disconnect, device number 18 [ 538.485025][ T9928] usb 4-1: USB disconnect, device number 119 [ 539.072360][ T37] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 539.227441][ T37] usb 7-1: Using ep0 maxpacket: 32 [ 539.247802][ T37] usb 7-1: unable to get BOS descriptor or descriptor too short [ 539.266311][ T37] usb 7-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 539.266346][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.266366][ T37] usb 7-1: Product: syz [ 539.266382][ T37] usb 7-1: Manufacturer: syz [ 539.266397][ T37] usb 7-1: SerialNumber: syz [ 539.474264][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 539.603714][ T9] usb 3-1: device descriptor read/64, error -71 [ 539.842306][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 539.972343][ T9] usb 3-1: device descriptor read/64, error -71 [ 540.082732][ T9] usb usb3-port1: attempt power cycle [ 540.422260][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 540.446724][ T9] usb 3-1: device descriptor read/8, error -71 [ 540.452898][ T4927] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 540.583741][ T37] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.583795][ T37] usb 7-1: MIDIStreaming interface descriptor not found [ 540.689212][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 540.706252][ T9] usb 3-1: device descriptor read/8, error -71 [ 540.707177][ T37] usb 7-1: USB disconnect, device number 19 [ 540.814928][ T9] usb usb3-port1: unable to enumerate USB device [ 540.859117][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.452351][T12876] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 541.604464][T12876] usb 4-1: Using ep0 maxpacket: 16 [ 541.609790][T12876] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.609816][T12876] usb 4-1: config 0 has no interface number 0 [ 541.611889][T12876] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 541.611918][T12876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.611932][T12876] usb 4-1: Product: syz [ 541.611940][T12876] usb 4-1: Manufacturer: syz [ 541.611947][T12876] usb 4-1: SerialNumber: syz [ 541.624795][T12876] usb 4-1: config 0 descriptor?? [ 541.680344][ T9928] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 541.825707][ T9928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 541.830674][ T9928] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 541.830704][ T9928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.830724][ T9928] usb 7-1: Product: syz [ 541.830738][ T9928] usb 7-1: Manufacturer: syz [ 541.830752][ T9928] usb 7-1: SerialNumber: syz [ 541.881858][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.898279][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.936291][T12876] usb 4-1: selecting invalid altsetting 1 [ 541.936317][T12876] speedtch 4-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 541.936362][T12876] speedtch 4-1:0.1: usbatm_usb_probe: bind failed: -22! [ 541.936422][T12876] speedtch 4-1:0.1: probe with driver speedtch failed with error -22 [ 541.978144][T12876] usb 4-1: USB disconnect, device number 120 [ 542.855259][ T9928] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 542.856109][ T9928] usb 7-1: unit 14 not found! [ 542.958169][T13210] syzkaller1: entered promiscuous mode [ 542.958195][T13210] syzkaller1: entered allmulticast mode [ 543.009780][ T9928] usb 7-1: USB disconnect, device number 20 [ 543.289429][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.942319][T12876] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 543.942336][ T5706] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 544.074995][ T5706] usb 4-1: device descriptor read/64, error -71 [ 544.094649][T12876] usb 3-1: Using ep0 maxpacket: 32 [ 544.097494][T12876] usb 3-1: unable to get BOS descriptor or descriptor too short [ 544.101752][T12876] usb 3-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 544.101776][T12876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.101787][T12876] usb 3-1: Product: syz [ 544.101795][T12876] usb 3-1: Manufacturer: syz [ 544.101802][T12876] usb 3-1: SerialNumber: syz [ 544.312291][ T5706] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 544.446551][ T5706] usb 4-1: device descriptor read/64, error -71 [ 544.553988][ T5706] usb usb4-port1: attempt power cycle [ 544.942483][ T5706] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 544.964286][ T5706] usb 4-1: device descriptor read/8, error -71 [ 545.212365][ T5706] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 545.234151][ T5706] usb 4-1: device descriptor read/8, error -71 [ 545.344216][ T5706] usb usb4-port1: unable to enumerate USB device [ 545.394365][T12876] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.394433][T12876] usb 3-1: MIDIStreaming interface descriptor not found [ 545.519641][T12876] usb 3-1: USB disconnect, device number 92 [ 545.677455][ T6095] udevd[6095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 546.125871][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 546.468346][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 546.705026][T12876] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 