last executing test programs: 9.651482881s ago: executing program 3 (id=3324): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0), 0x1, 0x8854) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0xfffe, 0x0, 0x0, 0x3}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[], 0x168}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x7, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.265347947s ago: executing program 4 (id=3331): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x100000, 0x0, 0x800}, 0x4000) 5.950199338s ago: executing program 3 (id=3335): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0x6, 0xffffffffffffffff}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r1, 0x0, 0x0, 0x2ac8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 5.84103921s ago: executing program 3 (id=3336): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) inotify_init1(0x0) socket$key(0xf, 0x3, 0x2) mbind(&(0x7f00004a4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x6, 0x6) r0 = syz_io_uring_setup(0x5c2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) shutdown(r5, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@dev, @multicast2, @multicast2}, &(0x7f00000000c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "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"/552}, 0x233) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 5.775803127s ago: executing program 4 (id=3337): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "4c5bc609e6c7daac34a4e79577c1a1cd04328de7b14fe42419f034949355897f7192490eb5a18607c9ec1a78dc17b52e840915a8891ad37149c000c20d6c9d8d", 0x37}, 0x48, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x100000001) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xabe, 0xac, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe9, 0x3}}}}}]}}]}}, 0x0) keyctl$link(0x8, r6, r6) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.217513304s ago: executing program 0 (id=3340): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x64, 0x4, 0x310, 0x100000c, 0x158, 0x0, 0xc0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x6000000, 0xe0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x8004, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 4.95944675s ago: executing program 0 (id=3342): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 4.857258211s ago: executing program 2 (id=3343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000000000097050100ffffffff95"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) 4.72839157s ago: executing program 0 (id=3344): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)="73cea34e71c3305d6e86557d07a930bfe3b63d7b1f03140231d6da531ca05d26a4515268f5523c7745029511960a8f24d7c4bf464099bdbcf0d77529e785e5b900b70b1c374cb845eb1d5da7fec520582f71bc21b56fae0d8f5f71ee2add6336", 0x60}], 0x4, &(0x7f0000000a40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)}}, {{&(0x7f0000001400)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x4, 0x40090) 4.711513985s ago: executing program 3 (id=3345): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000005c0)=0xf, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000080fe0029000500040000002b0000000000000712"], 0x30}, 0x800) 4.587753062s ago: executing program 2 (id=3346): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x6c, 0xfffffff7, 0x38415261, 0x4, 0x392e, 0x2, 0xb, 0x8, 0x0, 0x2, 0x0, 0x1}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000008c0)={0x1, 0x7, 0x1, 0x1}, 0x14) (async) r6 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x20, 0x3, 0xfffffffe}, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000001100)=""/3, &(0x7f0000001140)=0x3) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2f, 0x58, 0x85, 0x20, 0x1410, 0xa002, 0x86a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xbc, 0x5, 0x10, 0x87, [{{0x9, 0x4, 0x3, 0x8, 0x0, 0x4e, 0xd1, 0xb4}}, {{0x9, 0x4, 0x9, 0xcd, 0x0, 0xff, 0x5, 0x10, 0x3}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000300)={0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000380)=""/212, 0xd4}], &(0x7f00000002c0)=[0x0, 0x8000000000000001, 0x0]}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="78000000100001002abd7004ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="104e0600016a030058001280110001006272696467655f736c617665000000004000058004001800060002000e000000050001"], 0x78}, 0x1, 0x0, 0x0, 0x400c080}, 0x4882) 4.491738166s ago: executing program 3 (id=3347): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0xff, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x1, 0x1, 0x3, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "ada9e6963784"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x838, 0x5, 0xf3cf, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x9, 0x1, 0x1, 0x9, 0x4}, @mdlm_detail={0x94, 0x24, 0x13, 0x1, "4120d8359389b4d0335ab7e44dc5aa46c8c67515a8e0694af375cbaef3b19ddb25374362ddd8587328ede53c25566b5e30fa80cb58ba1ab6ca57f9306c2ebf103ee1b67f6c7316331d3bb69e39f6eb71e37a426235cc95c880dd06fc51eaedd0e0debc5c9095b979284db470c0022daf27e91bb319a2cee32d0d8fd2f5286cb504ca3e9d0898379e884aa50c78697e58"}, @mbim={0xc, 0x24, 0x1b, 0x40, 0xe, 0x1, 0x8, 0x4, 0x80}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8c, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x7, 0x9}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0x7, 0x2, 0x10, 0x9}, 0x2f, &(0x7f0000000180)={0x5, 0xf, 0x2f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0xb, 0x1}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x1ff, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x3, 0xfffc}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x45, 0xc}]}, 0x8, [{0xdb, &(0x7f00000002c0)=@string={0xdb, 0x3, "a005310fc52cc3a98110fd1a543f77cecf240b41ae9ea40642de377a2773f95386e67ae964694e3db2a5ca6ce605fe7d5c580dc350c74105b00ef1304818197bc475077173f0496a03fb87768bc96e9c32d0f9a2549efb9ef5ad807ea1498a5cc8805799bd52cfbeea31b26b2fbb3efb1bdb661a469c9b764b41231bb572369d515a4fd712a7ccc6a453026a07556f8ebdd8b0b421a938fa7babe64a1265fe6c3be387e06a9fa06abdfcdaa00ad2630766ce8e94079f99c651c62b990b6d6e267c3881ee02e965042f44ffd8421fc49bbaa043a561d30b91a6"}}, {0x72, &(0x7f00000001c0)=@string={0x72, 0x3, "334e87c41cd2ac14a02f38843709aec81295d5802c24449039e81d3ba3247a4f1a1397767cedebbd5fc778892c62677977d08599359d3d853c018a388f6a8d6a73940985c344379a0f888084406d47bc3c7a318de3ccd451392e1b6e015a019f7e27cb11c8cdc67e7769efcbc20ad317"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "41998f0fc268f7e6d8dc720bd3f7cd1ac2458c4039cdd38f56713fea2179d4ad8c32e14f8b70aa011e607403dff3ddfa2bc2fb9b43cc9a47e9f0772dea720aef32ef5afc3655"}}, {0x9f, &(0x7f0000000540)=@string={0x9f, 0x3, "ef2f5ec0c0783157b73607b59a84a05fe2251a31f6e095b264d55a1aa23c189ef09cffc47046c570c39cd117157670e52db04cd4e22b6069507b7ec961c01444f8c51732e61183ea438f0460bc9d411d246490e9d83a088e22dbd95f379d6ef4e0508b5eea84b6d8ba395f94423d4323a4edbfe8c831cbd1628ffc1f84f9dee0958c0bb53cf9daafcda89780cc8e6c2d9e9e0c1eabe1529f34e91cf0f9"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2401}}, {0x82, &(0x7f0000000600)=@string={0x82, 0x3, "02ec490f6793a51acd5dfd7fcaf97821ccd9459c4bba620d295d88275e335cedcf8690371bf1198b10b0d939ab513d6cff3a8d53b90a40d5a8395f2c7a77f919e64e08cd020ee2b13c45e5a4ebeb5c0b14b4be900f4f5a64677755760676a87a246bd387c0695d2ff5eacd536e40f6d3a04193d035f11d5db1b2e30462a84bc4"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0xff09, &(0x7f0000000280)=ANY=[@ANYBLOB="00160108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.381472659s ago: executing program 2 (id=3348): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) membarrier(0x10, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r4}, {r4, 0x400}], 0x2, 0x483a4) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCXONC(r0, 0x540a, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040)=""/123, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x3a41, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000000)=0x2) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) 4.347590258s ago: executing program 0 (id=3349): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300bb00400001802c0004001400010002000000ac14140f000000000000000014000a0002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'nicvf0\x00', {0x2, 0x4e21, @loopback}}) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xfe65, 0x0, 0x3, 0x2}}, 0x48) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) mmap(&(0x7f0000f77000/0x4000)=nil, 0x4000, 0x3, 0x110, 0xffffffffffffffff, 0xe5c70000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) syz_usb_connect(0x6, 0x5f, &(0x7f0000000040)=ANY=[], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) 3.920048251s ago: executing program 1 (id=3350): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = syz_io_uring_setup(0x8000890, &(0x7f0000000140)={0x0, 0xbe2f, 0x10000, 0x2, 0xbfdffffc, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x7323, 0x700, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 3.806147225s ago: executing program 1 (id=3351): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @raw32={[0x52, 0x5, 0x7]}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5, r7}, &(0x7f0000000040)=0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) writev(r4, &(0x7f0000000540)=[{&(0x7f00000000c0)='$T{', 0x3}, {&(0x7f0000000240)="3a77acfd5e3f5b9057ae6018a749450f789ba0177859fcba83592be5205aeed8b1f5e232e6a00bc47ec28687b917c513dc25d2c09e8389abf694a55a5520f963f3123c8ec23833669be46e6e925dedb89f9be55a05f02749c9f71a71c9217e0c92ae63c2dfcd48cc8bab594f7af56cfc756c6c54493e91bd4ab2e5def4c51a5fb5e1b2b537eb97a26be469fc04bbbe7837e3147a64040401d90dfdc2f56f64c7a1a990", 0xa3}, {0x0}, {&(0x7f00000003c0)="ecdb4314493f26288f76d090af6c0d6fcaee411919b3961c30d5a2e07ec8b093bb3f8772764afd0b1229872237cc35b8cdff96c75f3e343920df7c350316d02bc3873865d9599df71df4e5248f9d9294e7c2572878a1a5b36a45e7547886bcaf3d653763290da5229e061084786c5b480ebc375e5d1b8fb7ffeeb5db2998c14647a90e187c1e1f46e1985f8a9f21f34c014abf50bf5928d1", 0x98}, {&(0x7f00000004c0)="19881bab55adf869ab46d72a8c31fc47c7b4855cc4de6869c46f66cbcaed7c8e0eab69ff229da231c0fddc2ba87042f8f622ac4d3f99b35796a4ebe3c41e69541d6c417d4cc11d4f1956f94cfc044ff5a19959", 0x53}, {&(0x7f00000001c0)}], 0x6) setsockopt$inet6_tcp_int(r8, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5c}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 3.475792358s ago: executing program 2 (id=3352): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x1, 0x3, 0x9}, 0x20) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x208942, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x80105014, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x4000001a, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0xf2, 0x8}}, 0x1c}, 0x1, 0x1000000}, 0x0) syz_io_uring_setup(0x404b, &(0x7f00000008c0)={0x0, 0xed9a, 0x4000, 0x3, 0x5c}, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = open(0x0, 0x60840, 0x14) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x2d, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xac}, @call={0x85, 0x0, 0x0, 0xa5}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f45}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xfa, &(0x7f00000005c0)=""/250, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="8280", 0x2}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e22717396355a22ca2a25b914f8bf220d27f18a620c5d9c70716b98d2b7f5d069ee36231bd5567ec77bc0e087bdd9a6c16a09b5d65a0cdcf67b766", 0x50}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ff0f000028"]) 2.983743894s ago: executing program 3 (id=3353): r0 = syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r1, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f00000007c0)=@x25, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000b40)=[{0xc8, 0x84, 0x10, "6ff3d7ba20dc8eec081e123bae4cb5656a783a1db8f2e9b40efb3602ec72eb22425d99f4063b51dd2a2813903c173a5353d41669e554160fd8128e375b67171af01951b691d590f37301c88dd619d20d73172d769402ab0802cbe3357c582d9ff74bf86ed0837b20b8a914965f5f9528703525c5cbbf9daa9db3cc199c45a7fab9d5e32ac3fee84b33ad7936ecb0521656611353e2d49b70b93c43c912f2d7804ffb97e136096aa32298db630edccd9b02"}, {0x60, 0x88, 0x0, "ba25b702530d860bb8fc1aa4e38e617ec98912faf5092e95730feb535ea85291ddfc059fcf3a79ba4428cc479dae1629bf564c031ec5707f437a57a5a2d25ddad4b9c7a0a133c5a86183792373"}, {0x108, 0x118, 0x1000, "162df84c5efffcc66f7498ffb633515725efef59bb189bee8e2c6d11a49c5b4654615ba6d855cbc3f15609b751639068609a5160a2b91a0987e9a8d8df43d269071c0374b1142d1a27cf950a536e1225f275299ff14bf347e0799bb6c4707a54f6aa0fd6a6c4fde21ebdb6a8f3e7c574d681a3fa6f84ad99ddcd4271c60e4287d5be1da777226d2eb843c36a5b04946eac98ce93d4a16ac97da994ddc044e22b4624c31a497415fafcbd7d47059391b920e1410cd030833a1435218ec8ff228aa6160b7e92dac9b975d127892d17edb16e30403d2f65d464e64fb905bca20d0d407a5a970e72c8f52a4d89319b5244729c44"}, {0x1010, 0x84, 0x2, "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"}, {0x18, 0x0, 0x4, "c98bde75"}], 0x1258}, 0x800) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, &(0x7f00000000c0)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xff, 0x9, 0xe4de}, @generic={0x28, 0x10, 0x2, "496b9f5c1061a4c5fdc9fad6afb9cb23874d7b49ec347feeff1e7e6ebcc7f0f450c5024437"}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x6, 0x2, 0x4e82}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x8c, 0xfd, "aa632a8f", "cce55be2"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x5d, 0x2, 0x7, 0x2, 0x9}}}, &(0x7f0000000680)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="201552000000f17dfe10bc52f6b5fd4a93e1077b508d40c1c553b918508b2de4bda02b519af97b3846fbfaf77bfe26f4e8482764abfc538925782f5b87da8b5a850b54ce875e5612ca77904f11b6e45dc4e6f9cdc331fcca8dd4f258ca9476003fdccbced31f86ed398e1c0576"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000400)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000440)={0x40, 0xb, 0x2, "85ed"}, &(0x7f0000000480)={0x40, 0xf, 0x2}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, "3aac"}, &(0x7f0000000580)={0x40, 0x1a, 0x2}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000600)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x9}}) writev(r2, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000200)="e500", 0x2}], 0x2) 2.212512939s ago: executing program 4 (id=3354): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = dup(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r6, 0x8}, 0x8) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'geneve1\x00', 0xfffffffe}) ioctl(r3, 0x8b21, &(0x7f0000000040)) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$apparmor_exec(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000"], 0x8) sendfile(r2, r7, 0x0, 0x80001d00c0d1) execve(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) 1.521054863s ago: executing program 2 (id=3355): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 1.341032578s ago: executing program 2 (id=3356): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, 0x0, 0x10) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xe, {[@local=@item_012={0x1, 0x2, 0x0, 'K'}, @main=@item_012={0x2, 0x0, 0x8, '?M'}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_4={0x3, 0x1, 0x9, "9d06c2c2"}]}}, 0x0}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) (async, rerun: 64) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) ioctl$HIDIOCGSTRING(r3, 0x81044804, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) 943.924162ms ago: executing program 0 (id=3357): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a0001fc80000000000000050a0080ffffff000000000000060019"], 0x2c}}, 0x0) 942.328032ms ago: executing program 0 (id=3358): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000380)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x88, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x7, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "a70bad28"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6e21, 0x8, 0x6, 0x19}, [@country_functional={0x12, 0x24, 0x7, 0xaf, 0x8, [0xc, 0x5, 0x100, 0xfff, 0xc14e, 0xd7a]}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x8, 0x8001}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x8, [0x2, 0x8, 0x0, 0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xd6, 0x59, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfa, 0x0, 0xff}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xd2, 0x1, 0x6, 0x10, 0xe8}, 0x5c, &(0x7f00000000c0)={0x5, 0xf, 0x5c, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x1a5, 0xf, 0x45, [0xc0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "6682d7dadd63975e59e38fdcad484d56"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7b0158c8459a01e1d9f006ee673beb72"}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x7, 0xf, 0x0, [0xc0, 0x3f60, 0xffc000]}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0xe, &(0x7f0000000280)=@string={0xe, 0x3, "0d398c866623df4701b810a1"}}, {0xb5, &(0x7f00000002c0)=@string={0xb5, 0x3, "710877f301ca1bd86364bd0cf404a72525541d974236a5cdac15ed1d18b1c031965b01e304435e1b67f98c0a052ba7b99ba145e10540467d3e922011e5bcd1e2982cb7a063cb85b3850abb4528d2374465b119bbcf7ac783f03fdc95b9d4cbfddc6f46455f34646450cdf0bc434610d7a8468c0b7c160abad1e18f1bac91a3850fded27f5ba1754e887e5674d3301c8a8b28c206bb6f48d676d358a233ca7b90552bcde85dc2b2ca18da512e9b000e6bbf4501"}}, {0x16, &(0x7f0000000380)=@string={0x16, 0x3, "102829c45a4aa2cdf2b52c26021a30affcf03e39"}}]}) syz_usb_connect(0x3, 0xb92, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0xda, 0x35, 0x8a, 0x40, 0x19d2, 0xff66, 0xffe9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb80, 0x3, 0x4, 0x8, 0x10, 0x4, [{{0x9, 0x4, 0x13, 0x2, 0xd, 0xff, 0xff, 0xff, 0xf2, [@hid_hid={0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x404}}, @generic={0x5b, 0x21, "a98b23b485d456dc8ebfa07d7e4371cc11109cbe4a8d2329676527ea2498847d9296ced2105b5314c2f85a42fd3261c0c611ab661b7464a6be2d58c1907ce4cc14eadc92b7fafeec621e53f7efacee4a0759627162637a46c8"}], [{{0x9, 0x5, 0x8, 0x8, 0x400, 0xf1, 0x7f, 0x42, [@generic={0x6, 0x23, "59ebe3e2"}, @generic={0x102, 0xe, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x3, 0xd3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe30}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x84, 0xff, 0x5, [@generic={0x86, 0x9, "4e0cca7f9f3af4a7cd5c81938610ecc9036bd349b8f280c34a86c72e0f17e7320e39e3fa70353d27a5857a4635acb47d1e462e53509b2ec13f0b2162e45e3b639b6a2e5245afb6b71713cff1b675ed65b06ca6654ff0ddc4d286dde68861a8c4201a8dc3a1dac6d725f773d0a91a3c456581b4946a8460e6989150b2fa75e91e600a9e7b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xa2, 0x3, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x80, 0x5, [@generic={0x16, 0x1e, "8325dc5b7e5790c31b354c38cdb86069504d98e8"}, @generic={0xd7, 0x7, "652f0c4456d2ae45ae14a455e019d59097b720eb1427bf06ade3ab6c7f73ed767962057958c9ff55f5dac23b54096b922b238659acdbd2f42e963ba9509cdd5e699bcc03e83973cd4b423f5214097e4e0b9e0b729ad86ef121aec3d8bca114f31d60a16c789c61f9043eb598fa544dff5fd61f9e74cce3185a474245aa1604c3d89df96d67b10d1e35e7504fcda2ac19bb927c7018684b41b87fab5136f9081b753d08ed1dcaf3eba6fb8287265aed5ae5b9718e03a7fec1e009106c661cf58949eaecb7e223b89f2e791b60ece272a49cd046448f"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x9, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xe}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xfe, 0xe0, 0xff, [@generic={0x16, 0x7, "e6afbdc18c359125c989b61a1b7d985e439a6069"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1, 0x39, 0x0, [@generic={0x26, 0x4, "9b8e975fa9952fc77695abdeb0d8694a738f54108136a2c494224c01bb7407fb0999564e"}, @generic={0x100, 0x24, "6bc3bdaaf53c152ee4919a9d06e240e809dbef57df469f09205359f937c92771770498bcecf2d3cbbf504a5f56c583679e7537a7f8122f7e8d437d44286f3c97474e101788d14ff6a97b1d9e3cbbe1147c527a7924cced402f3852fdbd293487820f5f455fce040559b24e5c8a29281830e2b835a2f6db7b7edd27a15d1df0bf06d6939b8edad3456a3ef19574c1b871470880abca675100245741b6738e5a503c3567dc7a076937fc56aa5785fccb364e436381aca5a29a6d0faf7b0f838eec5d9378ebee6177767cb868b460b4756045ff1515e72ed4e011f147d87168f40fdc4abcd3c122e7443b7c8a5d5eb13ffb7b8d37d2e640923c49f504ee07d3"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xf8, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x101}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x8, 0x2, 0x0, [@generic={0x7, 0x11, "7dd6a58a15"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x81, 0xff, 0x8, [@generic={0xe6, 0xb, "84e30921a110ca16e411adbfc274c11c33bf89425384c54e60e0e445c273a4e3568e4177da34d407e71acdeb94769bbe891e091db2bb4cd73968d0a3486e1e642d4ec54a0c4670a66fdd3eeb0d62d3a8d1a505c7b11b83283bf516970acf3029dbf3a617efe227131732495f71039ffd6a05532ee3f17864384ca00804e03691df9b7faedd3158978e5a65e4f576dcc45e8ea905cbe249eb58bfaaf1c73c00aef6e1701f9103a294a8d0c51246988d8fc3793e36ad2797089e2c354efa60c36abfa3fe5b3a6ca7daa74ce25ec18ca6d29f7b44412630fc2d3f0ea03c34859b0217453673"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfbb}]}}]}}, {{0x9, 0x4, 0x2f, 0x2, 0x5, 0x94, 0x95, 0xd1, 0x52, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "d56b69"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xba, 