last executing test programs: 26.830307621s ago: executing program 0 (id=824): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000d5d462b1b97511bb333a1907f834629a1a74b7a183f1625139afd2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xce1, 0x0, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1c) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 25.778498007s ago: executing program 0 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x2c, 0x1a, 0x99, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x14, 0x1, 0xff, 0x2, 0xc8, 0x5, 0x800}, [@RTA_MARK={0x8, 0x10, 0x43}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x24, 0x6a, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8e04"]) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40081, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 24.412592717s ago: executing program 4 (id=830): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 23.253140612s ago: executing program 4 (id=834): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x82, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xf7ff}, 0x8) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x5, 0xd13, 0x80000000, {0x77359400}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x20, 0x3, 0x0, 0x0, "ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49221b1c8d82d1c6b338a3f3569bf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004090) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000840)={0x0, 0x2, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x3, 0x4, {0x8, @usage=0x4, 0x0, 0xffffffffffffffff, 0xe, 0x5, 0x3, 0x0, 0x0, @usage, 0xa, 0xffff00, [0x4, 0x763, 0xff, 0x9, 0x5, 0xb]}, {0x2, @usage=0x6, r5, 0x2, 0x8000000000000001, 0x0, 0x3, 0x3, 0x9d, @struct={0x2206, 0x36}, 0x10, 0x6, [0x8, 0x80000001, 0x1, 0x8, 0x100000001, 0xfffffffffffffffe]}, {0xfffffffffffffffc, @struct={0x677d1314, 0x5}, 0x0, 0x0, 0x9, 0xc359, 0x7, 0x0, 0x518, @usage=0x800, 0x81, 0x5, [0xe309, 0x8000000000000000, 0x7, 0x3, 0xffffffff, 0xa000000000]}, {0x9e, 0x9, 0x7fffffffffffffff}}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x32, 0x40, 0x1a, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x72, 0x3, 0x1, {0x22, 0x16b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x9, 0xe0}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x0, 0x10, 0x4, 0x7f, 0x10, 0x1}, 0x48, &(0x7f00000011c0)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "637a2b258fadb52683067608b793b447"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "111f2b0b2468a2455f5ed51fc7d2b7b0"}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x100, 0xf000, 0x8000, [0x3f00, 0xff3ff0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0xa, 0x40}]}, 0x1, [{0x35, &(0x7f0000001240)=@string={0x35, 0x3, "9058fe931418cc0674595fbb98a80fa1fbdc2e81e7ad16725b9d226899b2402add59bfc9d8bb4bf64cfa03a60dc95600c2ea9c"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5a, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x31, 0xd9, 0x40, 0x0, 0x7}}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf4}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000180)='GPL\x00', 0x6, 0x70, &(0x7f00000001c0)=""/112, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x4, 0x9}, {0x1, 0x1, 0x7, 0x5}, {0x4, 0x3, 0xd, 0x4}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='fscache_active\x00', r7, 0x0, 0x8}, 0x18) 23.062590973s ago: executing program 3 (id=835): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x9, 0x6, 0x6, 0x3}, {0x7, 0x6, 0x2, 0x1}, {0x8, 0xef, 0x9, 0x200}, {0x2, 0xc, 0x0, 0x8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000280)=""/118) write$nci(r3, 0x0, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000280)="ef559c94", 0x4}], 0x2, 0xa, 0x8) lseek(r1, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470", 