546.910535][T12876] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 546.910566][T12876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.910586][T12876] usb 7-1: Product: syz [ 546.910598][T12876] usb 7-1: Manufacturer: syz [ 546.910606][T12876] usb 7-1: SerialNumber: syz [ 546.952827][T12876] usb 7-1: config 0 descriptor?? [ 546.983735][T12876] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 547.820973][T13264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2596'. [ 548.222360][ T5706] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 548.349045][T13272] FAULT_INJECTION: forcing a failure. [ 548.349045][T13272] name failslab, interval 1, probability 0, space 0, times 0 [ 548.349082][T13272] CPU: 0 UID: 0 PID: 13272 Comm: syz.2.2599 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.349112][T13272] Tainted: [L]=SOFTLOCKUP [ 548.349119][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.349130][T13272] Call Trace: [ 548.349138][T13272] [ 548.349146][T13272] dump_stack_lvl+0xe8/0x150 [ 548.349176][T13272] should_fail_ex+0x46b/0x600 [ 548.349209][T13272] should_failslab+0xa8/0x100 [ 548.349237][T13272] __kmalloc_noprof+0xdf/0x7b0 [ 548.349258][T13272] ? kfree+0x4d/0x6c0 [ 548.349277][T13272] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 548.349315][T13272] tomoyo_realpath_from_path+0xe3/0x5d0 [ 548.349342][T13272] ? tomoyo_domain+0xd7/0x130 [ 548.349371][T13272] ? tomoyo_path_number_perm+0x219/0x630 [ 548.349392][T13272] tomoyo_path_number_perm+0x246/0x630 [ 548.349416][T13272] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.349437][T13272] ? __lock_acquire+0x6b5/0x2d10 [ 548.349464][T13272] ? do_raw_spin_lock+0x12b/0x2f0 [ 548.349510][T13272] ? __fget_files+0x2a/0x420 [ 548.349533][T13272] ? __fget_files+0x2a/0x420 [ 548.349550][T13272] ? __fget_files+0x3a6/0x420 [ 548.349567][T13272] ? __fget_files+0x2a/0x420 [ 548.349589][T13272] security_file_ioctl+0xc3/0x2a0 [ 548.349612][T13272] __se_sys_ioctl+0x47/0x170 [ 548.349637][T13272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.349655][T13272] do_syscall_64+0x15f/0xf80 [ 548.349675][T13272] ? clear_bhb_loop+0x40/0x90 [ 548.349695][T13272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.349714][T13272] RIP: 0033:0x7f96d783cdd9 [ 548.349732][T13272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.349749][T13272] RSP: 002b:00007f96d5a8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.349767][T13272] RAX: ffffffffffffffda RBX: 00007f96d7ab5fa0 RCX: 00007f96d783cdd9 [ 548.349780][T13272] RDX: 00002000000000c0 RSI: 00000000000007a5 RDI: 0000000000000003 [ 548.349793][T13272] RBP: 00007f96d5a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 548.349803][T13272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.349814][T13272] R13: 00007f96d7ab6038 R14: 00007f96d7ab5fa0 R15: 00007fff0929bf08 [ 548.349842][T13272] [ 548.350005][T13272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.382332][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 548.435043][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 548.450404][ T5706] usb 4-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 548.450433][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.450452][ T5706] usb 4-1: Product: syz [ 548.450466][ T5706] usb 4-1: Manufacturer: syz [ 548.450479][ T5706] usb 4-1: SerialNumber: syz [ 548.780919][T13275] overlayfs: failed to resolve './file1': -2 [ 549.393894][ T9928] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 549.532276][ T9928] usb 3-1: device descriptor read/64, error -71 [ 549.636754][T12012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 549.726160][T12876] gspca_stk1135: reg_w 0x2ff err -71 [ 549.727213][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727229][T12876] gspca_stk1135: Sensor write failed [ 549.727256][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727267][T12876] gspca_stk1135: Sensor write failed [ 549.727294][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727304][T12876] gspca_stk1135: Sensor read failed [ 549.727332][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727342][T12876] gspca_stk1135: Sensor read failed [ 549.727348][T12876] gspca_stk1135: Detected sensor type unknown (0x0) [ 549.727378][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727388][T12876] gspca_stk1135: Sensor read failed [ 549.727415][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727424][T12876] gspca_stk1135: Sensor read failed [ 549.727453][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727462][T12876] gspca_stk1135: Sensor write failed [ 549.727487][T12876] gspca_stk1135: serial bus timeout: status=0x00 [ 549.727496][T12876] gspca_stk1135: Sensor write failed [ 549.730136][T12012] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 549.737600][T12012] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 549.738811][T12012] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 549.757614][T12012] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 549.790338][ T9928] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 549.915035][T12876] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 