0x2b6, 0x0, 0x6f}, [@acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x5343}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe0, 0xeb3b}]}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x9, 0x8, 0x8, [@generic={0x52, 0x7, "15272216e3a3bdadee8b8ae5757fb0f567aa0bffc88a68ad8e6bfb3d9312a5f3b94f56aa1873192782f4e97e4ea0334735e9d0446a1772475883ef618537d2b961f141c65a7d9abc1b7ce1f56ce1158e"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x56, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6d, 0x2}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x6, 0xff, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0xc0, 0x7e, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}, @generic={0x1a, 0x21, "b1f5d658869257c75835abee493e137b8cc5de189fd518c2"}]}}]}}, {{0x9, 0x4, 0x6, 0x7f, 0x10, 0x64, 0x5, 0xe9, 0x9, [@generic={0x62, 0xc, "e9188f7a4a933f5303cbaab951a5ad3c61ddaeb3a3a8954df826702ab9b2b412b763bc854e5bdf3e88fd7ab911d20ac2439260e1713f603c988ea9b93e2662ed1b5d39ad08468b536ddf3a7f123e5137850de2be116b98d0915f8e967cc957b8"}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x8, 0x100}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xf2, 0x3, 0x1, [@generic={0x39, 0x7, "eec93f3965be81f36936b25bb977840f25c89aa088e7eac6bdebab620fff5ddbf1dc52ff5e91fb06bd0d5a466a5e319ddc6b09c8933fc0"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x238, 0x5, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfffd}, @generic={0xbf, 0xb, "7ba9d3a8bdffbd4136040ecc4aa757e8c5bcaef88036d2e07f3912a08948777d1445a42943f596736148ef865ab8d5226478feb767a46525f811c9319726b019d8503d3dd0cdaffd28eaa32577898cacab45151eef106dcab7fc02e7b6489608d38e52fbf1d8fe53002400475608b09ba0902013a4a6e08cc6a84ab4f36779e265f52bb56542aaf12aa061647151cc0bbb79c1693744f8df12d004cf092a219d63ef68ff826dee18c641042c4db70a5fcc3a78d5210cb038b7cae5df14"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x3, 0x3, 0x1, [@generic={0x3a, 0x10, "5b3544ada27e310644a630341d00cf44cb9bf0e09b06630b277de1c3f562fdefbb48dadd0a2a22ccc3304717b315ebd38d5a711274a5f389"}, @generic={0x64, 0x22, "c0cb8bf81573e01a84dfe9850f0bbefee34fa5e3b1d09bf6f7cce50c43019ef710f5b8dbea33dad0da9c2ff7427967e7ba062886656ac2ed15948f0ade43327ef26ce02f22a584cce86df196802f62162c168344da6170f092efa8d2e5bb9e428f0b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x3, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x81a7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x3, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfffc}]}}, {{0x9, 0x5, 0x7, 0xa85b5011d64469e1, 0x3ff, 0x3, 0x0, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x5, 0xe, 0xf, [@generic={0x28, 0xe, "796b4124b19f044f03536281a4571f72eb4c0fa4bac46abd69788f37bdec77d09bf22afe283e"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0xfd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x138, 0x81, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xf14f}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x7, 0x9, 0xfd, [@generic={0x32, 0x23, "843780e4e934702740636ca7d008c156f09d991b4ed4037a2ab3de5c68278afe8ea92f72cf1793c9bc0b345dbfd96916"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x8, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0x400}, @generic={0xed, 0x4, "5bc7895b01b11ad5697b9ee39dcfca2b246b7b4bb116d0e43d5b5d4e0878e87730d6e2aefbf09c7f36932a7d3e4af680318bb838fd801cdb85bac9c52a6c309953d080b9b3510ab34cba44f6ced28acee65d20b92c60b3a98b1bb63a5778fd9b18aae53a83023eb054e73439e04f608acf3c79b083edfa5b70a9894d0a9ea8ba1413ee6cdbb8aaddf3f4e5d76d271d01033261899dfb667ceff35b3f7cdc2b6faafa0b88f788585ebae46df3e3ee4e3aa29254b08e6cf9c9a28f1496232b958bbdc2423770aa25287f5ae5d6e2f51a93560eb95d1744be166c7c40e30224d77450f786a8b0c83cd13fecb7"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x45, 0x8c, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x401}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x8, 0x80, 0x5, [@generic={0x61, 0xb5ed5f4554ff8d5e, "ea419da381820283c24a53383e0f72f89b931c53d43502dc46411e6b7550eb3a948d335c1c7aa77e325add88e6b74df3ac044fb2de38e43f81086fc4a50ffbeb851f7c53744a50fa78b716e3a6c8f389fc3b4452d2e56a3a27180c4c72abfb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x4, 0x4, [@generic={0x57, 0xf, "c53212cf122ff3c8988d5988a268efcd8bf1c2cb7de7d349175e8f47aab772dcfd53fd697be1ff63abf28d70a81da556858422e357a9a08be6ef5ad794080dc30db82058ca9388af183751c05081b87a2cd9ee49cc"}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x80, 0x7, 0x9, 0xb7ef24e6b0f160ba, 0x7}, 0x2b, &(0x7f0000001100)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x6, 0xb, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c0b19fd7682bbd4f169739e635bfc6db"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x4, 0x1ba0}]}, 0x8, [{0x3e, &(0x7f0000001140)=@string={0x3e, 0x3, "6979cd6c6662e0333a13d67255cb1f40bcbc8ca0994adaf2619a12a6d332fcf153fe8f9a55e801abc353ff294e394116a6924111aae29fe02ea63692"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x5a, &(0x7f0000001200)=@string={0x5a, 0x3, "76487b539e4dcced854814008090aadbdf02ff46cb5d4ebb835748669f0dd1e6378d5252a84be8e47b164438ef1b26ba765103b5e4f8bf4096929ceaa48a8ddd0194d3d0812a64921831dfeb40be32227b507fa9d768fa6b"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x3009}}, {0x2c, &(0x7f00000012c0)=@string={0x2c, 0x3, "2227579341358ad71765ea7ea86e79c8dd924a4e400783453a66569e0de82f918382dd60244df750f48d"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x413}}, {0x2, &(0x7f0000001340)=@string={0x1}}]}) (async) r2 = syz_usb_connect(0x3, 0xb92, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0xda, 0x35, 0x8a, 0x40, 0x19d2, 0xff66, 0xffe9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb80, 0x3, 0x4, 0x8, 0x10, 0x4, [{{0x9, 0x4, 0x13, 0x2, 0xd, 0xff, 0xff, 0xff, 0xf2, [@hid_hid={0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x404}}, @generic={0x5b, 0x21, "a98b23b485d456dc8ebfa07d7e4371cc11109cbe4a8d2329676527ea2498847d9296ced2105b5314c2f85a42fd3261c0c611ab661b7464a6be2d58c1907ce4cc14eadc92b7fafeec621e53f7efacee4a0759627162637a46c8"}], [{{0x9, 0x5, 0x8, 0x8, 0x400, 0xf1, 0x7f, 0x42, [@generic={0x6, 0x23, "59ebe3e2"}, @generic={0x102, 0xe, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x3, 0xd3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe30}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x84, 0xff, 0x5, [@generic={0x86, 0x9, "4e0cca7f9f3af4a7cd5c81938610ecc9036bd349b8f280c34a86c72e0f17e7320e39e3fa70353d27a5857a4635acb47d1e462e53509b2ec13f0b2162e45e3b639b6a2e5245afb6b71713cff1b675ed65b06ca6654ff0ddc4d286dde68861a8c4201a8dc3a1dac6d725f773d0a91a3c456581b4946a8460e6989150b2fa75e91e600a9e7b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xa2, 0x3, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x2, 0x80, 0x5, [@generic={0x16, 0x1e, "8325dc5b7e5790c31b354c38cdb86069504d98e8"}, @generic={0xd7, 0x7, "652f0c4456d2ae45ae14a455e019d59097b720eb1427bf06ade3ab6c7f73ed767962057958c9ff55f5dac23b54096b922b238659acdbd2f42e963ba9509cdd5e699bcc03e83973cd4b423f5214097e4e0b9e0b729ad86ef121aec3d8bca114f31d60a16c789c61f9043eb598fa544dff5fd61f9e74cce3185a474245aa1604c3d89df96d67b10d1e35e7504fcda2ac19bb927c7018684b41b87fab5136f9081b753d08ed1dcaf3eba6fb8287265aed5ae5b9718e03a7fec1e009106c661cf58949eaecb7e223b89f2e791b60ece272a49cd046448f"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x9, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xe}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xfe, 0xe0, 0xff, [@generic={0x16, 0x7, "e6afbdc18c359125c989b61a1b7d985e439a6069"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x1, 0x39, 0x0, [@generic={0x26, 0x4, "9b8e975fa9952fc77695abdeb0d8694a738f54108136a2c494224c01bb7407fb0999564e"}, @generic={0x100, 0x24, "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"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xf8, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x101}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x8, 0x2, 0x0, [@generic={0x7, 0x11, "7dd6a58a15"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x81, 0xff, 0x8, [@generic={0xe6, 0xb, "84e30921a110ca16e411adbfc274c11c33bf89425384c54e60e0e445c273a4e3568e4177da34d407e71acdeb94769bbe891e091db2bb4cd73968d0a3486e1e642d4ec54a0c4670a66fdd3eeb0d62d3a8d1a505c7b11b83283bf516970acf3029dbf3a617efe227131732495f71039ffd6a05532ee3f17864384ca00804e03691df9b7faedd3158978e5a65e4f576dcc45e8ea905cbe249eb58bfaaf1c73c00aef6e1701f9103a294a8d0c51246988d8fc3793e36ad2797089e2c354efa60c36abfa3fe5b3a6ca7daa74ce25ec18ca6d29f7b44412630fc2d3f0ea03c34859b0217453673"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfbb}]}}]}}, {{0x9, 0x4, 0x2f, 0x2, 0x5, 0x94, 0x95, 0xd1, 0x52, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "d56b69"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xba, 0x2b6, 0x0, 0x6f}, [@acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x5343}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe0, 0xeb3b}]}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x9, 0x8, 0x8, [@generic={0x52, 0x7, "15272216e3a3bdadee8b8ae5757fb0f567aa0bffc88a68ad8e6bfb3d9312a5f3b94f56aa1873192782f4e97e4ea0334735e9d0446a1772475883ef618537d2b961f141c65a7d9abc1b7ce1f56ce1158e"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x56, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6d, 0x2}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x6, 0xff, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0xc0, 0x7e, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}, @generic={0x1a, 0x21, "b1f5d658869257c75835abee493e137b8cc5de189fd518c2"}]}}]}}, {{0x9, 0x4, 0x6, 0x7f, 0x10, 0x64, 0x5, 0xe9, 0x9, [@generic={0x62, 0xc, "e9188f7a4a933f5303cbaab951a5ad3c61ddaeb3a3a8954df826702ab9b2b412b763bc854e5bdf3e88fd7ab911d20ac2439260e1713f603c988ea9b93e2662ed1b5d39ad08468b536ddf3a7f123e5137850de2be116b98d0915f8e967cc957b8"}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x8, 0x100}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xf2, 0x3, 0x1, [@generic={0x39, 0x7, "eec93f3965be81f36936b25bb977840f25c89aa088e7eac6bdebab620fff5ddbf1dc52ff5e91fb06bd0d5a466a5e319ddc6b09c8933fc0"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x238, 0x5, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfffd}, @generic={0xbf, 0xb, "7ba9d3a8bdffbd4136040ecc4aa757e8c5bcaef88036d2e07f3912a08948777d1445a42943f596736148ef865ab8d5226478feb767a46525f811c9319726b019d8503d3dd0cdaffd28eaa32577898cacab45151eef106dcab7fc02e7b6489608d38e52fbf1d8fe53002400475608b09ba0902013a4a6e08cc6a84ab4f36779e265f52bb56542aaf12aa061647151cc0bbb79c1693744f8df12d004cf092a219d63ef68ff826dee18c641042c4db70a5fcc3a78d5210cb038b7cae5df14"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x3, 0x3, 0x1, [@generic={0x3a, 0x10, "5b3544ada27e310644a630341d00cf44cb9bf0e09b06630b277de1c3f562fdefbb48dadd0a2a22ccc3304717b315ebd38d5a711274a5f389"}, @generic={0x64, 0x22, "c0cb8bf81573e01a84dfe9850f0bbefee34fa5e3b1d09bf6f7cce50c43019ef710f5b8dbea33dad0da9c2ff7427967e7ba062886656ac2ed15948f0ade43327ef26ce02f22a584cce86df196802f62162c168344da6170f092efa8d2e5bb9e428f0b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x3, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x81a7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x3, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfffc}]}}, {{0x9, 0x5, 0x7, 0xa85b5011d64469e1, 0x3ff, 0x3, 0x0, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x5, 0xe, 0xf, [@generic={0x28, 0xe, "796b4124b19f044f03536281a4571f72eb4c0fa4bac46abd69788f37bdec77d09bf22afe283e"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0xfd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x138, 0x81, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xf14f}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x7, 0x9, 0xfd, [@generic={0x32, 0x23, "843780e4e934702740636ca7d008c156f09d991b4ed4037a2ab3de5c68278afe8ea92f72cf1793c9bc0b345dbfd96916"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x8, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0x400}, @generic={0xed, 0x4, "5bc7895b01b11ad5697b9ee39dcfca2b246b7b4bb116d0e43d5b5d4e0878e87730d6e2aefbf09c7f36932a7d3e4af680318bb838fd801cdb85bac9c52a6c309953d080b9b3510ab34cba44f6ced28acee65d20b92c60b3a98b1bb63a5778fd9b18aae53a83023eb054e73439e04f608acf3c79b083edfa5b70a9894d0a9ea8ba1413ee6cdbb8aaddf3f4e5d76d271d01033261899dfb667ceff35b3f7cdc2b6faafa0b88f788585ebae46df3e3ee4e3aa29254b08e6cf9c9a28f1496232b958bbdc2423770aa25287f5ae5d6e2f51a93560eb95d1744be166c7c40e30224d77450f786a8b0c83cd13fecb7"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x45, 0x8c, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x401}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x8, 0x80, 0x5, [@generic={0x61, 0xb5ed5f4554ff8d5e, "ea419da381820283c24a53383e0f72f89b931c53d43502dc46411e6b7550eb3a948d335c1c7aa77e325add88e6b74df3ac044fb2de38e43f81086fc4a50ffbeb851f7c53744a50fa78b716e3a6c8f389fc3b4452d2e56a3a27180c4c72abfb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x4, 0x4, [@generic={0x57, 0xf, "c53212cf122ff3c8988d5988a268efcd8bf1c2cb7de7d349175e8f47aab772dcfd53fd697be1ff63abf28d70a81da556858422e357a9a08be6ef5ad794080dc30db82058ca9388af183751c05081b87a2cd9ee49cc"}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x80, 0x7, 0x9, 0xb7ef24e6b0f160ba, 0x7}, 0x2b, &(0x7f0000001100)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x6, 0xb, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c0b19fd7682bbd4f169739e635bfc6db"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0x4, 0x1ba0}]}, 0x8, [{0x3e, &(0x7f0000001140)=@string={0x3e, 0x3, "6979cd6c6662e0333a13d67255cb1f40bcbc8ca0994adaf2619a12a6d332fcf153fe8f9a55e801abc353ff294e394116a6924111aae29fe02ea63692"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x5a, &(0x7f0000001200)=@string={0x5a, 0x3, "76487b539e4dcced854814008090aadbdf02ff46cb5d4ebb835748669f0dd1e6378d5252a84be8e47b164438ef1b26ba765103b5e4f8bf4096929ceaa48a8ddd0194d3d0812a64921831dfeb40be32227b507fa9d768fa6b"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x3009}}, {0x2c, &(0x7f00000012c0)=@string={0x2c, 0x3, "2227579341358ad71765ea7ea86e79c8dd924a4e400783453a66569e0de82f918382dd60244df750f48d"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x413}}, {0x2, &(0x7f0000001340)=@string={0x1}}]}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000140)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000140)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) 651.725153ms ago: executing program 1 (id=3359): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)="73cea34e71c3305d6e86557d07a930bfe3b63d7b1f03140231d6da531ca05d26a4515268f5523c7745029511960a8f24d7c4bf464099bdbcf0d77529e785e5b900b70b1c374cb845eb1d5da7fec520582f71bc21b56fae0d8f5f71ee2add6336", 0x60}], 0x4, &(0x7f0000000a40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)}}, {{&(0x7f0000001400)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x4, 0x40090) 537.735793ms ago: executing program 4 (id=3360): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000400)={0x200000, 0x200003, 0x0, 0x0, 0x7}) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140), 0x0, 0x5) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=[{0x810, 0xff, 0xb, "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"}, {0x18, 0x118, 0x6, 'h=|d\r]'}, {0x10, 0x111, 0xfffffffb}, {0x40, 0x114, 0x0, "5aedb43d2682243fdf597d52b12d9b92a858c78807967fb125dec2142378b641404e051f8059868fd6de8813b18576d2"}, {0xe8, 0x102, 0x8, "ff7ae18ffbdabfc1aa3afdc182c133996845007fc4474f0c9699dfdd27b0441f2fada716ead692e97ebab865a229dc5f18cd1b1c481b48d7e08f8a2437c0bc34bd6fe4f9788d337c403c80e830f7719a492f36ec4d290f690bc8e3465c350ff1faa71bb973e51ef3fb289a6513f1ad67d939ba270e9c2d5a9a2bd21982d51fc2f0de65b7d18d0811300873e5bf23b082b72f80a59a8b37c92bc03ef478d8f342fa8c44873ae6ddde6fc4103abd84c710d952616aa582963c4fdd259da2f2700b2ed8b65893f9adcd9a8af7f6d0747ca0120aac"}, {0x1010, 0xd, 0xd77, "3cf2a4c1a9e63e41a6fc5a3ae6a89533ace8d2c8080c7e816022aca1493003eb5621ee8cda3c929fd5bc311e7d983f8796edc6e8128c4b28bbcba6517df0684bb3f28725dbcd4b7e2a9cf03c99908aee7464f0e7f735c9b0870c362bf939d95afc40a8ca125a45c135e0cef0c8941801c8ef88d427201df61831c3f37b9203da4ecd0302b728bf14e0644c13e6222278e9f8620406831d2a5b3b95ad9762174ec4b52d94ab4a1d72cdd84a1eb4f1c944534905ad53a94a3e849607795019b4c369304c58e5d92d2d9255df425835174281932b9bb855b1d9eaee5e162dee4746188c7be05ba6ce5f82ed885d75cc2c5af00e43a136e9684c9ec786f47801e8bcd75d762fdaeb25d5ed2ddd37ee7b7f51724d818d3d6f3881a7cf23f950e68997e98174e17b28961dca1318329dfc30ae96ba52ed10eef401fd468d2fa07ec89a744a2bec6b37cb2a82391d577f188310a37b7b8ebc5a7e705cedb114b54fd2cb3d798470417dc5a08e0f1fe8b06f0bbb9d9186082b93f5b794355ab080c46ed7c2722a8695aae1508f8077c3733fd952e7e566e2e0ded803340f11f429d1f8b56268b31b69a9acf9897408b0cadf7e6025a444b8b8e30bd9a78b472e182c7ffcc09485869583a1bbd9cec63e659d42c32c75f9309e410e3c1e8cfdfbfbcc1b36367dbcc601cb475e40c428193d3c8b75a1b2b74efade7ced2172cbed144759346c2016b787f50d19ce55f70799138c2085021eb42452c31818e8b922bf29625c2fe21291c8faf4ff9180228564f6691fd3385f997e1e1a0628f9eccf8b31f5dd7b304449e3e16270a20f503ad1348ded9575725835e39c197fd077a5cfb329bf03483c2474fb9b246db72797bc4a837eb30f418d7dbfff25c23bb16819b35b62dc8b1e6145be33ca73c553d849c04c04c5885b3c12e1d39d1c35d2f4b4db8b8d456e0b42af2b5d02a0254caa84b4bf6c1a5250aa5033593306c09f01eaa33a7aa0ce6f5712fda440ba767c10c2302d48ec4869ada6b379b9ed9cc241d1687790912f77b0585e56efa06b9fe41d1e45052e9981c2491ff5a29ad671bf7b558a4f2acf46629917504ac66b917fdfdd8bad7e72cd6a61d23392afd6cf47204dd6f650d25b038e517f556ef82a1258d76be3f05a7dcae679d4deedf0974f73ac3d81ab4e19ba404c7d9cf3b056629bb78ce6ebbfd27b334c2d01382803c93bbaf1654b0ba44c435ab98a465d0866204e049b0d84d57994ad7c42f491b0777e46e16c0028f0bdb513dcc939db6d4e654962f11c2e792e4f3ac0301001f5f457125ac14ff074c674dd0c55d73a8d510d37ec2f08c1fcc79c2d9cbaef513901fa567ffde59fc3912815d3e84325a84f71f65fd80c27d79beb07b539761527fdd53008f0bb16cffe588804093a655f3581aabb5e76f812578f30618afeb25fc9b515d4a76de1b4eb6bf5197f16a3873c9ffab5b0f46f87fe45a4f0f8d50e99a9ac5fda4c4104f863ed028e0d61751434e56211036b4902f9449d8d9ee26bf325de730da260ac207f952ed814a21509d48cff21de33639d1398bc3a9e0ebf9e6aaaf5ebf807017659704065fc5630309dddc7db766769c0c99f0773d272007fc78f82aa337d1f169e7488ac0ec31616146ee765b5a55fc26fdbcf1905c226aaf8805b26de2161785c0fb2ab623f613bc729e4ffef36c149aaaa10f68b254edf5c0537f7ef7745e671c338520a7116e9f64b7ed4320d272c4050283b9623f48ec203cc583c632a881c591ed228ffc9ed70bd2135cd791653e1e02b26203f0c5a13100c3801cc813ac283ec3302af4b5de47e7582eef9bd8c051fc5291f3fb6a471dfd975557e63c799fceae5ab6e521f5cd9daa7c795aab29e1667bc7caa23b7e59d5cf3a333e3f95b589a8c2e0a824f104323783c3be26f6a9e8bd072eb14d48529164e4cad7ac5362be907010aa03e7e4835a26a6bd46bd82ba3d315d2257850ebb3bd2c49c36c4e1a1f5ce1ca9c12d89ffb669a8efbe9fc1748669afe5a668ac1ab691103bf1902bc586c0db6198846af0c41119df3dcaba93db3e38b432b76821a4a4afadb0e8c05639a3de92db4ffaa0ad205734dbe7a1e3f7a479c228e683c2dead55afde4e1542df174719143f40b66bd756bdc59d8571a4ee22af5bd448217e284bdeddcc7bfec81fd5acc5e674bfc3b40c3c949d7f020a62254e94c573afd72678dbd4eb51af3ae6c44e80516673fb1817d55feb2a1b1235bc0954ff48de1ca62dd64a90a271b71f6e10958389059ba6a9b463b888bb9258be0694b052617cbe61eefcedb5fb70ae7157250747fdfc643bc35790bda1be1dd0fa449ebdd2281e46e633859dbbab1348be75a5db3fcb729754cbcb1eca8be3e4dbdc1f14bac9dc747af7a7f2af05d09af082ff289e28a9d74a0d2b1bff7f77bcc5483323b9b054812144d4dec0e390a14bce1083e5e91b1b3bba4ad9478350d3e69f54382553e50248aeb3302cb4e3e5eb237fc50a2e290341c6dc0b16e32b49b1c89c34f3144dfd7e339688a027d8e4465bde62982071846069886d8b678a74b3a29639f42ebb285a93a0c0f422b18393ddf98d50f2f7f8fbafd9fdd5689d260d3aa09e3c07b15ac057258d173da2325ad050c16c2af4379314589364d3bb0033b1d6844c85b86ebd608be75bebcd5d63e4ec97ba806c5a3abf5eea188d6499dbae4304df43444a683cf75f6c0c64f2f2e0023c585e9168e20024fc097365b5742ccf8b9a7a0eb0c6fa7144b78d6c8c19dce0514c4e8d8a9b619190bfb62481d848d5808d82f37173ad7fd9bc6f8011b0bd3cc68dd05701d7eec79f0bf230b2f8c0cccbcfc8ada742009beccf05affa95041943ee8efcc4c0e86027c69654c98c43df8a8b9b3e64f4d1f29191d7be8cd246238d09143e2d2b48fe2a53ee509d26fdc3f0173cd02f354939dea72f362d5003ad36e72475fff4424594c8a8ac73ac8a51bc6c0e48a7d749b51cccfcbfb63a4c7b56fa136e6f206ddc97320560418e3f28824f9476d3156f80576b84b967c61a3696580091e4f35aef8df1ce110be239688c7ee109482f2600fe14ff51b31a3d14b6fff76b19aa5367027191c87e47e238d0590e8c77b382b2a6a318e1765af7a5d5174113c3247f833ce7104b7310ca3f51ddfaa07c8789179d115e378ba6ef80c37cf1beb6d9146b1197ca308a664f6b1efeac274d456d7c833a2f4aff28aeac0c97325002631d1f5668a2fa8bd6b418d41dcb0377cc78eb1f2da721554c7b7c7db3256288722ffde201098483d51579dd4d5d956f720017bf1df48fac5b3771a9e922581bd98022715208031cbca44bc29acc26ce9eb7827249ac8e87a72c5f5bda85119a7eb344dbfff846617ed6817e7b3800dc92b6f68ccf1ae9a6ad5ca1c0b2c118d74c9ddd1bbee5f97d0a6c542ac50328fc88a41be3b0a341a4d9ebc6c98f76ea04e80923e656a2256eedcacb40ceb1423b70cfe07e4023d4134ea8b3a50b4d461f8c0c16277a6e292538318be25adfbfd123a066ef18a46dbf57fd61e9d23a54db2bd663302a75f80339f9f46006c14c26f3c073c72e0ccd237a688bc36d9015095d6a5986069fd4bf1bf82a467695f326fcd461d6e3c52f0458c7156512ab45aed95e099ad55229099e220c09f0a6a6e625e1f9aa41912b353101dbf7bd946f7d4e499f23b15ea7887d27f3316286d9aa1c756ce18702029820d5f83a518790f7b70edf4908ae761acb76a6daf718ea066c6144e6a3be8528a7a2638a82b9653c2590e15a6b2fa810a4615cb8fd82e05e20867c743af5035970a7934b4f4b032d4ede38e48c5d16fe3f3b9822d7d82ec14ead15f0e306686fab6921c5542d1062994d671283b0755252773b033972106b7f1c5381ac33c5ff3f7ec7d3e2fcb4b32c033e68ad39b05fe8c089e0caeb7274013cd4882f7c3912404ea0f45771eae68a6ad2e568e67b0515b348d4d1fa07c88c10010caee8162fb6b1cd31879a591796800158e72f484fde8818e36fb317dd27f0eb1af90ceddfe92ee588fbbf6d7ffa81039174822b9184ac10da93d4d1a4dacaccd942fc4dd03719249a73c2893cc72bdbc594818dd95c49aa05f5550f5d60a22e0ce029f3c29647e46a0069916c266a5355e028325a3e118fa0e81818d73c3d400f4efacc0358160b35eb559eb9de4307ce7c3e11c00dcc7a2e077609a1d4c14082811ae4be1a8e9772b7e9629d74937915e92977d7363cd79d0d6509b3298fca262d7d5712bef437edd442595d094c281267a5a0d05b93a99ce71be94d5747e6ff0beede9a3bbf8a1957b4e06a7d25233b3a54db16dd1b9f7fa599ad6bb66ad923193d09c9bdd9585412181993d4a2378b6ac80d4e6132a42811476b8cc80d6f2a0d54eea04d4071fb1db49e33a39b310590e11027c9dd8efc5a37d661406e5821ae31a595fa006f8e6aa8ee3f1f3450c36927bb59c8515fab2076e9861138f2bf9ac395e6a061bebca14af3e8bb7a3d036f193391e49241e510a75fb74e200494f71b6d636c1a094d3547956710db61015df683392b5b577dbcb50fbb3f4b348ed07ed63295f5f6dbb5a87dc0b0b41a4920f735b034c1699e8ba1efdefec97a1cd47e421f7999c75a5662912f441ada3545d58e0b740bbd3570b4a079d375c063077aff2177fedef8d7fa49381b902c735c22dd1dc5d3d251f176763f079316064192b4768ffed0f3acc60c46a92d8d5cd38e8f6c40f8ec81d6227388a02833e3bf30b74ccd39069724c5fa879006660c53bda4d760d7214ce690389f6088135071c9f350767ac1e66e352e60cc1353b1181946cb4942d5417862717a4f1030ffbb8f57621b9592e735898e70062291d9eee313646eb9451e6fc9182be9a68526005cf91cb0ca2b3d947e275a4841b1791712ace21f7ce4ad1216ec6031dda4b3fd9bc6ba424fe5db3045f1d6d70b10d9105e58228c300bec20b505de62eec10a7324c9cbf8192b69f81d0e0639422f6a4506c88020f93aaf726f39dd6c941a293011d8d6218f41989b1f7e8eccdb443ca1194afcedf21ce67ee19c2df96c22bd9e30e0e79c6d468a3b6413eac270b90f3fb979eab3579bde58a67935d67353aada3a913e5078e6b0d42f8f7cd4d84a9b89600112d066c5fdb30e1341df86f571fb3257e086eaf088f1c70aa5c493b34da55ce0c06c05fa67701b90d4cba5367cee21e2f4a49196f7598206462c76ababc7b8ddb8a4bfcda42e9106568d755c9f3ecd8360b4e0b462d2fe0ccbb71abc26171074b2fa4fc675757adf67c8a0635fbaccb8a6f28efb5f5600460ba482911ddbb8f59f0ba1eb164219cc030fd9baabaca644f8943afcbd2724adb148afe23023b6b6ae6e39fe3c0147d44c264de71685a27a24aa3a367ff707d65ab8dd95681fb34af43178fcfe4d9acaadc9f16a14bb775bd0f2d4cdd28eeca25ce213b543b4d3e115a8f5fbd22c1b3312a44c9d8d7d81c8e3747aa1e230f9d5cd50a0b899705836154a0dbe577574a952e2953b421678818901bf6f9de7fc363ee1fbfa41a4c8402db4694ce20f78060238da99f4d069d360cf4d09972d8c624a02490219fb7d8e23ed91136d19dd1aa67e505a6aec8f059ae1ab56e27a1928965cf371b05cd394e447e62d9b030b9d7d43da6b2df01a70eb3dbc2634ba93dbab8b1c518b78f197f1f9c7c073b1c78a851be5824c9d231b01349e99109fd099c23591b3a99eb01aa3a1d9596c764f508757ddd5e28d1cc37778897792ba28922c8de7c70e39329489a19ee75886e3780"}], 