0x8b}, {&(0x7f0000000180)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2", 0x27}, {&(0x7f0000000480)="3b98c0", 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bc", 0x97}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642082e6a1f24ae56a85b1ca9402e1f325ef41aab6a21391", 0x90}], 0x4}}], 0x3, 0xc0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e61"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e0200000091b317650fefc2bd40c05a823a57c452a3ebb43251f02b8f0ae0c2b6ad08892c346f26075395e7f4abe548eba6607c72a7e6b162742447ab98608dc7"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0) 23.047004376s ago: executing program 0 (id=836): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000fc0)={[0x8000000000000000]}, &(0x7f0000001000), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000000000000000, 0x4880) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000120000ca339ba7000000000108000900fcffffff180001800700020076657468305f006f5f68"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x7, 0x5, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast1, @empty, {[@generic={0x83, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x3, [{@multicast2, 0x81}, {@rand_addr=0x64010101, 0x10}]}, @timestamp_addr={0x44, 0x34, 0x53, 0x1, 0x0, [{@loopback, 0x80}, {@multicast1, 0xfe}, {@multicast2, 0x3c3f90dd}, {@local, 0xa8bb}, {@rand_addr=0x64010100, 0x727}, {@multicast2, 0x100}]}, @timestamp={0x44, 0x14, 0xed, 0x0, 0x9, [0x4, 0x7fffffff, 0x7, 0x0]}]}}}}}) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'virt_wifi0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r4, 0x267a4e37}, 0xc) 22.290361568s ago: executing program 1 (id=837): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000080)={0x28, 0xb16405bdec0730cd, r1, r1, 0x2aae75, 0xfffffffffffffffe, 0xc, 0x2f98d6}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x33, 0x5, &(0x7f0000000040)={0x11, "652519cab69b834ff923864685572548bca2a1406d186ff7ef4dd45197f36d2972"}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r7, 0x303, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x84) read$FUSE(r6, 0x0, 0xfffffcd5) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x10}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/oops_count', 0x100, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x2f126000) cachestat(r5, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r5, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x9a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x5d, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r11, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r10, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r12, &(0x7f0000000380)={0x38}, 0x38, 0x0) 21.559847079s ago: executing program 0 (id=838): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket(0x1, 0x3, 0xffffffff) r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0xc48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x11}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0xbb8, 0x2, [@TCA_FW_ACT={0xbb4, 0x4, [@m_gact={0xbb0, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0xb81, 0x6, "f91b071cf086b8f8d21cb2d3ce7be21873a31e974b977fecb0845571f7a6eded056dcc6cc2c0dcee6bfa717a91ba484f57d7d3690c1ecabbc07999f99d4e6c2a0527b3af348f18003be60abb0efa8680f16f4ef212fd4b074657befc7058d474f32470b9b7c32bf3c453ba10e6a4957ef045eed2920a77b8d8fd1a791e6c56434cb4f5cd4ec34efd2470d8b5bf187b73143cbbf529848ed84964bbec14eeadb07f7a42425a5c50d4a8e6377d99dc7d37c3401e6d38e87c626f7ef1089787efe39bf06bab85c3210436ae95fb302d214a9bc57d3a700562214a8296e74b8194f5474bba2061f8bca5c92de39ebc1a3880bbd758fbf7432fc336b879e00d177c8ece8a99382a6bfa20937ec27fc833292986fe09152a1e33021ad3d70a020a65be3814579fa69997f3ada6770e0b2ecafaf07ce2cf97878d718d8ae9c25dfcb86e46e8eb3d8407f3e73ee882beb4c9c400a2ab3fe7696ac9741c2d120e33c91669616be2c35