549.958262][T12876] usb 7-1: USB disconnect, device number 21 [ 550.067750][ T9928] usb 3-1: device descriptor read/64, error -71 [ 550.237867][ T9928] usb usb3-port1: attempt power cycle [ 550.372556][ T5706] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.372604][ T5706] usb 4-1: MIDIStreaming interface descriptor not found [ 550.702040][ T5706] usb 4-1: USB disconnect, device number 125 [ 550.722306][ T9928] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 550.743893][ T9928] usb 3-1: device descriptor read/8, error -71 [ 550.894091][T13294] fuse: Bad value for 'user_id' [ 550.894114][T13294] fuse: Bad value for 'user_id' [ 550.913277][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.994425][ T9928] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 551.014950][ T9928] usb 3-1: device descriptor read/8, error -71 [ 551.124742][ T9928] usb usb3-port1: unable to enumerate USB device [ 551.266621][T13298] fuse: Bad value for 'user_id' [ 551.266642][T13298] fuse: Bad value for 'user_id' [ 551.717644][T11536] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 551.862297][T11536] usb 4-1: Using ep0 maxpacket: 32 [ 551.866131][T11536] usb 4-1: unable to get BOS descriptor or descriptor too short [ 551.869611][T11536] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 132, changing to 7 [ 551.869657][T11536] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.869685][T11536] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1967, setting to 1024 [ 551.924736][T11536] usb 4-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40 [ 551.924767][T11536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.924790][T11536] usb 4-1: Product: syz [ 551.924805][T11536] usb 4-1: Manufacturer: syz [ 551.924819][T11536] usb 4-1: SerialNumber: syz [ 552.294437][T11536] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 552.363484][ T4927] Bluetooth: hci5: command tx timeout [ 552.421167][T11536] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 552.441671][T11536] usb 4-1: can't set first interface for hiFace device. [ 552.441712][T11536] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 552.476961][T11536] usb 4-1: can't set first interface for hiFace device. [ 552.477001][T11536] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 552.507679][T11536] usb 4-1: can't set first interface for hiFace device. [ 552.507717][T11536] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 552.563856][T11536] usb 4-1: USB disconnect, device number 126 [ 552.605012][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.632567][ T9928] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 552.808966][ T9928] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 552.808997][ T9928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.809017][ T9928] usb 3-1: Product: syz [ 552.809031][ T9928] usb 3-1: Manufacturer: syz [ 552.809046][ T9928] usb 3-1: SerialNumber: syz [ 552.846691][ T5621] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 552.883687][T13282] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.884084][T13282] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.884377][T13282] bridge_slave_0: entered allmulticast mode [ 552.887733][T13282] bridge_slave_0: entered promiscuous mode [ 552.918669][T13282] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.919057][T13282] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.919347][T13282] bridge_slave_1: entered allmulticast mode [ 552.941306][T13282] bridge_slave_1: entered promiscuous mode [ 553.005679][ T5621] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 553.005711][ T5621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.005731][ T5621] usb 7-1: Product: syz [ 553.005745][ T5621] usb 7-1: Manufacturer: syz [ 553.005759][ T5621] usb 7-1: SerialNumber: syz [ 553.056454][ T5621] usb 7-1: config 0 descriptor?? [ 553.126179][ T5621] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 553.197418][T13282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.217571][T13282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.292866][ T5706] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 553.306852][ T9928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 553.306914][ T9928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 553.437064][T13282] team0: Port device team_slave_0 added [ 553.465777][T13282] team0: Port device team_slave_1 added [ 553.474924][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.474980][ T5706] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 553.475053][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.556424][ T5706] usb 4-1: config 0 descriptor?? [ 553.599562][ T5706] rndis_host 4-1:0.0: rndis: master #0/ffff8880603ec000 slave #1/0000000000000000 [ 553.700129][T13282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.700146][T13282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.700172][T13282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.786363][T13282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.786380][T13282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.786406][T13282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.935774][ T5706] usb 4-1: USB disconnect, device number 127 [ 554.452417][ T4927] Bluetooth: hci5: command tx timeout [ 554.489338][T13282] hsr_slave_0: entered promiscuous mode [ 554.498257][T13282] hsr_slave_1: entered promiscuous mode [ 554.920864][T13318] overlayfs: failed to resolve './file1': -2 [ 555.696134][ T5621] gspca_stk1135: reg_w 0x2ff err -71 [ 555.697178][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697191][ T5621] gspca_stk1135: Sensor write failed [ 555.697218][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697228][ T5621] gspca_stk1135: Sensor write failed [ 555.697255][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697265][ T5621] gspca_stk1135: Sensor read failed [ 555.697291][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697302][ T5621] gspca_stk1135: Sensor read failed [ 555.697309][ T5621] gspca_stk1135: Detected sensor type unknown (0x0) [ 555.697340][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697350][ T5621] gspca_stk1135: Sensor read failed [ 555.697376][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697386][ T5621] gspca_stk1135: Sensor read failed [ 555.697413][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697422][ T5621] gspca_stk1135: Sensor write failed [ 555.697447][ T5621] gspca_stk1135: serial bus timeout: status=0x00 [ 555.697457][ T5621] gspca_stk1135: Sensor write failed [ 555.697548][ T5621] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 555.730316][ T5621] usb 7-1: USB disconnect, device number 22 [ 556.114321][ T5706] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 556.242303][ T5706] usb 4-1: device descriptor read/64, error -71 [ 556.242424][ T9928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO [ 556.242479][ T9928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 556.242500][ T9928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 556.306727][ T9928] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 556.346939][ T9928] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 556.382516][ T9928] usb 3-1: USB disconnect, device number 97 [ 556.502819][ T5706] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 556.522759][ T4927] Bluetooth: hci5: command tx timeout [ 556.632317][ T5706] usb 4-1: device descriptor read/64, error -71 [ 556.744512][ T5706] usb usb4-port1: attempt power cycle [ 556.960609][T13337] vivid-007: ================= START STATUS ================= [ 556.960743][T13337] vivid-007: Enable Output Cropping: true [ 556.960779][T13337] vivid-007: Enable Output Composing: true [ 556.960798][T13337] vivid-007: Enable Output Scaler: true [ 556.960813][T13337] vivid-007: Tx RGB Quantization Range: Automatic [ 556.960828][T13337] vivid-007: Transmit Mode: HDMI [ 556.960843][T13337] vivid-007: Hotplug Present: 0x00000000 [ 556.960862][T13337] vivid-007: RxSense Present: 0x00000000 [ 556.960879][T13337] vivid-007: EDID Present: 0x00000000 [ 556.960897][T13337] vivid-007: ================== END STATUS ================== [ 557.103131][ T5706] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 557.113382][ T5706] usb 4-1: device descriptor read/8, error -71 [ 557.366499][ T5706] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 557.385608][ T5706] usb 4-1: device descriptor read/8, error -71 [ 557.462611][ T37] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 557.492724][ T5706] usb usb4-port1: unable to enumerate USB device [ 557.605866][ T37] usb 7-1: device descriptor read/64, error -71 [ 557.637531][T13282] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 557.679168][T13282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.776262][T13282] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 557.847566][T13282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.862356][T13282] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 557.884790][ T37] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 557.945304][T13282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.985393][T13282] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 558.022399][ T37] usb 7-1: device descriptor read/64, error -71 [ 558.039052][T13282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.144004][ T37] usb usb7-port1: attempt power cycle [ 558.514055][ T37] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 558.543309][ T37] usb 7-1: device descriptor read/8, error -71 [ 558.602308][ T4927] Bluetooth: hci5: command tx timeout [ 558.655758][T13282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.790951][T13362] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 558.805557][ T37] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 558.824858][ T37] usb 7-1: device descriptor read/8, error -71 [ 558.906419][T13282] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.932739][ T37] usb usb7-port1: unable to enumerate USB device [ 559.006266][ T2376] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.006504][ T2376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.106241][ T2375] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.106396][ T2375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.130532][T13367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.131076][T13367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.149392][T13367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.149940][T13367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.382358][ T5621] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 560.816027][T13394] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2628'. [ 560.980718][T13282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.992314][ T5706] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 561.156230][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 561.164669][ T5706] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 561.164694][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.164713][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.229694][ T5706] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 561.229725][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.229737][ T5706] usb 3-1: Product: syz [ 561.229751][ T5706] usb 3-1: Manufacturer: syz [ 561.229759][ T5706] usb 3-1: SerialNumber: syz [ 561.282069][ T5706] usb 3-1: 0:2 : does not exist [ 562.347320][T13282] veth0_vlan: entered promiscuous mode [ 562.416487][T13282] veth1_vlan: entered promiscuous mode [ 562.503334][ T37] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 562.521188][T13282] veth0_macvtap: entered promiscuous mode [ 562.580823][T13282] veth1_macvtap: entered promiscuous mode [ 562.642471][ T37] usb 7-1: device descriptor read/64, error -71 [ 562.717091][T13282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.740446][T13282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.755491][T13422] overlay: filesystem on ./file0 not supported as upperdir [ 562.827986][ T2376] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.828273][ T2376] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.829115][ T2376] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.829909][ T2376] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.930414][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.930516][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.942414][ T37] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 563.112621][ T37] usb 7-1: device descriptor read/64, error -71 [ 563.223227][ T37] usb usb7-port1: attempt power cycle [ 563.577831][ T39] INFO: task syz.4.2216:11869 blocked for more than 143 seconds. [ 563.577860][ T39] Tainted: G L syzkaller #0 [ 563.577872][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.577882][ T39] task:syz.4.2216 state:D stack:24824 pid:11869 tgid:11869 ppid:9669 task_flags:0x400040 flags:0x00080002 [ 563.577930][ T39] Call Trace: [ 563.577935][ T39] [ 563.577946][ T39] __schedule+0x169e/0x54f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 563.577988][ T39] ? __lock_acquire+0x6b5/0x2d10 [ 563.578015][ T39] ? __pfx___schedule+0x10/0x10 [ 563.578047][ T39] rt_mutex_schedule+0x76/0xf0 [ 563.578064][ T39] __rt_mutex_slowlock_locked+0x1f28/0x2550 [ 563.578090][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 563.578118][ T39] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 563.578145][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.578170][ T39] ? rcu_is_watching+0x15/0xb0 [ 563.578191][ T39] __rwbase_read_lock+0xc3/0x180 [ 563.578209][ T39] ? __pfx___rwbase_read_lock+0x10/0x10 [ 563.578233][ T39] down_read+0x132/0x200 [ 563.578250][ T39] ? __pfx_down_read+0x10/0x10 [ 563.578279][ T39] page_cache_ra_order+0x2bc/0x4b0 [ 563.578311][ T39] do_sync_mmap_readahead+0x698/0x7b0 [ 563.578337][ T39] ? __pfx_filemap_get_entry+0x10/0x10 [ 563.578367][ T39] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 563.578399][ T39] ? count_memcg_event_mm+0x1d/0x250 [ 563.578424][ T39] ? count_memcg_event_mm+0x1d/0x250 [ 563.578424][ T39] ? count_memcg_event_mm+0x1d/0x250 [ 563.578453][ T39] filemap_fault+0x790/0x13a0 [ 563.578479][ T39] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 563.578507][ T39] ? __pfx_filemap_fault+0x10/0x10 [ 563.578526][ T39] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 563.578551][ T39] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 563.578578][ T39] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 563.578599][ T39] ? pte_alloc_one+0x1f9/0x380 [ 563.578620][ T39] __do_fault+0x138/0x2a0 [ 563.578641][ T39] do_pte_missing+0x65b/0x2940 [ 563.578671][ T39] handle_mm_fault+0xdb5/0x14c0 [ 563.578691][ T39] ? handle_mm_fault+0xed/0x14c0 [ 563.578711][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 563.578725][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 563.578744][ T39] ? __pfx_do_futex+0x10/0x10 [ 563.578784][ T39] do_user_addr_fault+0xa73/0x1340 [ 563.578807][ T39] ? rcu_is_watching+0x15/0xb0 [ 563.578821][ T39] ? trace_page_fault_user+0x84/0x1e0 [ 563.578840][ T39] exc_page_fault+0x6a/0xc0 [ 563.578857][ T39] asm_exc_page_fault+0x26/0x30 [ 563.578873][ T39] RIP: 0033:0x7f4e6ba2bc98 [ 563.578889][ T39] RSP: 002b:00007fff1385f7d8 EFLAGS: 00010206 [ 563.578903][ T39] RAX: 0000200000000000 RBX: 0000000000000004 RCX: 