0x1970}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x15, 0x2, 0x0, 0x401, 0x8001, 0x1404}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$vim2m(&(0x7f0000000280), 0x72a, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r8, r9, 0x2, 0x0, 0x1, 0x804, {0x1, 0x200, 0x4, 0x69, 0x6, 0x200, 0x8001, 0x5, 0x412d, 0x4, 0xd, 0x7f, 0x400008, 0xfd, "fe1d00003413000000100020b400008effffff000000000000000000000900"}}) 475.186899ms ago: executing program 1 (id=3361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00000001040300000000fffffff00005000003050001000200000008000340000000100a000200000000060200000005000100010000000600064000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004010}, 0xc044) 315.820015ms ago: executing program 4 (id=3362): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000008c0)="73cea34e71c3305d6e86557d07a930bfe3b63d7b1f03140231d6da531ca05d26a4515268f5523c7745029511960a8f24d7c4bf464099bdbcf0d77529e785e5b900b70b1c374cb845eb1d5da7fec520582f71bc21b56fae0d8f5f71ee2add6336a26a3b", 0x63}], 0x4, &(0x7f0000000a40), 0x0, 0xf00}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000001380)}}, {{&(0x7f0000001400)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}], 0x4, 0x40090) 241.843465ms ago: executing program 1 (id=3363): socket(0xa, 0x5, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000ffff0000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 194.186779ms ago: executing program 4 (id=3364): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "4c5bc609e6c7daac34a4e79577c1a1cd04328de7b14fe42419f034949355897f7192490eb5a18607c9ec1a78dc17b52e840915a8891ad37149c000c20d6c9d8d", 0x37}, 0x48, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x100000001) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xabe, 0xac, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe9, 0x3}}}}}]}}]}}, 0x0) keyctl$link(0x8, r6, r6) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x18000000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=3365): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000100000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1: SerialNumber: syz [ 805.155909][ T5848] usb 1-1: config 0 descriptor?? [ 805.171485][T16024] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 806.808337][ T5857] Bluetooth: hci3: command tx timeout [ 806.960976][T16027] chnl_net:caif_netlink_parms(): no params data found [ 807.015366][ T59] dummy0: left allmulticast mode [ 807.087929][ T59] bridge0: port 1(dummy0) entered disabled state [ 807.252811][ T5848] usb 1-1: USB disconnect, device number 16 [ 807.926369][ T59] batman_adv: batadv0: Removing interface: vxlan0 [ 807.979598][ T59] bridge0 (unregistering): left promiscuous mode [ 808.141084][T16061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.153670][T16061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.532209][ T59] bond0 (unregistering): Released all slaves [ 808.660177][ T59] bond1 (unregistering): Released all slaves [ 808.677291][ T59] bond2 (unregistering): Released all slaves [ 808.738359][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.744767][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.956945][ T5857] Bluetooth: hci3: command tx timeout [ 809.003885][ T59] bond3 (unregistering): Released all slaves [ 809.254440][T16065] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2824'. [ 809.628648][T16027] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.653034][T16027] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.660781][T16027] bridge_slave_0: entered allmulticast mode [ 809.671888][T16027] bridge_slave_0: entered promiscuous mode [ 809.706545][T16027] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.718606][T16027] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.725855][T16027] bridge_slave_1: entered allmulticast mode [ 809.740901][T16027] bridge_slave_1: entered promiscuous mode [ 809.771741][T16075] vlan0: entered promiscuous mode [ 809.872535][T16027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.915654][ T59] hsr_slave_0: left promiscuous mode [ 809.926838][ T59] hsr_slave_1: left promiscuous mode [ 809.954531][ T43] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 809.962658][ T59] pimreg (unregistering): left allmulticast mode [ 810.121515][ T59] pim6reg (unregistering): left allmulticast mode [ 810.187601][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 810.195190][ T43] usb 3-1: config 7 has an invalid interface number: 123 but max is 0 [ 810.205952][ T43] usb 3-1: config 7 has no interface number 0 [ 810.240982][ T43] usb 3-1: config 7 interface 123 has no altsetting 0 [ 810.255161][ T43] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 810.265318][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.311123][ T43] usb 3-1: Product: syz [ 810.316448][ T43] usb 3-1: Manufacturer: syz [ 810.321336][ T43] usb 3-1: SerialNumber: syz [ 810.539841][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.548728][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.573810][ T43] kvaser_usb 3-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 810.599365][ T43] usb 3-1: USB disconnect, device number 122 [ 810.969274][ T5857] Bluetooth: hci3: command tx timeout [ 811.192339][T16087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.201721][T16087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.216297][T16087] input: syz1 as /devices/virtual/input/input64 [ 811.322108][T16087] input: syz1 as /devices/virtual/input/input63 [ 812.466960][T16027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.760926][T16027] team0: Port device team_slave_0 added [ 812.834483][T16027] team0: Port device team_slave_1 added [ 812.967060][T16106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2833'. [ 813.035974][T16027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.044994][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.079901][ T5857] Bluetooth: hci3: command tx timeout [ 813.110135][T16027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.135787][ T59] IPVS: stop unused estimator thread 0... [ 813.142552][T16027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.151607][T16027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.177558][ C1] vkms_vblank_simulate: vblank timer overrun [ 813.184655][T16027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.401582][T16027] hsr_slave_0: entered promiscuous mode [ 813.415177][T16027] hsr_slave_1: entered promiscuous mode [ 813.502025][T16122] FAULT_INJECTION: forcing a failure. [ 813.502025][T16122] name failslab, interval 1, probability 0, space 0, times 0 [ 813.515376][T16122] CPU: 0 UID: 0 PID: 16122 Comm: syz.1.2837 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 813.515401][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.515414][T16122] Call Trace: [ 813.515423][T16122] [ 813.515431][T16122] dump_stack_lvl+0x189/0x250 [ 813.515460][T16122] ? __pfx____ratelimit+0x10/0x10 [ 813.515482][T16122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.515505][T16122] ? __pfx__printk+0x10/0x10 [ 813.515534][T16122] ? look_up_lock_class+0x74/0x170 [ 813.515561][T16122] should_fail_ex+0x414/0x560 [ 813.515586][T16122] should_failslab+0xa8/0x100 [ 813.515617][T16122] __kmalloc_noprof+0xcb/0x4f0 [ 813.515643][T16122] ? io_alloc_ocqe+0x6f/0x550 [ 813.515667][T16122] io_alloc_ocqe+0x6f/0x550 [ 813.515685][T16122] ? io_cqe_cache_refill+0x1a8/0x240 [ 813.515721][T16122] io_cqe_overflow_locked+0x26/0x40 [ 813.515745][T16122] __io_submit_flush_completions+0x248/0xe40 [ 813.515789][T16122] io_submit_sqes+0x181b/0x1c50 [ 813.515848][T16122] __se_sys_io_uring_enter+0x2df/0x2b20 [ 813.515886][T16122] ? ksys_write+0x1cb/0x250 [ 813.515914][T16122] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 813.515931][T16122] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 813.515953][T16122] ? __pfx_vfs_write+0x10/0x10 [ 813.515981][T16122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 813.516007][T16122] ? __fget_files+0x3a0/0x420 [ 813.516031][T16122] ? fput+0xa0/0xd0 [ 813.516051][T16122] ? ksys_write+0x22a/0x250 [ 813.516079][T16122] ? __pfx_ksys_write+0x10/0x10 [ 813.516102][T16122] ? rcu_is_watching+0x15/0xb0 [ 813.516137][T16122] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 813.516159][T16122] do_syscall_64+0xfa/0x3b0 [ 813.516180][T16122] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.516199][T16122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.516218][T16122] ? clear_bhb_loop+0x60/0xb0 [ 813.516240][T16122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.516260][T16122] RIP: 0033:0x7f77e2f8e9a9 [ 813.516277][T16122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.516294][T16122] RSP: 002b:00007f77e3d8a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 813.516313][T16122] RAX: ffffffffffffffda RBX: 00007f77e31b5fa0 RCX: 00007f77e2f8e9a9 [ 813.516327][T16122] RDX: 0000000000002936 RSI: 0000000000002d3e RDI: 0000000000000003 [ 813.516339][T16122] RBP: 00007f77e3d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 813.516351][T16122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.516366][T16122] R13: 0000000000000000 R14: 00007f77e31b5fa0 R15: 00007f77e32dfa28 [ 813.516395][T16122] [ 814.226197][ T2029] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 814.413057][ T2029] usb 2-1: Using ep0 maxpacket: 32 [ 814.435922][ T2029] usb 2-1: config 7 has an invalid interface number: 123 but max is 0 [ 814.462827][ T2029] usb 2-1: config 7 has no interface number 0 [ 814.489468][ T2029] usb 2-1: config 7 interface 123 has no altsetting 0 [ 814.516292][ T2029] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 814.557641][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 814.565344][ T2029] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.625935][ T2029] usb 2-1: Product: syz [ 814.630407][ T2029] usb 2-1: Manufacturer: syz [ 814.635177][ T2029] usb 2-1: SerialNumber: syz [ 814.787793][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 814.817200][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.828465][ T43] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 814.857860][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.876084][T16127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.885358][T16127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.970129][ T43] usb 1-1: config 0 descriptor?? [ 815.150538][ T2029] kvaser_usb 2-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 815.236736][ T2029] usb 2-1: USB disconnect, device number 107 [ 815.507229][T16027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.530867][T16027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.552041][T16027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.566744][T16027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.648037][T13440] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 815.803885][T13440] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.817805][T13440] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.857315][T13440] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 815.898674][T13440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 815.942830][T16027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.950054][T13440] usb 3-1: SerialNumber: syz [ 816.022852][T16027] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.127284][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.134599][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.200974][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.209707][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.275643][T16171] gretap0: entered promiscuous mode [ 816.338175][T16171] gretap0: left promiscuous mode [ 816.553055][T13440] usb 3-1: 0:2 : does not exist [ 816.568461][T13440] usb 3-1: unit 6 not found! [ 816.625974][T13440] usb 3-1: USB disconnect, device number 123 [ 816.644242][T16027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.880575][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.060348][T16027] veth0_vlan: entered promiscuous mode [ 817.092377][T16027] veth1_vlan: entered promiscuous mode [ 817.137406][T16027] veth0_macvtap: entered promiscuous mode [ 817.242497][T16027] veth1_macvtap: entered promiscuous mode [ 817.328301][T16027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.431767][T16027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.659865][T16027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.683148][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 817.698701][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 817.701999][T16027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.868186][T16027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.873157][ T43] usb 1-1: USB disconnect, device number 17 [ 817.878116][T16027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.942504][T16181] netlink: 'syz.2.2848': attribute type 11 has an invalid length. [ 818.997045][T16195] fuse: Bad value for 'rootmode' [ 819.055850][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.102909][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.326578][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.345086][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.944047][T16216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.985069][T16216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.199102][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2856'. [ 820.237592][ T8892] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 820.256158][T16227] trusted_key: encrypted_key: keylen parameter is missing [ 820.267855][T16227] trusted_key: encrypted_key: keylen parameter is missing [ 820.461160][ T8892] usb 2-1: config 1 has no interfaces? [ 820.494788][ T8892] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 820.554279][ T8892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.840828][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.853892][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.922354][T16231] _ÐZ`Ô€@ÿÃ: entered promiscuous mode [ 820.974088][T16241] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2862'. [ 822.567344][T16266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2864'. [ 822.828439][ T5935] usb 2-1: USB disconnect, device number 108 [ 823.220757][T16278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2868'. [ 823.277949][ T5935] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 823.471099][ T5935] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 823.510607][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.541385][ T5935] usb 2-1: Product: syz [ 823.559567][ T5935] usb 2-1: Manufacturer: syz [ 823.586438][ T5935] usb 2-1: SerialNumber: syz [ 823.641079][ T5935] usb 2-1: config 0 descriptor?? [ 823.682457][T16297] netlink: 'syz.2.2870': attribute type 13 has an invalid length. [ 823.734020][T16297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.758905][ T5935] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 824.214079][ T5935] gspca_sunplus: reg_r err -71 [ 824.219094][ T5935] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 824.299781][ T5935] usb 2-1: USB disconnect, device number 109 [ 824.560264][ T8892] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 824.858044][ T5935] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 824.976356][T16323] gretap0: entered promiscuous mode [ 824.988131][T16323] gretap0: left promiscuous mode [ 825.021270][ T8892] usb 4-1: Using ep0 maxpacket: 16 [ 825.293651][ T5935] usb 2-1: config 0 has no interfaces? [ 825.315496][ T5935] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 825.342026][T16312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.352634][T16312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.381933][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.440013][ T5935] usb 2-1: Product: syz [ 825.451339][ T5935] usb 2-1: Manufacturer: syz [ 825.463725][ T5935] usb 2-1: SerialNumber: syz [ 825.512149][ T5935] usb 2-1: config 0 descriptor?? [ 828.075591][ T5935] usb 2-1: USB disconnect, device number 110 [ 828.482205][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 828.540293][T16348] veth1_macvtap: left promiscuous mode [ 828.626782][ T8892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 828.671920][T16355] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2881'. [ 828.692723][ T8892] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 828.748775][ T8892] usb 4-1: can't read configurations, error -71 [ 829.511642][T16379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2889'. [ 829.525535][T16379] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2889'. [ 829.557277][ T5935] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 829.599457][T16379] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2889'. [ 829.638438][T16379] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 829.866917][ T5935] usb 2-1: config 0 has no interfaces? [ 829.894445][ T5935] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 829.912989][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.966266][ T5935] usb 2-1: Product: syz [ 829.982989][ T5935] usb 2-1: Manufacturer: syz [ 829.997008][ T5935] usb 2-1: SerialNumber: syz [ 830.064987][ T5935] usb 2-1: config 0 descriptor?? [ 830.767009][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 831.377912][T16398] netlink: 'syz.3.2893': attribute type 4 has an invalid length. [ 831.487666][ T8891] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 831.667726][ T8891] usb 3-1: Using ep0 maxpacket: 16 [ 831.676938][ T8891] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 831.692231][ T8891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 831.754711][ T8891] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 831.771208][ T8891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.791760][ T8891] usb 3-1: Product: syz [ 831.805229][ T8891] usb 3-1: Manufacturer: syz [ 831.823316][ T8891] usb 3-1: SerialNumber: syz [ 831.855338][ T8891] usb 3-1: config 0 descriptor?? [ 