ff5094f4bc6a5593c19e043dc4f295f35ea68459dd286f4f18aac2e1d1bfe2187558cee202a9936bc87090f353bfe43d8e2fd06eaa5fa7e14e1b57e010949edd0c739d6206af693531d98a3b3bcc926db984d5a26cf0c5c78bf1fe0126a4ddc49979800c95d0460b63866c1704854bd80a0093da82659fdb0cdee1fee9c1d673b8f26642cffe9361fb3395cbc3ab17e40cd5ea04d635c1e52f031ca83d7651a254e9e6dd6fc9428144d42f2b08f041caf4626c78e372dc0cfa6ceafae16f169c92276eb8ad319163d9160e54ccf86923ca67f2052ef8eb58945e4b0256dc7e4bb17b14f27a7eeeff3ada3e9374656dba2fcf55593988a49dbbf4cbe1baac7306d21639b90ce01e08915e28a0d7f032e5bdee2b9d3a1389c002906e5b0a9bcec1f11d9d3400f4c18ae3ad90406f0840b3f51104d67ba23368529b10e36e8eb33d2f0e339ecf46108799a61a6ee50fb5ceb1ccf802dde6767ec27918bc7237580ea078b12aee0e0f2000d3d1026003cdfe6c05070fde3d722cc0c7cb2756616a381ce9e2dad81db18152c41035baa9247ecca6870c9e8ecfd25cc63b8d6fe7c0cda91a1068685e1f5fbcf27f50ba2449e03a2b00debc8042caf0431dde21c3b8ae0d04b5d7524325deef1f069752b51616f2b44c06d20bb6497d187a83106efe78af84b494d368d4bd0c1c6a0887d69bf28ebdae807a087fc066f3c7173d07e81479c1c89d45618527c05e8d2bc25bff14ea1247d6f67d804eaeed31a9e641faac7f2d290604bb043cacb23f76293785473ad82665e29d1a91467a920edf12e081233394f35ea78d7ff4a2953b975d0549d9c64ff66ff0294d28f04c211d0135b51f56b1a46d238a480cc6b6edbf182ab6b524c29e435d5d27dad3b5b2c2421c33573af719a971a93aad51bb1ee74a9ee867ed588d3a7ffeffacaab430ca498620f26a088dbc07b3f1bbd701674a02558a428ebc7d693e259b41bb03a5f587e8d369ba27a6bf028ba6515c5a22637d9bc2aea0df483cf21e32bdd10df0692938df1968f71c05657db18d02e43e2e28530b5e99999ada954e03b028b4a77ee988f0dc658b1e49cc99b494961ec0178ed2ec86d64abc10117e8f84ab597e9ae8e8814c48cae51887e16964bd41fe925f65b514713257fef013989af7b49642977346b25fca90d4c18c557b850e06644ccd0050889cce7bf3354964c0945fd81a53d760037f4ce67df8baab41a114215ff6e3934ae3fbb7e6f39ce87b21b1798dea2bc44258c38314d830d57b2424bb12f611546c1172bbece9fbd5ce3519ad9a77cde69b7c27d35b0788a5c7199930800837edea6ce6743276867ad493839ea200f5f2f3a99a8b786e366f22bd63b9c38654d860ca05e4213f5c6e1c83b083cda5b8ac918bb755fe836106de06b8a98da805759065959ad537ca77c8905425fee60c157ef201f8e9f4faf63f897ecbb8c9b31bed44479e9c878a07b2644083d02cefe13cbdad0f45f05d9e9b42ac33a0ffeb35885facf0ded15e81df30526d90c81549c91615b0d3ad2fa4f4f04c7cde9a01f460d044a94481f359429c4b1e5c5146d21915d230012af597f1ec66abd73f4df9a7ea65ca76bca7a7dceb87662bfc6610cc40f8a6bc23a04f17e14ae90ec52503faa84b50adb62ebb6779f337ab942954e95f702a396cee9e7b09dc76a2d441842681ec17fca82088e1e826aa6635278eaf8eca1a0e7a834d21b2429bc958c62ab581fcf7d8a0391a24d58fb5d5f6ed8fdf7a73778d6becae292b6afb22b60d96051eb63754fe201bbb0ed0f22fbe9a7f8e2e119d5ec6e3a1792fea568b79288ac1ec6b301e7546b609e57ef6a48c237d3384035a2a42d8e661d4d7be2f92db80c074fa9f1d78ae2e9c9bbbd57c7009443ca465026e805e51661d5e7ab09c26aed363e0bb0ee76d4869ac7f25f5df76678f7f1a01330926897802b3c9f138e81d1cd525f3ae80afa0f170774f94588b96b48d02fdabd01164f9db7de6cbd100d743144fe8ca54bea803be33e26c458774ce8b8d0ced0321a3b97dde3004abe4a1e1b7db636f72c1af22dad1e6da8a44550373785a10b7436239f619769159c862729b46b10d9b52fe7ee33bc085f52d0883891501c01975a43e499092bbe75b49a1522650518941aae332d90562f09ca9122ce2113eed93f725543f510a67ac74dc64a25403d531b834fcce8c67816c2c246c77e39e54e469736d9f328cf96494373978348976b0e56a1268a563d84f7d0c77daf9228e8f7c355535397d71f5a9a9c23f3a4a390826e1ba435d60cca195a0d55ccaaff9ddacc1d86827efb8eb53bbc71db698cd00d8fdb89683f6d12a24dab9d47be40c2f4ae3ada4183f7f9e03f6617dd1cf0a61f0a54c490ebee12ad9ed68c52395ea09b398402b127c6e39e8451334c19ee05c6440048c2a914b7e0dc7b3f7dc9e651ac38b8976b9261873ec4f694def16c86f205dc15c3572f77a94b37b4202d4bdea7aefb9dc3a95aaf917b0cee9c2b7eec4dd2e21813c36d54c3499117c6fbd3027bca4bfa97bd9b474c33afe44eeb96f6675df5bfea58621f65c03a67ea0ce9722637a879897e52dac21be21545083d76f094ef32365396a89440eaaa105906624da10d51d9b5b717e448bc2af2fe752aa4a8b065754f807e173c7cb5f9e013dda7156dc10cec6994763