00746174732e7463 [ 563.578915][ T39] RDX: 000000000000000d RSI: 2e74636361757063 RDI: 0000200000000000 [ 563.578926][ T39] RBP: fffffffffffffffe R08: 0000001b2fc20000 R09: 0000000000000001 [ 563.578937][ T39] R10: 7ffffffffffffff2 R11: 0000000000000009 R12: 00007fff1385f900 [ 563.578948][ T39] R13: 00007f4e6bcd5fac R14: 0000000000062da3 R15: 00007fff1385f8e0 [ 563.578971][ T39] [ 563.578978][ T39] INFO: task syz.4.2216:11870 blocked for more than 143 seconds. [ 563.578992][ T39] Tainted: G L syzkaller #0 [ 563.578999][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.579006][ T39] task:syz.4.2216 state:D stack:24536 pid:11870 tgid:11869 ppid:9669 task_flags:0x400040 flags:0x00080002 [ 563.579044][ T39] Call Trace: [ 563.579050][ T39] [ 563.579058][ T39] __schedule+0x169e/0x54f0 [ 563.579081][ T39] ? lapic_next_event+0x11/0x20 [ 563.579118][ T39] ? irqentry_exit+0x218/0x730 [ 563.579134][ T39] ? trace_irq_disable+0x3b/0x140 [ 563.579154][ T39] ? __pfx___schedule+0x10/0x10 [ 563.579178][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 563.579205][ T39] rt_mutex_schedule+0x76/0xf0 [ 563.579221][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 563.579240][ T39] __rt_mutex_slowlock_locked+0x1f28/0x2550 [ 563.579266][ T39] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 563.579307][ T39] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 563.579936][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.579961][ T39] ? rcu_is_watching+0x15/0xb0 [ 563.579979][ T39] __rwbase_read_lock+0xc3/0x180 [ 563.579995][ T39] ? __pfx___rwbase_read_lock+0x10/0x10 [ 563.580018][ T39] down_read+0x132/0x200 [ 563.580034][ T39] ? __pfx_down_read+0x10/0x10 [ 563.580057][ T39] page_cache_ra_order+0x2bc/0x4b0 [ 563.580082][ T39] do_sync_mmap_readahead+0x698/0x7b0 [ 563.580103][ T39] ? __pfx_filemap_get_entry+0x10/0x10 [ 563.580128][ T39] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 563.580153][ T39] ? count_memcg_event_mm+0x1d/0x250 [ 563.580172][ T39] ? count_memcg_event_mm+0x1d/0x250 [ 563.580195][ T39] filemap_fault+0x790/0x13a0 [ 563.580223][ T39] ? __pfx_filemap_fault+0x10/0x10 [ 563.580245][ T39] ? __pfx_filemap_map_pages+0x10/0x10 [ 563.580271][ T39] ? do_pte_missing+0x12b5/0x2940 [ 563.580294][ T39] __do_fault+0x138/0x2a0 [ 563.580315][ T39] ? do_pte_missing+0x12b5/0x2940 [ 563.580338][ T39] do_pte_missing+0x179c/0x2940 [ 563.580365][ T39] ? mt_find+0x186/0x630 [ 563.580386][ T39] handle_mm_fault+0xdb5/0x14c0 [ 563.580408][ T39] ? handle_mm_fault+0xed/0x14c0 [ 563.580430][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 563.580467][ T39] __get_user_pages+0x168f/0x2570 [ 563.580507][ T39] populate_vma_page_range+0x2be/0x3c0 [ 563.580530][ T39] ? __pfx_populate_vma_page_range+0x10/0x10 [ 563.580550][ T39] ? userfaultfd_unmap_complete+0x29e/0x320 [ 563.580566][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.580582][ T39] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 563.580600][ T39] __mm_populate+0x25f/0x390 [ 563.580616][ T39] ? __pfx___mm_populate+0x10/0x10 [ 563.580632][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.580646][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.580660][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 563.580676][ T39] vm_mmap_pgoff+0x3ad/0x4f0 [ 563.580697][ T39] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 563.580717][ T39] ? __fget_files+0x2a/0x420 [ 563.580732][ T39] ? __fget_files+0x3a6/0x420 [ 563.580746][ T39] ? __fget_files+0x2a/0x420 [ 563.580773][ T39] ksys_mmap_pgoff+0x4e8/0x720 [ 563.580792][ T39] ? __x64_sys_mmap+0x7f/0x140 [ 563.580812][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.580829][ T39] do_syscall_64+0x15f/0xf80 [ 563.580845][ T39] ? trace_irq_disable+0x3b/0x140 [ 563.580863][ T39] ? clear_bhb_loop+0x40/0x90 [ 563.580883][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.580900][ T39] RIP: 0033:0x7f4e6ba5cdd9 [ 563.580913][ T39] RSP: 002b:00007f4e69cb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 563.580929][ T39] RAX: ffffffffffffffda RBX: 00007f4e6bcd5fa0 RCX: 00007f4e6ba5cdd9 [ 563.580939][ T39] RDX: 0000000001000006 RSI: 0000000000b36000 RDI: 0000200000000000 [ 563.580948][ T39] RBP: 00007f4e6baf2d69 R08: 0000000000000006 R09: 0000000003554000 [ 563.580957][ T39] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 563.580966][ T39] R13: 00007f4e6bcd6038 R14: 00007f4e6bcd5fa0 R15: 00007fff1385f678 [ 563.580990][ T39] [ 563.581054][ T39] [ 563.581054][ T39] Showing all locks held in the system: [ 563.581063][ T39] 9 locks held by kworker/u8:0/12: [ 563.581073][ T39] #0: ffff888032a6f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 563.581113][ T39] #1: ffffc90000117c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 563.581148][ T39] #2: ffffffff8f5915b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 563.581183][ T39] #3: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670 [ 563.581223][ T39] #4: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 563.581257][ T39] #5: ffffffff8e05f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.581297][ T39] #6: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.581337][ T39] #7: ffff88804eda90a8 (&n->lock){++..