831.885413][ T8891] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 831.935935][ T8891] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 832.481747][ T8891] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 832.495172][ T8891] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 832.939066][ T8892] usb 2-1: USB disconnect, device number 111 [ 833.273917][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2899'. [ 833.904501][T16440] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 833.948619][ T8892] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 834.118261][ T8892] usb 1-1: Using ep0 maxpacket: 16 [ 834.143233][ T8892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.154601][ T8892] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 834.174627][ T8892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.183570][ T8891] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 834.195388][ T8891] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 834.203142][ T8891] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 834.234900][T16449] veth11: entered promiscuous mode [ 834.242622][T16449] veth11: entered allmulticast mode [ 834.249531][ T8891] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 834.272142][ T8892] usb 1-1: config 0 descriptor?? [ 834.314514][ T8891] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 834.419442][ T8891] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 834.479071][T16453] FAULT_INJECTION: forcing a failure. [ 834.479071][T16453] name failslab, interval 1, probability 0, space 0, times 0 [ 834.558707][T16453] CPU: 0 UID: 0 PID: 16453 Comm: syz.1.2908 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 834.558737][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 834.558750][T16453] Call Trace: [ 834.558759][T16453] [ 834.558768][T16453] dump_stack_lvl+0x189/0x250 [ 834.558798][T16453] ? __pfx____ratelimit+0x10/0x10 [ 834.558820][T16453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.558843][T16453] ? __pfx__printk+0x10/0x10 [ 834.558875][T16453] ? __pfx___might_resched+0x10/0x10 [ 834.558898][T16453] ? fs_reclaim_acquire+0x7d/0x100 [ 834.558922][T16453] should_fail_ex+0x414/0x560 [ 834.558947][T16453] should_failslab+0xa8/0x100 [ 834.558979][T16453] __kmalloc_noprof+0xcb/0x4f0 [ 834.559005][T16453] ? kfree+0x4d/0x440 [ 834.559026][T16453] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 834.559055][T16453] tomoyo_realpath_from_path+0xe3/0x5d0 [ 834.559081][T16453] ? tomoyo_domain+0xd9/0x130 [ 834.559111][T16453] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 834.559142][T16453] tomoyo_path_number_perm+0x1e8/0x5a0 [ 834.559177][T16453] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 834.559224][T16453] ? __lock_acquire+0xab9/0xd20 [ 834.559263][T16453] ? __fget_files+0x2a/0x420 [ 834.559284][T16453] ? __fget_files+0x2a/0x420 [ 834.559300][T16453] ? __fget_files+0x3a0/0x420 [ 834.559316][T16453] ? __fget_files+0x2a/0x420 [ 834.559337][T16453] security_file_ioctl+0xcb/0x2d0 [ 834.559370][T16453] __se_sys_ioctl+0x47/0x170 [ 834.559397][T16453] do_syscall_64+0xfa/0x3b0 [ 834.559423][T16453] ? lockdep_hardirqs_on+0x9c/0x150 [ 834.559442][T16453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.559461][T16453] ? clear_bhb_loop+0x60/0xb0 [ 834.559485][T16453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.559503][T16453] RIP: 0033:0x7f77e2f8e9a9 [ 834.559522][T16453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.559559][T16453] RSP: 002b:00007f77e3d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.559582][T16453] RAX: ffffffffffffffda RBX: 00007f77e31b5fa0 RCX: 00007f77e2f8e9a9 [ 834.559599][T16453] RDX: 0000200000000100 RSI: 0000000040505331 RDI: 0000000000000003 [ 834.559614][T16453] RBP: 00007f77e3d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 834.559627][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.559640][T16453] R13: 0000000000000000 R14: 00007f77e31b5fa0 R15: 00007f77e32dfa28 [ 834.559680][T16453] [ 834.559817][T16453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 834.898228][T16455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.943596][T16455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.300818][ T8892] usbhid 1-1:0.0: can't add hid device: -71 [ 836.336524][ T8892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 836.403777][ T8892] usb 1-1: USB disconnect, device number 18 [ 836.495717][T16481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.541766][ T5848] usb 3-1: USB disconnect, device number 124 [ 836.663354][T16481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.895142][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'. [ 836.970187][T16487] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 836.989740][T16487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.744177][ T8892] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 838.127593][ T8892] usb 2-1: Using ep0 maxpacket: 16 [ 838.137296][ T8892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.150136][ T8892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.162016][ T8892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 838.176457][ T8892] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 838.187097][ T8892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.204632][ T8892] usb 2-1: config 0 descriptor?? [ 838.261780][T16510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.275800][T16510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2923'. [ 838.284985][T16510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2923'. [ 838.300209][T16510] gretap0: entered promiscuous mode [ 838.308786][T16510] batadv_slave_1: entered promiscuous mode [ 838.315301][T16510] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 838.359786][T16510] Cannot create hsr debugfs directory [ 838.367817][T16510] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 838.704156][ T8892] hid-multitouch 0003:0457:07DA.0016: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 838.910460][ T8892] usb 2-1: USB disconnect, device number 112 [ 838.970368][T16511] fido_id[16511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0457:07DA.0016/report_descriptor': No such device [ 839.039405][T16513] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 839.072324][T16513] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 839.647582][ T8892] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 839.809571][ T8892] usb 4-1: config 0 has no interfaces? [ 839.822801][ T8892] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 839.833994][ T8892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.853750][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 840.387588][ T5935] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 840.557701][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 840.760551][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.767608][ T8892] usb 4-1: Product: syz [ 840.813932][ T5935] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 840.817564][ T8892] usb 4-1: Manufacturer: syz [ 840.855594][ T8892] usb 4-1: SerialNumber: syz [ 840.923212][ T8892] usb 4-1: config 0 descriptor?? [ 840.966594][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.147028][ T5935] usb 3-1: config 0 descriptor?? [ 841.398081][ T30] audit: type=1326 audit(1752928867.985:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.3.2925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89f4b8e9a9 code=0x0 [ 841.807798][ T8892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 841.978123][ T8892] usb 1-1: Using ep0 maxpacket: 16 [ 841.992698][ T8892] usb 1-1: config 255 has an invalid interface number: 25 but max is 0 [ 842.001491][ T8892] usb 1-1: config 255 has no interface number 0 [ 842.021897][ T8892] usb 1-1: config 255 interface 25 has no altsetting 0 [ 842.135729][ T8892] usb 1-1: New USB device found, idVendor=07cf, idProduct=1167, bcdDevice= 1.00 [ 842.156267][ T8892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.195792][ T8892] usb 1-1: Product: syz [ 842.202597][ T8892] usb 1-1: Manufacturer: syz [ 842.213933][ T8892] usb 1-1: SerialNumber: syz [ 842.808855][ T5914] usb 4-1: USB disconnect, device number 122 [ 842.957905][T16555] netlink: 'syz.1.2937': attribute type 7 has an invalid length. [ 843.501028][T16566] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 843.509559][T16566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2933'. [ 843.781976][T16570] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2942'. [ 843.802443][T16570] input: syz1 as /devices/virtual/input/input65 [ 844.091501][ T5935] usbhid 3-1:0.0: can't add hid device: -71 [ 844.105877][ T5935] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 844.122831][T16572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 844.174892][ T5935] usb 3-1: USB disconnect, device number 125 [ 844.185170][T16574] xt_hashlimit: max too large, truncated to 1048576 [ 844.207590][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 844.238330][T16572] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 844.321186][T16572] netlink: 'syz.3.2943': attribute type 3 has an invalid length. [ 844.707763][ T5935] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 844.869690][ T5935] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 844.878163][ T5935] usb 4-1: config 0 has no interface number 0 [ 845.068048][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 845.144547][ T5935] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 845.193426][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 845.607954][ T5935] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 845.709372][ T5935] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 845.763714][ T8892] usb-storage 1-1:255.25: USB Mass Storage device detected [ 845.801231][ T5935] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 845.828086][ T8892] usb-storage 1-1:255.25: This device (07cf,1167,0100 S 05 P b9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4) [ 845.828086][ T8892] Please send a copy of this message to and [ 845.950813][ T8892] usb 1-1: USB disconnect, device number 19 [ 845.967284][ T5935] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 846.067805][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.147102][ T5935] usb 4-1: config 0 descriptor?? [ 846.229919][T16581] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 846.237184][T16581] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 846.324887][ T5935] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 846.582475][T16581] program syz.3.2947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.720439][T15940] usb 4-1: USB disconnect, device number 123 [ 846.729310][T15940] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 846.952777][T16603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.001895][T16603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.168255][ T5935] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 847.372077][T16615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.383979][T16615] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 847.398422][T16615] netlink: 'syz.4.2957': attribute type 3 has an invalid length. [ 847.563789][T16616] netlink: 'syz.0.2956': attribute type 1 has an invalid length. [ 847.616220][T16618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2956'. [ 848.057257][T16629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2960'. [ 849.343124][T16643] vlan0: entered promiscuous mode [ 849.970417][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 850.262698][T15940] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 850.459774][T15940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.470294][T15940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.500969][T15940] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 850.626763][T15940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 850.651334][T15940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.665986][T15940] usb 3-1: Product: syz [ 850.675103][T15940] usb 3-1: Manufacturer: syz [ 850.790563][T15940] usb 3-1: SerialNumber: syz [ 850.927640][ T8892] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 851.207687][ T8892] usb 4-1: device descriptor read/64, error -71 [ 851.246682][T16651] syzkaller1: entered promiscuous mode [ 851.252482][T16651] syzkaller1: entered allmulticast mode [ 851.447718][ T8892] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 851.589578][ T8892] usb 4-1: device descriptor read/64, error -71 [ 851.718346][ T8892] usb usb4-port1: attempt power cycle [ 851.997587][ T5914] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 852.117662][ T8892] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 852.146847][T15940] cdc_ncm 3-1:1.0: bind() failure [ 852.160939][ T8892] usb 4-1: device descriptor read/8, error -71 [ 852.167800][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 852.176953][T15940] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 852.200413][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.210726][T15940] cdc_ncm 3-1:1.1: bind() failure [ 852.227587][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 852.285411][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 852.301445][ T5914] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 852.310820][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.323764][ T5914] usb 2-1: Product: syz [ 852.340597][ T5914] usb 2-1: Manufacturer: syz [ 852.345264][ T5914] usb 2-1: SerialNumber: syz [ 852.368743][ T5914] usb 2-1: config 0 descriptor?? [ 852.395653][T16675] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 852.427744][ T8892] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 852.470261][ T8892] usb 4-1: device descriptor read/8, error -71 [ 852.551266][ T5914] usb 3-1: USB disconnect, device number 126 [ 852.618521][ T8892] usb usb4-port1: unable to enumerate USB device [ 852.641721][T15940] usb 2-1: USB disconnect, device number 113 [ 853.489311][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.518331][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.901967][T16696] veth3: entered promiscuous mode [ 853.907327][T16696] veth3: entered allmulticast mode [ 854.060343][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2988'. [ 854.114068][T16703] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 854.162991][T16707] Invalid logical block size (21061) [ 854.310191][T16703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.477306][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 854.486811][T16721] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 854.494730][T16721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.621463][ T5914] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 854.977556][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 854.993193][ T5914] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 855.017225][ T5914] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 855.065575][ T5914] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 855.083466][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.099464][ T5914] usb 1-1: Product: syz [ 855.112716][ T5914] usb 1-1: Manufacturer: syz [ 855.127092][ T5914] usb 1-1: SerialNumber: syz [ 855.187690][T15940] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 855.512274][T15940] usb 3-1: config 0 has no interfaces? [ 855.584305][T15940] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 855.609350][T15940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.622083][ T5914] usb 1-1: USB disconnect, device number 21 [ 855.686113][T15940] usb 3-1: Product: syz [ 855.695915][T15940] usb 3-1: Manufacturer: syz [ 855.734045][T15940] usb 3-1: SerialNumber: syz [ 855.762712][T15940] usb 3-1: config 0 descriptor?? [ 855.785662][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 856.670969][T16747] bridge0: entered promiscuous mode [ 856.696181][T16747] bond0: entered promiscuous mode [ 856.713769][T16747] bond_slave_0: entered promiscuous mode [ 856.763276][T16747] bond_slave_1: entered promiscuous mode [ 856.853731][T16747] hsr2: entered allmulticast mode [ 856.881730][T16758] usb usb8: usbfs: process 16758 (syz.0.3004) did not claim interface 0 before use [ 856.976312][T16747] bridge0: entered allmulticast mode [ 856.994267][T16747] bond0: entered allmulticast mode [ 857.019601][T16747] bond_slave_0: entered allmulticast mode [ 857.122639][T16747] bond_slave_1: entered allmulticast mode [ 857.277695][ T8892] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 857.441248][ T8892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 857.576178][ T8892] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 857.677597][ T8892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.739217][ T8892] usb 2-1: Product: syz [ 857.750451][ T8892] usb 2-1: Manufacturer: syz [ 857.771424][ T8892] usb 2-1: SerialNumber: syz [ 857.798751][ T8892] usb 2-1: config 0 descriptor?? [ 858.876496][ T8891] usb 3-1: USB disconnect, device number 127 [ 859.538546][ T2029] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 859.707606][ T2029] usb 3-1: device descriptor read/64, error -71 [ 859.977636][ T2029] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 860.011646][T16798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.059431][ T8892] usb 2-1: USB disconnect, device number 114 [ 860.065985][T16798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.157863][ T2029] usb 3-1: device descriptor read/64, error -71 [ 860.174174][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.268203][ T2029] usb usb3-port1: attempt power cycle [ 860.627666][ T2029] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 860.652064][ T2029] usb 3-1: device descriptor read/8, error -71 [ 860.757583][T15940] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 860.904621][T16824] netlink: 'syz.4.3025': attribute type 21 has an invalid length. [ 860.912967][ T2029] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 860.923201][T16824] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 860.943472][T16824] netlink: 'syz.4.3025': attribute type 2 has an invalid length. [ 860.958124][T16824] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.3025'. [ 860.969133][T15940] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 860.977848][ T2029] usb 3-1: device descriptor read/8, error -71 [ 860.981786][T15940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.000529][T15940] usb 2-1: config 0 descriptor?? [ 861.013807][T15940] cp210x 2-1:0.0: cp210x converter detected [ 861.138397][ T2029] usb usb3-port1: unable to enumerate USB device [ 861.190610][T16830] IPv6: addrconf: prefix option has invalid lifetime [ 861.338870][ T5914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 861.414586][T15940] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 861.497306][T16842] FAULT_INJECTION: forcing a failure. [ 861.497306][T16842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.511666][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 861.512823][T16842] CPU: 1 UID: 0 PID: 16842 Comm: syz.4.3031 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 861.512852][T16842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 861.512866][T16842] Call Trace: [ 861.512873][T16842] [ 861.512884][T16842] dump_stack_lvl+0x189/0x250 [ 861.512917][T16842] ? __pfx____ratelimit+0x10/0x10 [ 861.512942][T16842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.512968][T16842] ? __pfx__printk+0x10/0x10 [ 861.512998][T16842] ? __might_fault+0xb0/0x130 [ 861.513040][T16842] should_fail_ex+0x414/0x560 [ 861.513067][T16842] _copy_from_iter+0x1db/0x16f0 [ 861.513098][T16842] ? rcu_is_watching+0x15/0xb0 [ 861.513124][T16842] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 861.513158][T16842] ? __pfx__copy_from_iter+0x10/0x10 [ 861.513198][T16842] ? __build_skb_around+0x257/0x3e0 [ 861.513233][T16842] ? netlink_sendmsg+0x642/0xb30 [ 861.513262][T16842] ? skb_put+0x11b/0x210 [ 861.513296][T16842] netlink_sendmsg+0x6b2/0xb30 [ 861.513336][T16842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.513369][T16842] ? aa_sock_msg_perm+0x94/0x160 [ 861.513395][T16842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.513418][T16842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.513449][T16842] __sock_sendmsg+0x21c/0x270 [ 861.513477][T16842] ____sys_sendmsg+0x505/0x830 [ 861.513515][T16842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.513556][T16842] ? import_iovec+0x74/0xa0 [ 861.513591][T16842] ___sys_sendmsg+0x21f/0x2a0 [ 861.513625][T16842] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.513694][T16842] ? __fget_files+0x2a/0x420 [ 861.513712][T16842] ? __fget_files+0x3a0/0x420 [ 861.513742][T16842] __x64_sys_sendmsg+0x19b/0x260 [ 861.513778][T16842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.513820][T16842] ? __pfx_ksys_write+0x10/0x10 [ 861.513855][T16842] ? do_syscall_64+0xbe/0x3b0 [ 861.513883][T16842] do_syscall_64+0xfa/0x3b0 [ 