820c157b4fe6bfd78240df1cb413261ee7bf1137f971a362bdc566c616d261fa99c558e1e4823abbd69f73109848c3cab85b63ec622d5bc80df3c7099ad5800e3dde13c40b03226350077610e1e2d5c9676f2477dac579c476f3de8d6379688ad2fda7a66d4e061c4402d91b01a1bf38794266f9cf383d590bcba8281673decda8f3640c578355fe29139c48701d1fc7a33ddbd6c5e9828e4afc6185d82b772dfc7484dbd28edf5a8786a684061e197846a35855a60cd1907bf8d2900f5e8468e75a678c4c11959146b6481e9d12362fbac3231469f97bad52df85df5c84a42a9634fb028ee211081ce9da808bf81a80617dd3ee0d8b49cf9eca6751cc948ccde86a1f637332f61f7e2568784032c57bcff9ffb3d02450234511835c1618a75d586ff3aabeaa571d85166adaae564f6e6274be8b70740e70111bd8f0928de26d9ce795be156a444d82414137c64c6b20e39a98b3cde8aff44bb83f55c9cd4691807525bd34dbae677d1d77c56e8d9e3344a7699ba28c88f9b9e81b188aafa5a599e72425f42128d2a554da5709414dcc266e26f9e65146ee3e442618a6ba0564ead80f6ab7125dc282d726f2c156294ee1e4511330fd526ae40e3fcc9c8a0a68e194826f2e053d2f51c83e459779e337e4395d3c3a368c755b22e0edb98629f6ee9485eb032ed699ced40bcca498c94d3c1294b842a69eb5c7c665b444f0bb457eb66c9d4d73f1291b9d7fed73b2f08074671aedfaa5a6709716bd4da5fc54739d244a738b3f3d9f166876bcc69f6cb60809658410d38477e2a2a1b64c1caadb311194a5de1abe99866870d1087401ba38ec7596ebefeb9b19931017d11dafed3cf915e8aa7db022452ad4e378efec3e50a1bd1f2ee84e5c2ce3e39ea7c0783808ad994e2ded486f993d08b3614e6a6e010dc386535ff936c66c5e752c994f8b9a3a2221fd18c49"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xc48}}, 0x24000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f00000002c0)={{@any, 0x44eb}, @any, 0x2, 0x3, 0x3, 0x506, 0x4, 0x2, 0x9}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000140)=[{r9, 0x21db}], 0x1, 0x0, 0x0, 0x0) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_enable(r10, &(0x7f0000000240)='1', 0x1) 21.394230919s ago: executing program 4 (id=839): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.331749841s ago: executing program 0 (id=840): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe, 0x2}, 0x0) r3 = socket(0x1e, 0x1, 0x0) listen(r3, 0x8) shutdown(r3, 0x2) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = fsopen(&(0x7f0000000080)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, 0x0) write$vhost_msg_v2(r5, 0x0, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000000)=""/215, 0xd7, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r5, &(0x7f0000000900)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000b4321f00000000000a0063001800", @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000009500000000000000"], 0x0, 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 19.870547887s ago: executing program 3 (id=843): write$ppp(0xffffffffffffffff, &(0x7f0000000400)="0aa19f155779bcb1dd672916c7c8772a95265958964f0569630e", 0x1a) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 19.784448347s ago: executing program 2 (id=844): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 19.443396084s ago: executing program 4 (id=845): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = eventfd2(0x0, 0x0) read$eventfd(r5, &(0x7f0000000040), 0x8) write$6lowpan_control(r1, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000000)) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xab, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x80, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0xd}) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008502"]) 19.12103393s ago: executing program 1 (id=846): syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x7}]}, 0x1, [{0x0, 0x0}]}) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) 18.732183533s ago: executing program 2 (id=847): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xffc5, 0xc, 0x4, 0x1, 0x2, "440d6f2ab2489ad1"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000008010100000000000000000e00ffff0900010073797a3000"], 0x2c}}, 