}-{3:3}, at: neigh_resolve_output+0x239/0x780 [ 563.581376][ T39] #8: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: rt_write_lock+0x86/0x220 [ 563.581419][ T39] 6 locks held by kworker/1:1/37: [ 563.581427][ T39] #0: ffff88801bab9d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 563.581462][ T39] #1: ffffc90000ac7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 563.581501][ T39] #2: ffff888029fbe210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 563.581545][ T39] #3: ffff888029b45658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 563.581587][ T39] #4: ffff88801ebfd658 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 563.585732][ T39] #5: ffffffff8ee3a1a0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 563.587610][ T39] 1 lock held by khungtaskd/39: [ 563.587620][ T39] #0: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 563.587671][ T39] 9 locks held by kworker/u8:13/2374: [ 563.587679][ T39] #0: ffff88803bb61138 ((wq_completion)wg-kex-wg2#19){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 563.587720][ T39] #1: ffffc90007017c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 563.587764][ T39] #2: ffff8880344cd6f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 563.587804][ T39] #3: ffff88806da363e0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 563.587843][ T39] #4: ffffffff8e05f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.587879][ T39] #5: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.587915][ T39] #6: ffffffff8e1c8260 (rcu_read_lock_bh){....}-{1:3}, at: wg_index_hashtable_insert+0x35/0x8c0 [ 563.587955][ T39] #7: ffff88802c07c870 (&p->pi_lock){-...}-{2:2}, at: _task_rq_lock+0x5b/0x470 [ 563.587995][ T39] #8: ffff8880b863b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 563.588033][ T39] 5 locks held by kworker/u8:14/2375: [ 563.588042][ T39] #0: ffff88803bb61138 ((wq_completion)wg-kex-wg2#19){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 563.588081][ T39] #1: ffffc90007037c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 563.588115][ T39] #2: ffff8880344cd6f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 563.588161][ T39] #3: ffff88806da35938 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 563.588194][ T39] #4: ffff8880b8636f90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 563.588246][ T39] 2 locks held by getty/5370: [ 563.588254][ T39] #0: ffff88803672a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 563.588284][ T39] #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 563.588320][ T39] 6 locks held by kworker/0:5/5621: [ 563.588328][ T39] #0: ffff88803a811538 ((wq_completion)wg-kex-wg0#20){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 563.588365][ T39] #1: ffffc90004cffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 563.588407][ T39] #2: ffffffff8e05f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.588443][ T39] #3: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.588479][ T39] #4: ffffffff8e1c8260 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_send_staged_packets+0x12a/0x1520 [ 563.588522][ T39] #5: ffffffff8e05f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 563.588560][ T39] 2 locks held by syz.1.1463/9408: [ 563.588568][ T39] #0: ffff888026f0d8c8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_fallocate+0x263/0x550 [ 563.588607][ T39] #1: ffff888026f0da98 (mapping.invalidate_lock){++++}-{4:4}, at: blkdev_fallocate+0x294/0x550 [ 563.588646][ T39] 1 lock held by kworker/0:8/11536: [ 563.588654][ T39] #0: ffff88806dba7938 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 563.588693][ T39] 1 lock held by syz.4.2216/11869: [ 563.588702][ T39] #0: ffff888026f0da98 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x2bc/0x4b0 [ 563.588739][ T39] 1 lock held by syz.4.2216/11870: [ 563.588748][ T39] #0: ffff888026f0da98 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x2bc/0x4b0 [ 563.588799][ T39] 11 locks held by syz-executor/13282: [ 563.588808][ T39] #0: ffffffff8f6012c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.588842][ T39] #1: ffffffff8f6010d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 563.588878][ T39] #2: ffffffff8f89d7d8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x9e0 [ 563.588917][ T39] #3: ffffffff8f935198 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 563.588957][ T39] #4: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 563.588994][ T39] #5: ffff888029275898 (&si->socket.wq.wait){+.+.}-{3:3}, at: __wake_up_common_lock+0x2f/0x1e0 [ 563.589034][ T39] #6: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 563.589071][ T39] #7: ffff888038ae9208 (&ep->lock){+.+.}-{3:3}, at: ep_poll_callback+0x79/0x800 [ 563.707353][ T39] #8: ffff8880b863b9a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 563.707414][ T39] #9: ffff8880b86246c8 (psi_seq){-...}-{0:0}, at: psi_task_change+0xd4/0x340 [ 563.707458][ T39] #10: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 563.707515][ T39] 3 locks held by syz.3.2636/13426: [ 563.707525][ T39] #0: ffff88803b8b6060 (&newdev->mutex){+.