861.513909][T16842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.513929][T16842] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 861.513951][T16842] ? clear_bhb_loop+0x60/0xb0 [ 861.513976][T16842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.513999][T16842] RIP: 0033:0x7fd9f818e9a9 [ 861.514017][T16842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.514038][T16842] RSP: 002b:00007fd9f8fa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.514061][T16842] RAX: ffffffffffffffda RBX: 00007fd9f83b5fa0 RCX: 00007fd9f818e9a9 [ 861.514077][T16842] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000003 [ 861.514090][T16842] RBP: 00007fd9f8fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 861.514103][T16842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.514117][T16842] R13: 0000000000000000 R14: 00007fd9f83b5fa0 R15: 00007fd9f84dfa28 [ 861.514148][T16842] [ 861.607760][ T8892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 861.614001][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.807723][ T8892] usb 4-1: Using ep0 maxpacket: 16 [ 861.819096][T15940] usb 2-1: cp210x converter now attached to ttyUSB0 [ 861.828049][ T8892] usb 4-1: config 255 has an invalid interface number: 25 but max is 0 [ 861.833624][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.849354][ T5914] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 861.880354][ T8892] usb 4-1: config 255 has no interface number 0 [ 861.896913][ T8892] usb 4-1: config 255 interface 25 has no altsetting 0 [ 861.897749][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.932446][ T5914] usb 1-1: config 0 descriptor?? [ 861.939977][ T8892] usb 4-1: New USB device found, idVendor=07cf, idProduct=1167, bcdDevice= 1.00 [ 861.968648][ T8892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.976875][ T8892] usb 4-1: Product: syz [ 861.987732][ T8892] usb 4-1: Manufacturer: syz [ 861.992373][ T8892] usb 4-1: SerialNumber: syz [ 862.035971][T16849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.053861][T16849] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 862.065128][T16849] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 862.082635][T16849] netlink: 'syz.4.3034': attribute type 3 has an invalid length. [ 862.297004][T16855] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 862.346343][T16828] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3026'. [ 862.370632][T16860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.375237][ T5914] playstation 0003:054C:05C4.0017: invalid report_count 1553694380 [ 862.406191][ T5914] playstation 0003:054C:05C4.0017: item 0 4 1 9 parsing failed [ 862.422607][T16860] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 862.427002][ T5914] playstation 0003:054C:05C4.0017: Parse failed [ 862.460551][ T5914] playstation 0003:054C:05C4.0017: probe with driver playstation failed with error -22 [ 862.518553][T16860] netlink: 'syz.2.3036': attribute type 3 has an invalid length. [ 862.566433][T16828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.602744][T16828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.688658][ T5848] usb 1-1: USB disconnect, device number 22 [ 863.330815][T16873] netlink: 'syz.3.3029': attribute type 10 has an invalid length. [ 863.338847][T16873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3029'. [ 863.360871][T16873] bridge0: port 3(dummy0) entered blocking state [ 863.368776][T16873] bridge0: port 3(dummy0) entered disabled state [ 863.376577][T16873] dummy0: entered allmulticast mode [ 863.443336][T16873] dummy0: entered promiscuous mode [ 863.453468][T16873] bridge0: port 3(dummy0) entered blocking state [ 863.460033][T16873] bridge0: port 3(dummy0) entered forwarding state [ 863.503740][ T5914] usb 2-1: USB disconnect, device number 115 [ 863.610048][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 863.706176][ T5914] cp210x 2-1:0.0: device disconnected [ 863.879101][T15940] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 864.159728][T15940] usb 3-1: Using ep0 maxpacket: 16 [ 864.723779][T16892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.756084][T16892] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 864.791988][T16892] netlink: 'syz.0.3049': attribute type 3 has an invalid length. [ 864.977570][ T5914] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 865.582158][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 865.667910][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 865.700957][T16902] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 865.763713][ T5914] usb 2-1: config 7 has an invalid interface number: 123 but max is 0 [ 865.792747][ T5914] usb 2-1: config 7 has no interface number 0 [ 865.819148][ T5914] usb 2-1: config 7 interface 123 has no altsetting 0 [ 865.889769][ T5914] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 866.122534][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.146324][ T5914] usb 2-1: Product: syz [ 866.156363][ T5914] usb 2-1: Manufacturer: syz [ 866.231436][ T5914] usb 2-1: SerialNumber: syz [ 866.516436][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.535010][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.586942][ T8892] usb-storage 4-1:255.25: USB Mass Storage device detected [ 866.598985][ T8892] usb-storage 4-1:255.25: This device (07cf,1167,0100 S 05 P b9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4) [ 866.598985][ T8892] Please send a copy of this message to and [ 866.699447][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3048'. [ 866.730158][ T8892] usb 4-1: USB disconnect, device number 2 [ 866.837969][ T5914] kvaser_usb 2-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 866.910682][ T5914] usb 2-1: USB disconnect, device number 116 [ 866.944328][T15940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 866.976176][T15940] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 867.028189][T15940] usb 3-1: can't read configurations, error -71 [ 867.114690][T16925] QAT: Device 127 not found [ 867.337829][ T5935] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 867.557753][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 867.570643][ T5935] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 867.591708][ T5935] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 867.667002][ T5935] usb 1-1: config 2 has no interface number 0 [ 867.719256][ T5935] usb 1-1: too many endpoints for config 2 interface 31 altsetting 5: 130, using maximum allowed: 30 [ 867.770032][ T5935] usb 1-1: config 2 interface 31 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 867.840814][ T5935] usb 1-1: config 2 interface 31 has no altsetting 0 [ 867.858403][ T8892] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 867.875620][ T5935] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 867.925287][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.955521][ T5935] usb 1-1: Product: syz [ 867.985975][ T5935] usb 1-1: Manufacturer: syz [ 867.996119][ T5935] usb 1-1: SerialNumber: syz [ 868.043245][ T8892] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 868.044339][ T5935] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 868.061796][ T8892] usb 2-1: config 0 has no interface number 0 [ 868.080092][ T8892] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 868.160190][ T8892] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 868.191206][ T8892] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 868.257533][ T8892] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 868.293114][ T8892] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 868.337596][ T8892] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 868.377827][ T8892] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 868.403346][ T8892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.432951][ T8892] usb 2-1: config 0 descriptor?? [ 868.445866][T16934] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 868.458697][T16934] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 868.510888][ T8892] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 868.567742][T16943] netlink: 'syz.2.3064': attribute type 9 has an invalid length. [ 868.708437][ T5935] usb 2-1: USB disconnect, device number 117 [ 868.752846][ T5935] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 868.846819][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 868.860376][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 868.869904][T16951] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 868.885355][T16951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.937691][T16955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.987973][T16955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.998190][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.021152][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.026347][T16958] netlink: 'syz.2.3070': attribute type 26 has an invalid length. [ 869.053725][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.089961][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.130666][T16960] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (7) [ 869.320544][T16968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3073'. [ 869.334528][T16968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3073'. [ 870.175837][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.182263][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.464157][ T5914] usb 1-1: USB disconnect, device number 23 [ 871.487409][T16999] macvlan2: entered promiscuous mode [ 871.496108][T16999] macvlan2: entered allmulticast mode [ 871.510017][T16999] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 871.543129][T16999] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 871.653686][T16999] team0: Port device macvlan2 added [ 872.578192][T17025] fuse: Bad value for 'fd' [ 874.327764][T17023] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 874.407668][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 874.710803][T17023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.719741][T17023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.726444][T17023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.742109][T17023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.749239][T17023] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 874.763301][T17023] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 875.285791][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3094'. [ 875.298518][ T5935] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 875.466047][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3096'. [ 875.473774][T17048] ======================================================= [ 875.473774][T17048] WARNING: The mand mount option has been deprecated and [ 875.473774][T17048] and is ignored by this kernel. Remove the mand [ 875.473774][T17048] option from the mount to silence this warning. [ 875.473774][T17048] ======================================================= [ 875.485285][ T5935] usb 3-1: Using ep0 maxpacket: 8 [ 875.547610][T17049] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 875.567089][ T5935] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 875.575851][ T5935] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 875.606684][ T5935] usb 3-1: config 2 has no interface number 0 [ 875.627941][ T5935] usb 3-1: too many endpoints for config 2 interface 31 altsetting 5: 130, using maximum allowed: 30 [ 875.647792][ T5935] usb 3-1: config 2 interface 31 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 875.780865][ T5935] usb 3-1: config 2 interface 31 has no altsetting 0 [ 875.789078][T17062] netlink: 'syz.1.3098': attribute type 4 has an invalid length. [ 875.855621][ T5935] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 875.875124][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.021058][ T5935] usb 3-1: Product: syz [ 876.054681][ T5935] usb 3-1: Manufacturer: syz [ 876.059071][T17066] usb usb8: usbfs: process 17066 (syz.3.3101) did not claim interface 0 before use [ 876.091847][ T5935] usb 3-1: SerialNumber: syz [ 876.096544][T15940] IPVS: starting estimator thread 0... [ 876.254038][T17067] IPVS: using max 32 ests per chain, 76800 per kthread [ 876.283517][ T5935] usb 3-1: can't set config #2, error -71 [ 876.408905][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 876.425184][ T5935] usb 3-1: USB disconnect, device number 8 [ 876.488331][T17070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.497267][T17070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.512217][T17059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.521479][T17059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.751537][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 876.807832][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 876.808333][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 876.970613][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3103'. [ 876.997550][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3103'. [ 877.571814][T17084] gretap0: entered promiscuous mode [ 877.578892][T17084] gretap0: left promiscuous mode [ 878.888132][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 879.298689][T17094] IPVS: Scheduler module ip_vs_ not found [ 879.335804][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3111'. [ 879.347279][T17102] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 879.357597][ T5848] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 879.517627][ T5848] usb 4-1: device descriptor read/64, error -71 [ 879.567772][ T5935] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 879.781454][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 879.790103][ T5935] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 879.797611][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 879.806389][ T5935] usb 1-1: config 0 has no interface number 0 [ 879.822100][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.829745][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.877139][ T5935] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 879.886576][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.901365][ T5935] usb 1-1: Product: syz [ 879.907031][ T5935] usb 1-1: Manufacturer: syz [ 879.931795][ T5935] usb 1-1: SerialNumber: syz [ 880.038588][ T5848] usb 4-1: device descriptor read/64, error -71 [ 880.422167][ T5935] usb 1-1: config 0 descriptor?? [ 880.515647][T17113] ptrace attach of "./syz-executor exec"[15069] was attempted by "./syz-executor exec"[17113] [ 880.526071][ T5848] usb usb4-port1: attempt power cycle [ 880.614809][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.722605][T17111] syz.4.3112 (17111): drop_caches: 2 [ 880.812331][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.855743][ T5935] kaweth 1-1:0.235: Firmware present in device. [ 880.887726][ T5848] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 880.919025][ T5848] usb 4-1: device descriptor read/8, error -71 [ 880.968721][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 881.083351][T17108] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.112722][T17108] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.146608][T17117] ipt_ECN: cannot use operation on non-tcp rule [ 881.154192][T17108] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.172469][T17108] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.187893][ T5848] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 881.228402][ T5848] usb 4-1: device descriptor read/8, error -71 [ 881.343422][T17108] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 881.356707][ T5848] usb usb4-port1: unable to enumerate USB device [ 881.741800][T17135] netlink: 'syz.4.3117': attribute type 13 has an invalid length. [ 881.772012][T17135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.017163][T17142] loop6: detected capacity change from 0 to 1 [ 882.024923][T17142] Dev loop6: unable to read RDB block 1 [ 882.046463][T17142] loop6: unable to read partition table [ 882.057914][T17142] loop6: partition table beyond EOD, truncated [ 882.064153][T17142] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 882.366591][ T5935] kaweth 1-1:0.235: Error reading configuration (-71), no net device created [ 882.389153][ T5935] kaweth 1-1:0.235: probe with driver kaweth failed with error -5 [ 882.441030][ T5935] usb 1-1: USB disconnect, device number 24 [ 882.782343][T17157] gretap0: entered promiscuous mode [ 882.788794][T17157] gretap0: left promiscuous mode [ 883.351699][T17165] geneve2: entered allmulticast mode [ 883.571879][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 884.558544][T17173] veth5: entered promiscuous mode [ 885.277675][ T5848] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 885.544726][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 886.136580][T17187] pimreg: entered allmulticast mode [ 886.149746][T17188] pimreg: left allmulticast mode [ 886.164089][T17192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.180622][T17192] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 886.278040][T17192] netlink: 'syz.1.3135': attribute type 3 has an invalid length. [ 886.778151][ T8892] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 886.979220][ T8892] usb 2-1: Using ep0 maxpacket: 8 [ 887.038654][ T8892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 887.090240][T17197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3131'. [ 887.108549][ T8892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.234577][ T8892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 887.312671][ T8892] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 887.358714][ T8892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.377573][ T8892] usb 2-1: Product: syz [ 887.381887][ T8892] usb 2-1: Manufacturer: syz [ 887.386670][ T8892] usb 2-1: SerialNumber: syz [ 887.407338][ T8892] usb 2-1: config 0 descriptor?? [ 887.419237][ T8892] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 887.571786][T17198] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3131'. [ 887.686599][T17195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.747770][T17195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.201057][T15940] usb 2-1: USB disconnect, device number 118 [ 888.520509][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 888.565766][ T5848] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 888.593705][ T5848] usb 4-1: can't read configurations, error -71 [ 889.011930][T17225] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 889.211454][T17071] Bluetooth: hci3: command 0x0c1a tx timeout [ 890.371667][T17237] geneve3: entered promiscuous mode [ 891.168807][T17254] input: syz1 as /devices/virtual/input/input67 [ 891.435559][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'. [ 891.444726][T17261] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 891.533754][T17261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 891.737596][ T5848] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 891.887731][ T5848] usb 2-1: device descriptor read/64, error -71 [ 892.147724][ T5935] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 892.237616][ T5848] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 892.418082][ T5848] usb 2-1: device descriptor read/64, error -71 [ 892.511196][ T5935] usb 4-1: config 0 has no interfaces? [ 892.528964][ T5848] usb usb2-port1: attempt power cycle [ 892.596882][ T5935] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 892.653877][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.719368][ T5935] usb 4-1: Product: syz [ 892.742740][ T5935] usb 4-1: Manufacturer: syz [ 892.765042][ T5935] usb 4-1: SerialNumber: syz [ 892.781995][T17287] fuse: Bad value for 'rootmode' [ 892.803374][ T5935] usb 4-1: config 0 descriptor?? [ 892.887835][ T5848] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 892.946201][ T5848] usb 2-1: device descriptor read/8, error -71 [ 893.076417][T17274] input: syz0 as /devices/virtual/input/input69 [ 893.197700][ T5848] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 893.221072][T17274] input: syz1 as /devices/virtual/input/input68 [ 893.269465][ T5848] usb 2-1: device descriptor read/8, error -71 [ 893.384164][ T5848] usb usb2-port1: unable to enumerate USB device [ 893.486026][T17299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'. [ 893.549254][T17299] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 893.677740][ T8891] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 893.741256][T17299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.853399][ T8891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 893.876729][ T8891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 893.936583][ T8891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 893.953665][ T8891] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 893.963828][ T8891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.987305][ T8891] usb 1-1: Product: syz [ 893.995025][ T8891] usb 1-1: Manufacturer: syz [ 894.005326][ T8891] usb 1-1: SerialNumber: syz [ 894.038493][ T8891] usb 1-1: config 0 descriptor?? [ 894.385547][T17318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3169'. [ 894.517616][T15940] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 894.644772][T17324] xt_cluster: you have exceeded the maximum number of cluster nodes (816 > 32) [ 894.680796][T17323] dummy0: entered promiscuous mode [ 894.692463][T17323] vlan2: entered promiscuous mode [ 894.857819][ T5935] usb 4-1: USB disconnect, device number 9 [ 894.874492][T15940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 894.892100][T15940] usb 3-1: not running at top speed; connect to a high speed hub [ 894.924731][T15940] usb 3-1: config 9 has an invalid interface number: 87 but max is 0 [ 894.943598][T15940] usb 3-1: config 9 has no interface number 0 [ 894.954948][T15940] usb 3-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 894.980815][T15940] usb 3-1: config 9 interface 87 has no altsetting 0 [ 895.009325][T15940] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 895.020782][T15940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.104115][T15940] usb 3-1: Product: syz [ 895.170162][T15940] usb 3-1: Manufacturer: syz [ 895.184908][T15940] usb 3-1: SerialNumber: syz [ 895.316480][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 895.487572][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 895.499931][ T5935] usb 4-1: config 0 has no interfaces? [ 895.506885][ T5935] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 895.539069][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.574702][ T5935] usb 4-1: config 0 descriptor?? [ 895.839261][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 896.162813][ T8891] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 896.187239][T17337] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.207177][T17337] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.217855][ T8891] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 896.247393][T17337] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.262764][T17337] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.310965][ T8891] usb 1-1: USB disconnect, device number 25 [ 896.828743][ T8891] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 896.991968][ T8891] usb 1-1: Using ep0 maxpacket: 8 [ 897.302060][ T8891] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 897.310477][T17363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.327900][T15940] usb 3-1: USB disconnect, device number 9 [ 897.345169][ T8891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 897.363983][T17363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.386245][ T8891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 897.427066][ T8891] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 897.439556][ T8891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.463863][ T8891] usb 1-1: Product: syz [ 897.491192][ T8891] usb 1-1: Manufacturer: syz [ 897.498331][ T8891] usb 1-1: SerialNumber: syz [ 897.507167][ T8891] usb 1-1: config 0 descriptor?? [ 897.535990][ T8891] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 897.819283][T17356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.831017][T17356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.022885][ T8891] usb 4-1: USB disconnect, device number 10 [ 898.213244][T17350] usb 1-1: USB disconnect, device number 26 [ 900.933359][T17408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 900.947404][T17408] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 900.963196][T17408] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 900.979749][T17408] netlink: 'syz.3.3190': attribute type 3 has an invalid length. [ 901.577595][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.627668][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.665674][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.706604][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.100714][T17425] bridge0: entered promiscuous mode [ 902.107117][T17425] bond0: entered promiscuous mode [ 902.113809][T17425] bond_slave_0: entered promiscuous mode [ 902.121513][T17425] bond_slave_1: entered promiscuous mode [ 902.131981][T17425] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 902.141464][T17425] Cannot create hsr debugfs directory [ 902.147306][T17425] hsr1: entered allmulticast mode [ 902.154888][T17425] bridge0: entered allmulticast mode [ 902.163122][T17425] bond0: entered allmulticast mode [ 902.170994][T17425] bond_slave_0: entered allmulticast mode [ 902.176769][T17425] bond_slave_1: entered allmulticast mode [ 902.250061][ T30] audit: type=1326 audit(1752928928.855:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e2f8e9a9 code=0x7ffc0000 [ 902.257599][T17350] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 902.284454][ T30] audit: type=1326 audit(1752928928.885:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e2f8e9a9 code=0x7ffc0000 [ 902.318661][ T30] audit: type=1326 audit(1752928928.885:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77e2f8d310 code=0x7ffc0000 [ 902.346204][ T30] audit: type=1326 audit(1752928928.885:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.369610][ T30] audit: type=1326 audit(1752928928.885:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.395265][ T30] audit: type=1326 audit(1752928928.885:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.417738][T17350] usb 3-1: device descriptor read/64, error -71 [ 902.418156][ T30] audit: type=1326 audit(1752928928.885:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.448685][ T5914] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 902.477562][ T30] audit: type=1326 audit(1752928928.995:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.503070][ T30] audit: type=1326 audit(1752928929.075:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.531200][T15940] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 902.536609][T17436] netlink: 'syz.4.3201': attribute type 1 has an invalid length. [ 902.548155][ T30] audit: type=1326 audit(1752928929.155:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.1.3199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77e2f8e5ab code=0x7ffc0000 [ 902.570419][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.601802][T17436] 8021q: adding VLAN 0 to HW filter on device bond2 [ 902.615173][T17438] vlan2: entered allmulticast mode [ 902.617603][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 902.627220][T17438] bond2: (slave vlan2): Opening slave failed [ 902.637399][ T5914] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 902.645867][ T5914] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 902.656460][ T5914] usb 1-1: config 2 has no interface number 0 [ 902.662810][ T5914] usb 1-1: too many endpoints for config 2 interface 31 altsetting 5: 130, using maximum allowed: 30 [ 902.662920][T17350] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 902.674421][ T5914] usb 1-1: config 2 interface 31 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 902.696346][ T5914] usb 1-1: config 2 interface 31 has no altsetting 0 [ 902.706033][ T5914] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 902.715337][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.723573][ T5914] usb 1-1: Product: syz [ 902.728432][ T5914] usb 1-1: Manufacturer: syz [ 902.733693][ T5914] usb 1-1: SerialNumber: syz [ 902.740336][T15940] usb 2-1: config 1 interface 0 altsetting 114 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 902.753934][T15940] usb 2-1: config 1 interface 0 has no altsetting 0 [ 902.773040][T15940] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.40 [ 902.783872][T15940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.793031][ T5914] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 902.804154][T15940] usb 2-1: Product: 냇Ἃ޾Ո듷뒳嫅缿燫伖n첱孺㦷춎䉨悭躌ᅡ識☑꘩êµé±¨à´¥æ „æ“ê’쓸桳ₒㇺ䮈ต⿙˲å˜éª»î–€ï¢¤ç¤†êŠä©„ᵓí„뷒懊䊧펪쑂ç¨ä ¿ïº“岤孉璃ç¢â‡©ç«ƒë…➡ߛ틩符혺蹖愵ค厸창ြ륞åŽä¾« [ 902.852787][T15940] usb 2-1: Manufacturer: êµçº—猷뫰徯쪩瀲Ⅽ쭽䛦ݪ殪᪩㊬ᤴ峾楞솊᠔㟢⟮ᆴᚗ尅臨㹣摴å“ç Ÿæ¨·ç™°â‘„á¡†è ·î“¹â°±ì‚¶í„–á·œæ€»é…‹äž‡è™®î˜·ê¦ [ 902.867730][T17350] usb 3-1: device descriptor read/64, error -71 [ 902.875830][T15940] usb 2-1: SerialNumber: ï“¿ [ 902.988287][T17350] usb usb3-port1: attempt power cycle [ 903.193952][T17453] FAULT_INJECTION: forcing a failure. [ 903.193952][T17453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.207641][T17453] CPU: 0 UID: 0 PID: 17453 Comm: syz.3.3206 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 903.207671][T17453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 903.207685][T17453] Call Trace: [ 903.207694][T17453] [ 903.207703][T17453] dump_stack_lvl+0x189/0x250 [ 903.207727][T17453] ? __pfx____ratelimit+0x10/0x10 [ 903.207744][T17453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.207762][T17453] ? __pfx__printk+0x10/0x10 [ 903.207787][T17453] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 903.207810][T17453] should_fail_ex+0x414/0x560 [ 903.207829][T17453] strncpy_from_user+0x36/0x290 [ 903.207847][T17453] __se_sys_add_key+0xcc/0x400 [ 903.207869][T17453] ? __pfx___se_sys_add_key+0x10/0x10 [ 903.207896][T17453] ? do_syscall_64+0xbe/0x3b0 [ 903.207912][T17453] ? __x64_sys_add_key+0x20/0xc0 [ 903.207933][T17453] do_syscall_64+0xfa/0x3b0 [ 903.207949][T17453] ? lockdep_hardirqs_on+0x9c/0x150 [ 903.207964][T17453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.207978][T17453] ? clear_bhb_loop+0x60/0xb0 [ 903.207996][T17453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.208010][T17453] RIP: 0033:0x7f89f4b8e9a9 [ 903.208030][T17453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.208044][T17453] RSP: 002b:00007f89f5912038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 903.208075][T17453] RAX: ffffffffffffffda RBX: 00007f89f4db5fa0 RCX: 00007f89f4b8e9a9 [ 903.208086][T17453] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 903.208096][T17453] RBP: 00007f89f5912090 R08: fffffffffffffffe R09: 0000000000000000 [ 903.208105][T17453] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 903.208114][T17453] R13: 0000000000000000 R14: 00007f89f4db5fa0 R15: 00007f89f4edfa28 [ 903.208134][T17453] [ 903.429826][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.442102][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.507646][T17350] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 903.578020][T17350] usb 3-1: device descriptor read/8, error -71 [ 903.792923][T17464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.810104][T17464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.817629][T17350] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 903.836400][T17465] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3209'. [ 903.841833][T17464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.854790][T17350] usb 3-1: device descriptor read/8, error -71 [ 903.858606][T17464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.998274][T17350] usb usb3-port1: unable to enumerate USB device [ 905.235211][ T5914] usb 1-1: USB disconnect, device number 27 [ 905.391139][T15940] usbhid 2-1:1.0: can't add hid device: -71 [ 905.397622][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 905.429231][T15940] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 905.468822][T17478] veth3: entered promiscuous mode [ 905.477360][T15940] usb 2-1: USB disconnect, device number 123 [ 905.497618][T17478] veth3: entered allmulticast mode [ 905.541707][T17477] dummy0: left allmulticast mode [ 905.556267][T17477] bridge0: port 1(dummy0) entered disabled state [ 905.584764][T17477] batman_adv: batadv0: Adding interface: dummy0 [ 905.597609][T17477] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.597988][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 905.622845][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.644293][T17477] batman_adv: batadv0: Interface activated: dummy0 [ 905.689168][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 905.713352][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 905.713452][T17479] batadv0: mtu less than device minimum [ 905.736134][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.747873][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.759171][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.770530][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.781878][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.793167][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.804509][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.815751][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.827178][T17479] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 905.867357][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 905.924617][ T5913] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 905.934843][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.943064][ T5913] usb 3-1: Product: syz [ 905.948857][ T5913] usb 3-1: Manufacturer: syz [ 905.953491][ T5913] usb 3-1: SerialNumber: syz [ 905.987539][T17348] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 906.018884][ T5913] usb 3-1: config 0 descriptor?? [ 906.038468][ T5913] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 906.087781][T15940] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 906.117732][T17348] usb 1-1: device descriptor read/64, error -71 [ 906.242941][T17474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.251729][T17474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.259876][T15940] usb 2-1: Using ep0 maxpacket: 32 [ 906.280153][T15940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.302654][T15940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.327570][T15940] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 906.357636][T17348] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 906.367275][ T5913] usb 3-1: USB disconnect, device number 14 [ 906.417663][T15940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.432898][T15940] usb 2-1: config 0 descriptor?? [ 906.517761][T17348] usb 1-1: device descriptor read/64, error -71 [ 906.571248][T17496] pim6reg: entered allmulticast mode [ 906.628133][T17348] usb usb1-port1: attempt power cycle [ 906.680554][T17502] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 906.742524][T17505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.756137][T17505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.776718][T17505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.795533][T17505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.820660][T17505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.834375][T17505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.873539][T15940] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 906.987714][T17348] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 907.026295][T17348] usb 1-1: device descriptor read/8, error -71 [ 907.041288][ T5913] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 907.097116][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3224'. [ 907.127073][T15940] usb 2-1: USB disconnect, device number 124 [ 907.140652][T17511] vlan2: entered promiscuous mode [ 907.172533][T17511] batadv0: entered promiscuous mode [ 907.219223][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 907.227662][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 907.242375][ T5913] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 907.285906][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 907.296433][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.297717][T17348] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 907.305361][ T5913] usb 4-1: Product: syz [ 907.353342][ T5913] usb 4-1: Manufacturer: syz [ 907.358471][ T5913] usb 4-1: SerialNumber: syz [ 907.410362][T17348] usb 1-1: device descriptor read/8, error -71 [ 908.034471][T17519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.043993][T17519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.131076][T17348] usb usb1-port1: unable to enumerate USB device [ 908.664049][T17527] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 908.670647][T17527] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 908.705211][T17527] vhci_hcd vhci_hcd.0: Device attached [ 909.117663][ T5935] usb 35-1: new high-speed USB device number 6 using vhci_hcd [ 909.220445][T17529] vhci_hcd: connection reset by peer [ 909.235829][ T12] vhci_hcd: stop threads [ 909.240679][ T12] vhci_hcd: release socket [ 909.255230][ T12] vhci_hcd: disconnect device [ 910.064579][T17540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.073530][T17540] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 910.082331][T17540] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 910.100766][T17540] netlink: 'syz.0.3230': attribute type 3 has an invalid length. [ 910.378140][T17543] gretap0: entered promiscuous mode [ 910.384208][T17543] gretap0: left promiscuous mode [ 910.512030][ T5913] usbhid 4-1:1.0: can't add hid device: -71 [ 910.518978][ T5913] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 910.615823][ T5913] usb 4-1: USB disconnect, device number 11 [ 910.691446][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 910.700802][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3232'. [ 911.033620][T17555] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3236'. [ 911.053419][T17555] netlink: 'syz.0.3236': attribute type 10 has an invalid length. [ 911.098688][T17555] bridge_slave_1: entered promiscuous mode [ 911.115268][T17555] bridge_slave_1: entered allmulticast mode [ 911.148005][T17555] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 911.198288][ T5913] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 911.237598][T17350] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 911.357718][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 911.402156][T17350] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 911.403310][ T5913] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 911.430575][T17350] usb 3-1: config 0 has no interface number 0 [ 911.437514][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.455862][T17350] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 911.466878][ T5913] usb 4-1: Product: syz [ 911.476267][ T5913] usb 4-1: Manufacturer: syz [ 911.486461][ T5913] usb 4-1: SerialNumber: syz [ 911.491655][T17350] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 911.503669][T17350] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 911.516679][T17350] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 911.534227][T17350] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 911.555142][ T5913] usb 4-1: config 0 descriptor?? [ 911.556482][T17350] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 911.578106][T17350] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 911.587302][T17350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.612520][T17350] usb 3-1: config 0 descriptor?? [ 911.650879][ T5913] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 911.659447][T17553] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 911.675648][T17553] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 911.707728][ T5913] usb 4-1: setting power ON [ 911.717684][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 911.731865][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 911.760735][T17350] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 911.791700][ T5913] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 911.823961][ T5913] usb 4-1: media controller created [ 911.898328][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.939946][T17553] program syz.2.3235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.019571][T17350] usb 3-1: USB disconnect, device number 15 [ 912.026200][ T5913] usb 4-1: selecting invalid altsetting 6 [ 912.036410][T17350] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 912.043170][ T5913] usb 4-1: digital interface selection failed (-22) [ 912.043220][ T5913] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 912.049772][ T5913] usb 4-1: setting power OFF [ 912.072428][T17571] net_ratelimit: 12 callbacks suppressed [ 912.072440][T17571] netlink: zone id is out of range [ 912.115281][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 912.144538][T17571] netlink: zone id is out of range [ 912.152560][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 912.168188][T17571] netlink: zone id is out of range [ 912.187855][T17571] netlink: zone id is out of range [ 912.201278][T17571] netlink: zone id is out of range [ 912.206652][T17571] netlink: zone id is out of range [ 912.213335][T17571] netlink: zone id is out of range [ 912.214531][ T5913] (NULL device *): no alternate interface [ 912.221135][T17571] netlink: zone id is out of range [ 912.233156][T17571] netlink: zone id is out of range [ 912.239855][T17571] netlink: zone id is out of range [ 912.337373][T17575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.349303][T17575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.379784][ T8891] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 912.443600][ T5913] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 912.538199][ T5913] usb 4-1: USB disconnect, device number 12 [ 912.704403][ T8891] usb 1-1: config 0 has no interfaces? [ 912.787838][ T8891] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 912.814154][ T8891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.841571][ T8891] usb 1-1: Product: syz [ 912.855372][ T8891] usb 1-1: Manufacturer: syz [ 912.868429][ T8891] usb 1-1: SerialNumber: syz [ 912.879549][ T8891] usb 1-1: config 0 descriptor?? [ 913.137584][T17350] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 913.208118][ T8891] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 913.304379][T17350] usb 3-1: config index 0 descriptor too short (expected 19283, got 45) [ 913.314795][T17350] usb 3-1: config 132 has an invalid descriptor of length 67, skipping remainder of the config [ 913.335836][T17350] usb 3-1: config 132 has 0 interfaces, different from the descriptor's value: 32 [ 913.370577][T17350] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 913.381484][ T8891] usb 4-1: Using ep0 maxpacket: 8 [ 913.388922][ T8891] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 913.401007][ T8891] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 913.431518][T17350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.442120][ T8891] usb 4-1: config 2 has no interface number 0 [ 913.455419][ T8891] usb 4-1: too many endpoints for config 2 interface 31 altsetting 5: 130, using maximum allowed: 30 [ 913.469173][ T8891] usb 4-1: config 2 interface 31 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 913.487780][ T8891] usb 4-1: config 2 interface 31 has no altsetting 0 [ 913.523955][ T8891] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 913.535100][ T8891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.548276][ T8891] usb 4-1: Product: syz [ 913.563418][ T8891] usb 4-1: Manufacturer: syz [ 913.576908][ T8891] usb 4-1: SerialNumber: syz [ 913.620054][ T8891] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 913.743967][T17350] usb 3-1: string descriptor 0 read error: -71 [ 913.749160][ T5914] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 913.757094][T17350] usb 3-1: USB disconnect, device number 16 [ 913.887969][ T5914] usb 2-1: device descriptor read/64, error -71 [ 914.127601][ T5914] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 914.257571][ T5914] usb 2-1: device descriptor read/64, error -71 [ 914.267615][ T5935] vhci_hcd: vhci_device speed not set [ 914.378033][ T5914] usb usb2-port1: attempt power cycle [ 914.558810][T17599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.589711][T17599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.610806][T17599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.736111][T17599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.777624][ T5914] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 914.810452][ T5914] usb 2-1: device descriptor read/8, error -71 [ 915.008099][T17350] usb 1-1: USB disconnect, device number 32 [ 915.069933][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 915.371735][ T5914] usb 2-1: device descriptor read/8, error -71 [ 915.488048][ T5914] usb usb2-port1: unable to enumerate USB device [ 916.021289][T17611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.038010][T17611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.070026][ T5935] usb 4-1: USB disconnect, device number 13 [ 916.171451][T17611] program syz.4.3255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.267625][ T5913] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 917.437751][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 917.460148][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.471459][ T5913] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 917.480737][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.678444][ T5913] usb 4-1: config 0 descriptor?? [ 917.758184][ T5935] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 917.938137][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 918.093991][ T5935] usb 2-1: config 7 has an invalid interface number: 123 but max is 0 [ 918.110395][ T5935] usb 2-1: config 7 has no interface number 0 [ 918.124095][ T5935] usb 2-1: config 7 interface 123 has no altsetting 0 [ 918.143371][ T5935] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be [ 918.164634][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.185792][ T5935] usb 2-1: Product: syz [ 918.198435][ T5935] usb 2-1: Manufacturer: syz [ 918.231510][ T5935] usb 2-1: SerialNumber: syz [ 918.477812][ T8891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 918.486681][T17648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.495543][T17648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.525801][T17648] batman_adv: batadv0: Adding interface: vxlan0 [ 918.532191][T17648] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.589735][T17648] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 918.669192][ T8891] usb 3-1: Using ep0 maxpacket: 8 [ 918.713615][ T5935] kvaser_usb 2-1:7.123: error -ENODEV: Cannot get usb endpoint(s) [ 918.729846][ T5935] usb 2-1: USB disconnect, device number 3 [ 918.770503][ T8891] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 918.787719][ T8891] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 918.928572][ T8891] usb 3-1: config 2 has no interface number 0 [ 919.032910][ T8891] usb 3-1: too many endpoints for config 2 interface 31 altsetting 5: 130, using maximum allowed: 30 [ 919.144256][ T8891] usb 3-1: config 2 interface 31 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 919.227662][ T8891] usb 3-1: config 2 interface 31 has no altsetting 0 [ 919.346574][ T8891] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 919.376153][ T8891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.425233][ T8891] usb 3-1: Product: syz [ 919.442667][ T8891] usb 3-1: Manufacturer: syz [ 919.452593][ T8891] usb 3-1: SerialNumber: syz [ 919.535721][ T8891] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 919.731847][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 919.745245][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 919.767869][ T5913] usb 4-1: USB disconnect, device number 14 [ 919.864439][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3270'. [ 919.899952][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3270'. [ 919.922341][T17659] netlink: 'syz.1.3269': attribute type 1 has an invalid length. [ 919.954351][T17659] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3269'. [ 920.348745][ T8891] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 920.444074][T17679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.463628][T17679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.490854][T17679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.509560][T17679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.520517][ T8891] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 920.529055][ T8891] usb 2-1: config 0 has no interface number 0 [ 920.535421][ T8891] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 920.556508][ T8891] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 920.576185][ T8891] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 920.603165][ T8891] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 920.651613][T17347] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 920.758642][ T8891] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 920.782010][ T8891] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 920.847684][ T8891] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 920.931365][T17347] usb 4-1: Using ep0 maxpacket: 8 [ 920.960593][ T8891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.988286][ T8891] usb 2-1: config 0 descriptor?? [ 920.995681][T17668] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 921.049118][T17668] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 921.093926][ T8891] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 921.108751][T17347] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 921.131949][T17347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.193442][T17347] usb 4-1: Product: syz [ 921.199810][T17347] usb 4-1: Manufacturer: syz [ 921.207766][T17347] usb 4-1: SerialNumber: syz [ 921.218751][T17347] usb 4-1: config 0 descriptor?? [ 921.235946][T17347] usb 4-1: selecting invalid altsetting 3 [ 921.246744][T17347] comedi comedi5: could not set alternate setting 3 in high speed [ 921.254913][T17347] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 921.272827][T17668] program syz.1.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 921.290040][ T8891] usb 2-1: USB disconnect, device number 4 [ 921.304218][ T8891] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 921.326264][T17347] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 921.506162][ T8891] usb 4-1: USB disconnect, device number 15 [ 921.606222][T17347] usb 3-1: USB disconnect, device number 17 [ 921.745588][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 922.355820][T17697] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3282'. [ 922.418199][T17702] net_ratelimit: 60 callbacks suppressed [ 922.418217][T17702] Set syz1 is full, maxelem 0 reached [ 922.647839][ T5913] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 922.907546][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 922.922383][ T5913] usb 1-1: config 1 has an invalid descriptor of length 154, skipping remainder of the config [ 922.964594][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.989888][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 923.000274][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.011716][T17711] xt_CT: No such helper "netbios-ns" [ 923.030163][ T5913] usb 1-1: Product: syz [ 923.061609][ T5913] usb 1-1: Manufacturer: syz [ 923.097741][ T5913] usb 1-1: SerialNumber: syz [ 923.179114][T17348] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 923.355732][T17348] usb 2-1: config 0 has no interfaces? [ 923.374791][T17348] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 923.386140][ T5913] usb 1-1: 0:2 : does not exist [ 923.394654][T17348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.404373][T17348] usb 2-1: Product: syz [ 923.414273][T17348] usb 2-1: Manufacturer: syz [ 923.431432][T17348] usb 2-1: SerialNumber: syz [ 923.438325][ T5913] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 923.440365][T17718] loop2: detected capacity change from 0 to 7 [ 923.459612][T17348] usb 2-1: config 0 descriptor?? [ 923.517063][ T6060] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 923.534550][ T6060] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 923.551563][ T6060] Dev loop2: unable to read RDB block 7 [ 923.594182][ T5913] usb 1-1: USB disconnect, device number 33 [ 923.611813][ T6060] loop2: AHDI p2 p3 [ 923.625783][ T6060] loop2: partition table partially beyond EOD, truncated [ 923.650896][ T6060] loop2: p3 start 335544320 is beyond EOD, truncated [ 923.673223][T17718] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 923.699080][T17712] input: syz0 as /devices/virtual/input/input72 [ 923.733629][T17718] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 925.479280][T17718] Dev loop2: unable to read RDB block 7 [ 925.495956][T17718] loop2: AHDI p2 p3 [ 925.507377][T17718] loop2: partition table partially beyond EOD, truncated [ 925.547540][T17718] loop2: p3 start 335544320 is beyond EOD, truncated [ 925.627920][T17712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.644316][T17712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.652989][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 925.821288][T17731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 925.835067][T17731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 925.845575][T17731] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 925.855291][T17731] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 925.864681][T17731] geneve3: entered promiscuous mode [ 925.899026][T17731] geneve3: entered allmulticast mode [ 925.989028][T17731] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 926.177610][T17731] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 926.206628][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 926.253832][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 926.253851][ T30] audit: type=1326 audit(1752928952.825:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 926.288933][T17731] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 926.309573][ T30] audit: type=1326 audit(1752928952.835:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5ccb8d310 code=0x7ffc0000 [ 926.358041][T17731] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 926.371756][ T30] audit: type=1326 audit(1752928952.835:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 926.398824][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'. [ 926.410468][T17743] netlink: 'syz.2.3292': attribute type 5 has an invalid length. [ 926.482771][T17743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3292'. [ 926.488172][T17347] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 926.549969][T17348] usb 2-1: USB disconnect, device number 5 [ 926.602628][ T30] audit: type=1326 audit(1752928952.835:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 926.717739][T17347] usb 1-1: Using ep0 maxpacket: 32 [ 926.855087][T17737] vti0: entered promiscuous mode [ 926.901187][T17737] vti0: entered allmulticast mode [ 926.917649][ T30] audit: type=1326 audit(1752928952.835:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 926.973475][ T30] audit: type=1326 audit(1752928952.835:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 927.006126][T17743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 927.040342][T17743] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 927.054037][ T30] audit: type=1326 audit(1752928952.835:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 927.096649][T17743] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 927.115897][T17743] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 927.131067][T17748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.147325][T17748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.182324][ T30] audit: type=1326 audit(1752928952.835:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 927.223397][T17743] geneve2: entered promiscuous mode [ 927.229924][T17743] geneve2: entered allmulticast mode [ 927.235406][ T30] audit: type=1326 audit(1752928952.835:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 927.287424][T17745] bridge_slave_0: left allmulticast mode [ 927.298481][ T30] audit: type=1326 audit(1752928952.835:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17740 comm="syz.0.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc5ccb8e9a9 code=0x7ffc0000 [ 927.321076][T17745] bridge_slave_0: left promiscuous mode [ 927.327111][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.342790][T17347] usb 1-1: unable to get BOS descriptor or descriptor too short [ 927.353959][T17347] usb 1-1: too many configurations: 97, using maximum allowed: 8 [ 927.363000][T17347] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 927.372206][T17347] usb 1-1: can't read configurations, error -71 [ 927.375992][T17745] bridge_slave_1: left allmulticast mode [ 927.391529][T17745] bridge_slave_1: left promiscuous mode [ 927.397381][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.420444][T17745] bond0: (slave bond_slave_0): Releasing backup interface [ 927.448826][T17745] bond_slave_0: left promiscuous mode [ 927.465179][T17745] bond_slave_0: left allmulticast mode [ 927.481261][T17745] bond0: (slave bond_slave_1): Releasing backup interface [ 927.490399][T17745] bond_slave_1: left promiscuous mode [ 927.516235][T17745] bond_slave_1: left allmulticast mode [ 927.582991][T17745] team0: Port device team_slave_0 removed [ 927.597012][T17745] team0: Port device team_slave_1 removed [ 927.603998][T17745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.618192][T17745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.626660][T17745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.657723][T17745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.748436][T17745] batman_adv: batadv0: Removing interface: vxlan0 [ 928.115278][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3299'. [ 928.166906][T17762] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 928.216420][T17764] vlan2: entered promiscuous mode [ 928.221631][T17764] dummy0: entered promiscuous mode [ 928.462480][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.472324][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.563307][T17779] netlink: 'syz.0.3305': attribute type 13 has an invalid length. [ 928.615121][T17779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.657974][T17347] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 928.785255][T17782] dummy0: left allmulticast mode [ 928.791443][T17782] dummy0: left promiscuous mode [ 928.799017][T17782] bridge0: port 3(dummy0) entered disabled state [ 928.829450][T17782] bridge_slave_0: left allmulticast mode [ 928.837660][T17347] usb 3-1: Using ep0 maxpacket: 16 [ 928.844238][T17347] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 928.874320][T17347] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 928.895530][T17782] bridge_slave_0: left promiscuous mode [ 928.903638][T17347] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 928.934926][T17782] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.965377][T17782] bridge_slave_1: left allmulticast mode [ 928.979862][T17782] bridge_slave_1: left promiscuous mode [ 928.995495][T17782] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.021895][T17782] bond0: (slave bond_slave_0): Releasing backup interface [ 929.032694][T17782] bond_slave_0: left promiscuous mode [ 929.045317][T17782] bond_slave_0: left allmulticast mode [ 929.081351][T17347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 929.092430][T17782] bond0: (slave bond_slave_1): Releasing backup interface [ 929.106132][T17782] bond_slave_1: left promiscuous mode [ 929.117897][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 929.143722][T17782] bond_slave_1: left allmulticast mode [ 929.197399][T17347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 929.211380][T17347] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 929.236488][T17347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.244085][T17782] team0: Port device team_slave_0 removed [ 929.271693][T17347] usb 3-1: Product: syz [ 929.282812][ T5914] usb 2-1: config 0 has no interfaces? [ 929.288763][T17347] usb 3-1: Manufacturer: syz [ 929.308708][T17782] team0: Port device team_slave_1 removed [ 929.345475][T17347] usb 3-1: SerialNumber: syz [ 929.345916][ T5914] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 929.363793][T17782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.385249][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.404129][T17782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.404332][T17347] usb 3-1: config 0 descriptor?? [ 929.422269][ T5914] usb 2-1: Product: syz [ 929.438528][T17782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.448981][ T5914] usb 2-1: Manufacturer: syz [ 929.457691][ T5914] usb 2-1: SerialNumber: syz [ 929.479770][ T5914] usb 2-1: config 0 descriptor?? [ 929.534935][T17347] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 929.549713][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 929.673112][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 929.715009][T17791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 929.735500][T17791] team0: Port device batadv1 added [ 929.777015][T17786] input: syz0 as /devices/virtual/input/input73 [ 929.854963][T17786] input: syz1 as /devices/virtual/input/input74 [ 929.864956][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 929.925456][T17792] hub 9-0:1.0: USB hub found [ 929.932337][T17792] hub 9-0:1.0: 1 port detected [ 929.964490][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 929.995048][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 930.021387][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 930.030356][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 930.043780][T17347] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 930.057116][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 930.080478][T17347] keyspan 3-1:0.0: unsupported endpoint type 0 [ 930.098482][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 930.129993][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 930.149157][T17347] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 930.188809][T17347] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 931.243573][T17347] usb 3-1: USB disconnect, device number 18 [ 931.258008][T17347] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 