0x40000c0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xffc5, 0xc, 0x4, 0x1, 0x2, "440d6f2ab2489ad1"}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) socket$inet6(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) munlockall() (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000008010100000000000000000e00ffff0900010073797a3000"], 0x2c}}, 0x40000c0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 18.0722595s ago: executing program 2 (id=848): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000fc0)={[0x8000000000000000]}, &(0x7f0000001000), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c010}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8000000000000000, 0x4880) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000120000ca339ba7000000000108000900fcffffff180001800700020076657468305f006f5f68"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x7, 0x5, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast1, @empty, {[@generic={0x83, 0x2}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x3, [{@multicast2, 0x81}, {@rand_addr=0x64010101, 0x10}]}, @timestamp_addr={0x44, 0x34, 0x53, 0x1, 0x0, [{@loopback, 0x80}, {@multicast1, 0xfe}, {@multicast2, 0x3c3f90dd}, {@local, 0xa8bb}, {@rand_addr=0x64010100, 0x727}, {@multicast2, 0x100}]}, @timestamp={0x44, 0x14, 0xed, 0x0, 0x9, [0x4, 0x7fffffff, 0x7, 0x0]}]}}}}}) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'virt_wifi0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r4, 0x267a4e37}, 0xc) 17.778007909s ago: executing program 4 (id=849): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x82, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xf7ff}, 0x8) r1 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x5, 0xd13, 0x80000000, {0x77359400}, {}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1}, 0x20, 0x3, 0x0, 0x0, "ecf8e8a8437c0b323d3884310e2eb6ec3080157dd99ac49221b1c8d82d1c6b338a3f3569bf9760c94b503c38bcb6c2e7ff17e983ad91d68ac0d4aa459771e884"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004090) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000840)={0x0, 0x2, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x3, 0x4, {0x8, @usage=0x4, 0x0, 0xffffffffffffffff, 0xe, 0x5, 0x3, 0x0, 0x0, @usage, 0xa, 0xffff00, [0x4, 0x763, 0xff, 0x9, 0x5, 0xb]}, {0x2, @usage=0x6, r5, 0x2, 0x8000000000000001, 0x0, 0x3, 0x3, 0x9d, @struct={0x2206, 0x36}, 0x10, 0x6, [0x8, 0x80000001, 0x1, 0x8, 0x100000001, 0xfffffffffffffffe]}, {0xfffffffffffffffc, @struct={0x677d1314, 0x5}, 0x0, 0x0, 0x9, 0xc359, 0x7, 0x0, 0x518, @usage=0x800, 0x81, 0x5, [0xe309, 0x8000000000000000, 0x7, 0x3, 0xffffffff, 0xa000000000]}, {0x9e, 0x9, 0x7fffffffffffffff}}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x32, 0x40, 0x1a, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x72, 0x3, 0x1, {0x22, 0x16b}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x9, 0xe0}}}}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x0, 0x10, 0x4, 0x7f, 0x10, 0x1}, 0x48, &(0x7f00000011c0)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "637a2b258fadb52683067608b793b447"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "111f2b0b2468a2455f5ed51fc7d2b7b0"}, @ssp_cap={0x14, 0x10, 0xa, 0x81, 0x2, 0x100, 0xf000, 0x8000, [0x3f00, 0xff3ff0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0xa, 0x40}]}, 0x1, [{0x35, &(0x7f0000001240)=@string={0x35, 0x3, "9058fe931418cc0674595fbb98a80fa1fbdc2e81e7ad16725b9d226899b2402add59bfc9d8bb4bf64cfa03a60dc95600c2ea9c"}}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5a, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x31, 0xd9, 0x40, 0x0, 0x7}}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf4}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000180)='GPL\x00', 0x6, 0x70, &(0x7f00000001c0)=""/112, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x4, 