+.}-{4:4}, at: uinput_ioctl_handler+0xf5/0x14a0 [ 563.707569][ T39] #1: ffff8880b863a288 ((lock)){+.+.}-{3:3}, at: __radix_tree_preload+0x141/0x870 [ 563.707616][ T39] #2: ffffffff8e1c8200 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 563.707676][ T39] [ 563.707681][ T39] ============================================= [ 563.707681][ T39] [ 563.709876][ T39] NMI backtrace for cpu 0 [ 563.709896][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.709921][ T39] Tainted: [L]=SOFTLOCKUP [ 563.709928][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.709938][ T39] Call Trace: [ 563.709946][ T39] [ 563.709954][ T39] dump_stack_lvl+0xe8/0x150 [ 563.709982][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 563.710007][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.710031][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 563.710056][ T39] sys_info+0x135/0x170 [ 563.710077][ T39] watchdog+0xfd3/0x1030 [ 563.710106][ T39] ? watchdog+0x1c9/0x1030 [ 563.710132][ T39] kthread+0x388/0x470 [ 563.710157][ T39] ? __pfx_watchdog+0x10/0x10 [ 563.710177][ T39] ? __pfx_kthread+0x10/0x10 [ 563.710202][ T39] ret_from_fork+0x514/0xb70 [ 563.710226][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 563.710248][ T39] ? __switch_to+0xc79/0x1410 [ 563.710267][ T39] ? __pfx_kthread+0x10/0x10 [ 563.710293][ T39] ret_from_fork_asm+0x1a/0x30 [ 563.710329][ T39] [ 563.710336][ T39] Sending NMI from CPU 0 to CPUs 1: [ 563.710370][ C1] NMI backtrace for cpu 1 [ 563.710384][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.710406][ C1] Tainted: [L]=SOFTLOCKUP [ 563.710412][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.710421][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 563.710442][ C1] Code: e8 fe 62 7c fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df fa e5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 563.710456][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 563.710470][ C1] RAX: 1ffffffff33b8700 RBX: 00000000000003fd RCX: 0000000000000000 [ 563.710482][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 563.710491][ C1] RBP: ffffffff99dc3c50 R08: 0000000000000000 R09: 0000000000000000 [ 563.710502][ C1] R10: dffffc0000000000 R11: ffffffff854897b0 R12: dffffc0000000000 [ 563.710514][ C1] R13: 0000000000000000 R14: ffffffff99dc39c0 R15: 0000000000000000 [ 563.710525][ C1] FS: 0000000000000000(0000) GS:ffff888125dcd000(0000) knlGS:0000000000000000 [ 563.710538][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.710550][ C1] CR2: 000000110c3bf9ac CR3: 000000000dfb6000 CR4: 00000000003526f0 [ 563.710569][ C1] Call Trace: [ 563.710576][ C1] [ 563.710583][ C1] wait_for_lsr+0x1aa/0x2f0 [ 563.710604][ C1] serial8250_console_write+0x1391/0x1b90 [ 563.710629][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 563.710647][ C1] ? console_flush_one_record+0xfa/0xb90 [ 563.710670][ C1] ? console_flush_one_record+0x48f/0xb90 [ 563.710693][ C1] console_flush_one_record+0x68b/0xb90 [ 563.710716][ C1] ? console_flush_one_record+0xfa/0xb90 [ 563.710744][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 563.710766][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.710784][ C1] legacy_kthread_func+0x1b6/0x250 [ 563.710806][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 563.710826][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 563.710847][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 563.710870][ C1] kthread+0x388/0x470 [ 563.710890][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 563.710909][ C1] ? __pfx_kthread+0x10/0x10 [ 563.710930][ C1] ret_from_fork+0x514/0xb70 [ 563.710950][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 563.710967][ C1] ? __switch_to+0xc79/0x1410 [ 563.710983][ C1] ? __pfx_kthread+0x10/0x10 [ 563.711005][ C1] ret_from_fork_asm+0x1a/0x30 [ 563.711032][ C1] [ 563.712881][ T37] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 563.736852][ T37] usb 7-1: device descriptor read/8, error -71 [ 563.743060][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 563.743083][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.743105][ T39] Tainted: [L]=SOFTLOCKUP [ 563.743110][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.743119][ T39] Call Trace: [ 563.743126][ T39] [ 563.743133][ T39] vpanic+0x56c/0xa60 [ 563.743160][ T39] ? __pfx___schedule+0x10/0x10 [ 563.743184][ T39] ? __pfx_vpanic+0x10/0x10 [ 563.743212][ T39] panic+0xc5/0xd0 [ 563.743231][ T39] ? __pfx_panic+0x10/0x10 [ 563.743253][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 563.743271][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 563.743292][ T39] watchdog+0x102c/0x1030 [ 563.743314][ T39] ? watchdog+0x1c9/0x1030 [ 563.743335][ T39] kthread+0x388/0x470 [ 563.743355][ T39] ? __pfx_watchdog+0x10/0x10 [ 563.743371][ T39] ? __pfx_kthread+0x10/0x10 [ 563.743390][ T39] ret_from_fork+0x514/0xb70 [ 563.743410][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 563.743428][ T39] ? __switch_to+0xc79/0x1410 [ 563.743445][ T39] ? __pfx_kthread+0x10/0x10 [ 563.743466][ T39] ret_from_fork_asm+0x1a/0x30 [ 563.743504][ T39] [ 563.747218][ T39] Kernel Offset: disabled