931.399338][T17347] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 931.454035][T17347] keyspan 3-1:0.0: device disconnected [ 931.644997][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.654674][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.401119][T17813] netlink: 'syz.4.3315': attribute type 25 has an invalid length. [ 932.710461][ T5935] usb 2-1: USB disconnect, device number 6 [ 933.323399][T17834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3321'. [ 933.887594][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 934.068212][ T5914] usb 4-1: config 0 has no interfaces? [ 934.154792][ T5914] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 934.186178][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.243603][ T5914] usb 4-1: Product: syz [ 934.274022][ T5914] usb 4-1: Manufacturer: syz [ 934.297738][ T5914] usb 4-1: SerialNumber: syz [ 934.313147][ T5914] usb 4-1: config 0 descriptor?? [ 934.604000][T17842] input: syz0 as /devices/virtual/input/input76 [ 934.715959][T17842] input: syz1 as /devices/virtual/input/input75 [ 934.923707][T17852] netlink: 'syz.1.3327': attribute type 25 has an invalid length. [ 935.717624][T17347] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 935.887802][T17347] usb 2-1: Using ep0 maxpacket: 8 [ 935.942471][T17347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 935.952603][T17347] usb 2-1: config 0 has an invalid interface number: 165 but max is 0 [ 935.961021][T17347] usb 2-1: config 0 has no interface number 0 [ 935.974016][T17347] usb 2-1: config 0 interface 165 has no altsetting 0 [ 936.005586][T17347] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 936.016619][T17347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.034806][T17347] usb 2-1: Product: syz [ 936.045278][T17347] usb 2-1: Manufacturer: syz [ 936.058978][T17347] usb 2-1: SerialNumber: syz [ 936.165096][T17347] usb 2-1: config 0 descriptor?? [ 936.679353][T17347] comedi comedi5: Wrong number of endpoints [ 936.710823][T17347] ni6501 2-1:0.165: driver 'ni6501' failed to auto-configure device. [ 936.777855][T17347] usb 2-1: USB disconnect, device number 7 [ 936.907404][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3331'. [ 936.997688][T17870] netlink: 'syz.0.3332': attribute type 9 has an invalid length. [ 937.066105][T17871] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 937.091472][ T5914] usb 4-1: USB disconnect, device number 16 [ 937.106254][T17871] bond3: (slave vti0): Error -95 calling set_mac_address [ 937.195674][T17875] netlink: 'syz.3.3335': attribute type 3 has an invalid length. [ 937.784592][T17890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.794420][T17890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.981291][T17894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.015442][T17894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 938.042653][T17892] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 938.174764][T17899] veth7: entered promiscuous mode [ 938.180166][T17899] veth7: entered allmulticast mode [ 938.807310][T17917] tipc: Invalid UDP bearer configuration [ 938.807370][T17917] tipc: Enabling of bearer rejected, failed to enable media [ 938.896911][T17919] macsec1: entered promiscuous mode [ 938.924460][T17919] dummy0: entered promiscuous mode [ 938.950744][T17919] dummy0: left promiscuous mode [ 938.999658][T17347] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 939.209818][T17347] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 939.209869][T17347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.213017][T17347] usb 4-1: config 0 descriptor?? [ 939.214779][T17347] cp210x 4-1:0.0: cp210x converter detected [ 939.502471][T17347] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 939.531968][T17347] cp210x 4-1:0.0: querying part number failed [ 939.557430][T17347] usb 4-1: cp210x converter now attached to ttyUSB0 [ 939.584243][T17347] usb 4-1: USB disconnect, device number 17 [ 939.612589][T17347] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 939.635308][T17347] cp210x 4-1:0.0: device disconnected [ 939.747700][ T5913] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 939.914169][ T5913] usb 2-1: config 0 has no interfaces? [ 939.926610][ T5913] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 939.939480][ T5914] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 939.956475][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.977258][ T5913] usb 2-1: Product: syz [ 939.984556][ T5913] usb 2-1: Manufacturer: syz [ 939.995907][ T5913] usb 2-1: SerialNumber: syz [ 940.006081][ T5913] usb 2-1: config 0 descriptor?? [ 940.119546][ T5914] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 940.131743][ T5914] usb 3-1: config 0 has no interface number 0 [ 940.138978][ T5914] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 940.154818][ T5914] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 940.165819][ T5914] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 940.185238][ T5914] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 940.196800][ T5914] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 940.210835][ T5914] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 940.224170][ T5914] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 940.239716][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.737719][T17348] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 940.755171][ T5914] usb 3-1: config 0 descriptor?? [ 940.762221][T17930] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 940.770031][T17930] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 940.798451][ T5914] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 940.899492][T17348] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 940.961703][T17348] usb 4-1: config 0 has no interface number 0 [ 940.969651][T17348] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 940.998850][T17930] program syz.2.3352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.011121][T17348] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 941.034370][T17350] usb 3-1: USB disconnect, device number 19 [ 941.045930][T17350] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 941.064750][T17348] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 941.080385][T17348] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 941.107918][T17348] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 941.135671][T17348] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 941.152872][T17348] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 941.162824][T17348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.180564][T17348] usb 4-1: config 0 descriptor?? [ 941.187113][T17932] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 941.195440][T17932] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 941.214047][T17348] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 942.351114][ T5914] usb 2-1: USB disconnect, device number 8 [ 942.427571][T17348] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 942.597803][T17348] usb 1-1: Using ep0 maxpacket: 8 [ 942.614223][T17348] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.636708][T17348] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 942.675479][T17348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.699383][T17348] usb 1-1: config 0 descriptor?? [ 942.714355][T17957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3361'. [ 942.723204][T17348] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 942.787029][T17959] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 943.127664][ T31] INFO: task kworker/0:2:978 blocked for more than 143 seconds. [ 943.202676][ T5935] usb 4-1: USB disconnect, device number 18 [ 943.230068][T17951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.241625][ T5935] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 943.331455][ T31] Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 [ 943.345457][T17951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.360934][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.370645][T17965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.387542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 943.467316][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.479136][T17348] gspca_vc032x: reg_w err -110 [ 943.495254][T17348] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 943.510225][ T31] task:kworker/0:2 state:D stack:21560 pid:978 tgid:978 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 943.554785][T17951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.575946][T17971] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 943.582502][T17971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.590550][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.593005][ T31] Workqueue: usb_hub_wq hub_event [ 943.615267][T17966] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 943.631353][T17951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.640162][ T31] [ 943.651264][ T31] Call Trace: [ 943.660508][T17971] vhci_hcd vhci_hcd.0: Device attached [ 943.668241][ T31] [ 943.671318][T17966] caif:caif_disconnect_client(): nothing to disconnect [ 943.682516][ T31] __schedule+0x16f5/0x4d00 [ 943.692410][ T31] ? schedule+0x165/0x360 [ 943.696969][ T31] ? __pfx___schedule+0x10/0x10 [ 943.705769][ T31] ? schedule+0x91/0x360 [ 943.711302][ T31] schedule+0x165/0x360 [ 943.715680][ T31] schedule_timeout+0x9a/0x270 [ 943.725811][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 943.732625][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 943.741612][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.746988][ T31] ? wait_for_completion+0x267/0x5d0 [ 943.754292][ T31] wait_for_completion+0x2bf/0x5d0 [ 943.762882][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 943.773041][ T31] i2c_del_adapter+0x581/0x6e0 [ 943.781308][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 943.786954][ T31] ? rcu_is_watching+0x15/0xb0 [ 943.792307][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 943.801071][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 943.813002][ T31] dvb_usb_device_exit+0x1be/0x350 [ 943.842548][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 943.855068][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 943.883235][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.890145][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 943.896191][ T31] cxusb_probe+0x603/0x700 [ 943.903010][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 943.908198][T17348] usb 35-1: new high-speed USB device number 7 using vhci_hcd [ 943.916875][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 943.917209][T17972] vhci_hcd: connection reset by peer [ 943.931490][ T12] vhci_hcd: stop threads [ 943.936620][ T12] vhci_hcd: release socket [ 943.941276][ T12] vhci_hcd: disconnect device [ 943.946212][ T31] usb_probe_interface+0x641/0xbc0 [ 943.954990][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 943.960905][ T31] really_probe+0x26a/0x9a0 [ 943.965651][ T31] __driver_probe_device+0x18c/0x2f0 [ 943.974240][ T31] driver_probe_device+0x4f/0x430 [ 943.981131][ T31] __device_attach_driver+0x2ce/0x530 [ 943.986670][ T31] bus_for_each_drv+0x251/0x2e0 [ 943.994835][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 944.001547][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 944.007244][ T31] __device_attach+0x2b8/0x400 [ 944.025180][ T31] ? __pfx___device_attach+0x10/0x10 [ 944.036213][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 944.043214][ T31] bus_probe_device+0x185/0x260 [ 944.054053][ T31] device_add+0x7b6/0xb50 [ 944.063280][ T31] usb_set_configuration+0x1a87/0x20e0 [ 944.069114][T17975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.077724][ T31] usb_generic_driver_probe+0x8d/0x150 [ 944.080882][T17975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.083320][ T31] usb_probe_device+0x1c1/0x390 [ 944.110847][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 944.133328][ T5914] usb 1-1: USB disconnect, device number 36 [ 944.158256][ T31] really_probe+0x26a/0x9a0 [ 944.172805][ T31] __driver_probe_device+0x18c/0x2f0 [ 944.183967][ T31] driver_probe_device+0x4f/0x430 [ 944.192572][ T31] __device_attach_driver+0x2ce/0x530 [ 944.204651][ T31] bus_for_each_drv+0x251/0x2e0 [ 944.215114][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 944.226753][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 944.237833][ T31] __device_attach+0x2b8/0x400 [ 944.249484][ T31] ? __pfx___device_attach+0x10/0x10 [ 944.261787][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 944.272649][ T31] bus_probe_device+0x185/0x260 [ 944.284192][ T31] device_add+0x7b6/0xb50 [ 944.292204][ T31] usb_new_device+0xa39/0x16c0 [ 944.304409][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 944.309735][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.335096][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.355640][ T31] hub_event+0x2941/0x4a00 [ 944.363946][ T31] ? __pfx_hub_event+0x10/0x10 [ 944.373600][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.383562][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.394083][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.405935][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 944.428087][ T31] process_scheduled_works+0xae1/0x17b0 [ 944.433731][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 944.464478][ T31] worker_thread+0x8a0/0xda0 [ 944.470083][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 944.476668][ T31] ? __kthread_parkme+0x7b/0x200 [ 944.485736][ T31] kthread+0x70e/0x8a0 [ 944.491766][ T31] ? __pfx_worker_thread+0x10/0x10 [ 944.497125][ T31] ? __pfx_kthread+0x10/0x10 [ 944.506145][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.511950][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.521257][ T31] ? __pfx_kthread+0x10/0x10 [ 944.526108][ T31] ret_from_fork+0x3fc/0x770 [ 944.531833][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 944.537331][ T31] ? __switch_to_asm+0x39/0x70 [ 944.545257][ T31] ? __switch_to_asm+0x33/0x70 [ 944.551645][ T31] ? __pfx_kthread+0x10/0x10 [ 944.556532][ T31] ret_from_fork_asm+0x1a/0x30 [ 944.564963][ T31] [ 944.570489][T17966] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 944.585073][T17966] chnl_net:chnl_net_open(): state disconnected [ 944.591642][T17966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.651509][ T31] [ 944.651509][ T31] Showing all locks held in the system: [ 944.660808][ T31] 1 lock held by khungtaskd/31: [ 944.665779][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 944.682839][ T31] 5 locks held by kworker/0:2/978: [ 944.690931][ T31] #0: ffff888143ade948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 944.704953][ T31] #1: ffffc90003c07bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 944.720895][ T31] #2: ffff8881443c9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 944.730594][ T31] #3: ffff8880216bd198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 944.743050][ T31] #4: ffff8880284ff160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 944.752468][ T31] 2 locks held by getty/5607: [ 944.760982][ T31] #0: ffff88803563a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 944.770873][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 944.781442][ T31] 4 locks held by udevd/8410: [ 944.786159][ T31] #0: ffff88805bf48790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 944.795154][ T31] #1: ffff888058124088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 944.804737][ T31] #2: ffff88801ef28d28 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 944.820793][ T31] #3: ffff8880216bd198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 944.833075][ T31] 5 locks held by kworker/1:12/17348: [ 944.839303][ T31] #0: ffff888143ade948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 944.854764][ T31] #1: ffffc90003f4fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 944.870906][ T31] #2: ffff8881453b2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 944.880074][ T31] #3: ffff8881453b5510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 944.896074][ T31] #4: ffff888144f28868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 944.906741][ T31] [ 944.910025][ T31] ============================================= [ 944.910025][ T31] [ 944.918573][ T31] NMI backtrace for cpu 1 [ 944.918589][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 944.918612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.918625][ T31] Call Trace: [ 944.918633][ T31] [ 944.918642][ T31] dump_stack_lvl+0x189/0x250 [ 944.918670][ T31] ? __wake_up_klogd+0xd9/0x110 [ 944.918701][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.918726][ T31] ? __pfx__printk+0x10/0x10 [ 944.918766][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 944.918800][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 944.918827][ T31] ? _printk+0xcf/0x120 [ 944.918859][ T31] ? __pfx__printk+0x10/0x10 [ 944.918889][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 944.918913][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 944.918946][ T31] watchdog+0xfee/0x1030 [ 944.918968][ T31] ? watchdog+0x1de/0x1030 [ 944.918994][ T31] kthread+0x70e/0x8a0 [ 944.919026][ T31] ? __pfx_watchdog+0x10/0x10 [ 944.919045][ T31] ? __pfx_kthread+0x10/0x10 [ 944.919075][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 944.919095][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.919114][ T31] ? __pfx_kthread+0x10/0x10 [ 944.919143][ T31] ret_from_fork+0x3fc/0x770 [ 944.919168][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 944.919195][ T31] ? __switch_to_asm+0x39/0x70 [ 944.919221][ T31] ? __switch_to_asm+0x33/0x70 [ 944.919246][ T31] ? __pfx_kthread+0x10/0x10 [ 944.919275][ T31] ret_from_fork_asm+0x1a/0x30 [ 944.919318][ T31] [ 944.919326][ T31] Sending NMI from CPU 1 to CPUs 0: [ 945.077721][ C0] NMI backtrace for cpu 0 [ 945.077737][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 945.077757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.077768][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 945.077791][ C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bd 1a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 945.077807][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 945.077822][ C0] RAX: a2bc7aecd76c6200 RBX: ffffffff81976a48 RCX: a2bc7aecd76c6200 [ 945.077836][ C0] RDX: 0000000000000001 RSI: ffffffff8d9960e1 RDI: ffffffff8be28c00 [ 945.077848][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 945.077860][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1d6f0 [ 945.077873][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 945.077884][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 945.077898][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.077909][ C0] CR2: 0000001b2dc07ff8 CR3: 0000000075f1a000 CR4: 00000000003526f0 [ 945.077924][ C0] Call Trace: [ 945.077931][ C0] [ 945.077937][ C0] default_idle+0x13/0x20 [ 945.077958][ C0] default_idle_call+0x74/0xb0 [ 945.077979][ C0] do_idle+0x1e8/0x510 [ 945.078001][ C0] ? __pfx_do_idle+0x10/0x10 [ 945.078028][ C0] cpu_startup_entry+0x44/0x60 [ 945.078048][ C0] rest_init+0x2de/0x300 [ 945.078087][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 945.078107][ C0] start_kernel+0x47d/0x500 [ 945.078131][ C0] x86_64_start_reservations+0x24/0x30 [ 945.078148][ C0] x86_64_start_kernel+0x143/0x1c0 [ 945.078176][ C0] common_startup_64+0x13e/0x147 [ 945.078209][ C0] [ 945.078847][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 945.267941][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 945.279767][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.289839][ T31] Call Trace: [ 945.293127][ T31] [ 945.296062][ T31] dump_stack_lvl+0x99/0x250 [ 945.300678][ T31] ? __asan_memcpy+0x40/0x70 [ 945.305282][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.310497][ T31] ? __pfx__printk+0x10/0x10 [ 945.315107][ T31] panic+0x2db/0x790 [ 945.319010][ T31] ? __pfx_panic+0x10/0x10 [ 945.323438][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 945.329256][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 945.334656][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 945.340827][ T31] watchdog+0x102d/0x1030 [ 945.345176][ T31] ? watchdog+0x1de/0x1030 [ 945.349615][ T31] kthread+0x70e/0x8a0 [ 945.353707][ T31] ? __pfx_watchdog+0x10/0x10 [ 945.358392][ T31] ? __pfx_kthread+0x10/0x10 [ 945.363001][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.368225][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.373434][ T31] ? __pfx_kthread+0x10/0x10 [ 945.378051][ T31] ret_from_fork+0x3fc/0x770 [ 945.382661][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 945.387793][ T31] ? __switch_to_asm+0x39/0x70 [ 945.392590][ T31] ? __switch_to_asm+0x33/0x70 [ 945.397403][ T31] ? __pfx_kthread+0x10/0x10 [ 945.402038][ T31] ret_from_fork_asm+0x1a/0x30 [ 945.406835][ T31] [ 945.410175][ T31] Kernel Offset: disabled [ 945.414528][ T31] Rebooting in 86400 seconds..