0x9}, {0x1, 0x1, 0x7, 0x5}, {0x4, 0x3, 0xd, 0x4}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='fscache_active\x00', r7, 0x0, 0x8}, 0x18) 17.632940441s ago: executing program 1 (id=850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket(0x1, 0x3, 0xffffffff) r3 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0xc48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x11}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0xbb8, 0x2, [@TCA_FW_ACT={0xbb4, 0x4, [@m_gact={0xbb0, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0xb81, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xc48}}, 0x24000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000002c0)={{@any, 0x44eb}, @any, 0x2, 0x3, 0x3, 0x506, 0x4, 0x2, 0x9}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000140)=[{r8, 0x21db}], 0x1, 0x0, 0x0, 0x0) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000000240)='1', 0x1) 17.385150857s ago: executing program 1 (id=851): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x800001, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) 17.383747482s ago: executing program 3 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100fffd08000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000043c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c000080080003"], 0xc8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@setlink={0xac, 0x13, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x91}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_PHYS_PORT_ID={0x1c, 0x22, "894009f283a8309955ec7a424b474d8e019d288cfce1df08"}, @IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5bbbecbd84c4bb05fc87ed2aa1afe58e"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_PROFILE={0xc, 0x2, 'nl80211\x00'}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f223d64070b2d58d34a6e734f679ecfb"}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff9}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xf}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000004) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) write$vhost_msg_v2(r5, &(0x7f0000000240)={0x2, 0x0, {0x0, 0x0, &(0x7f00000001c0)=""/83, 0x3, 0x1}}, 0x48) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 17.366941429s ago: executing program 0 (id=853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x9, 0x6, 0x6, 0x3}, {0x7, 0x6, 0x2, 0x1}, {0x8, 0xef, 0x9, 0x200}, {0x2, 0xc, 0x0, 0x8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000280)=""/118) write$nci(r3, 0x0, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000280)="ef559c94", 0x4}], 0x2, 0xa, 0x8) lseek(r1, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470", 0x8b}, {&(0x7f0000000180)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2", 0x27}, {&(0x7f0000000480)="3b98c0", 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bc", 0x97}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642082e6a1f24ae56a85b1ca9402e1f325ef41aab6a21391", 0x90}], 0x4}}], 0x3, 0xc0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e61"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e0200000091b317650fefc2bd40c05a823a57c452a3ebb43251f02b8f0ae0c2b6ad08892c346f26075395e7f4abe548eba6607c72a7e6b162742447ab98608dc7"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0) 17.097971007s ago: executing program 2 (id=854): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x4a, &(0x7f0000000180), &(0x7f0000000200)=0x8) msgsnd(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB], 0x8, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000dc0), 0x386) read$char_usb(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read(r1, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) socket$inet(0x2, 0x80000, 0xff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r10, 0x0, 0x26, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x854, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x820, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x804, 0x2, [@m_connmark={0x1b4, 0x1a, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x8, 0x5, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7f, 0x1, 0x0, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x2, 0xffffffff, 0xb0bc}, 0x47}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x7ff, 0x10000004, 0x401}, 0x4}}, @TCA_CONNMARK_PARMS={0x70, 0x1, {{0x7, 0x4, 0xfffffffffffffffa, 0x9, 0x9e}}}]}, {0xf8, 0x6, "a98e39453265d1223bc23b33af60bdfc63b4941f8ca8c1140d130c6810f6f384b9f0cff689b677b09637ac442d2b83bcd524ecfdf1dda9c166231e1d0c987bd1dd7ee7b21497a6cbb45b73a3cb19388e6c720e7fab4943838ced4c3c7cb8c50a7bb95561fa3cb6fa859f148f48063e9373355dd6dc0e77b353e98b45237414fec0203d102976297a2986f8c9b3e8af7f20b69a1298c449dd959997d57bc90940d7d4d4be7ea8e79311e75ed01336e5c9cc027d13512679c8cba26cdaadfe2d4f5d769cb40f1e459f2020b4abc3eb8f828123d04bc27e86d20f5e18d226dcf5dadaf5a495a85319a90a61978b67aeeef93416f735"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x170, 0x1e, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '\xa1[-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xff, 0x4, 0x6, 0xfffffffd, 0x226}}, @TCA_DEF_DATA={0x7, 0x3, '$*\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9, 0x2, 0x1, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x1, 0x2, 0x5, 0xfffffff6}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xa2, 0x10000000, 0x7, 0x5}}]}, {0xca, 0x6, "742e0a8b4ab92baa683eca25efadd5a675a2d6526cfc06714ebddac35d9fe3d10b653d8f33aa8f7d377d8f22379871d3e89f4374104ac038450a79669e0bf832f7ced943a9cc799b69d3577faf1a9b652805980f3aee9d110df859f99f80c1979793d2eefe16f38aac411c40ec9b1b8a40115bf74546aa5d0477cd3c9dd6642a5c693bae045453c2181fa2ca460f14d06b4348424445c66e48dba5c1c94845732bdc9cc157be54b7b4c56b49af090261c62313f057d5d1e6e453f4dce19da1ef4f8035a9f8cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x1b4, 0xa, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x3, 0x80000000, 0x8}, @loopback, @private=0xa010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x9, 0x0, 0x6, 0x10}, @multicast1, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x37c, 0xffffffffcffffffd, 0xa01, 0x614f}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xe60, 0x6, 0x6, 0x90}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff}}]}, {0xe9, 0x6, "41e815aec3412e61ff13fe1adf8efd51c2fbb4998ec526a08e3a982d941b1afd9936cae5f34c39648bed525a01c3fa0f8a25a5ed030f837ac68851a780a0cc12a0e668f5d5a94cf7cbed2d4ac657a935060e226db142a5c35628f187265b955b699cfaf8eb389054247cf5ad37a508daca8a0ed4a57b3d97404590eebac503905297d285939a47deadab0538190158bfda32260c8ba6b06989e9b4bfb7847ed9e14c90e6e19b55f765aca208362419bf2eb3cd38bf5f82b28b7c9e973ae3fad2208e0318b12aa4b9a3ae789b966fcbd8ce555b73d086532ae94daba11c42a7d901985fa500"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x8c, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x3ff, 0x2, 0xe, 0x7}}]}, {0x48, 0x6, "fd59974aa80de14f944426e6c708e7ca9af601f4a2e924345c08e5a95480612d349aad8ced1fc759e0a44068c2956967794875fab1f0dd86726a4aacabcb98c6c2898a2a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xc0, 0xb, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0xd636aef4fbf96816}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xa, 0x3ff, 0x1000000f, 0x2, 0x1}}]}, {0x3a, 0x6, "80acebfa5f5ae83553725118f5d09dd8f8aec0e2ee423c772c367645b117512c1167fdad25510fe4edd473112dfeffee28b2afa5c436"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0x182, 0x19, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe4, 0xf, 0x0, 0x8000, 0x4}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x5, 0x200, 0x7fff}, 0xb8b5}}]}, {0xc1, 0x6, "9119ef39af05c9567cc8ee204acc778591e033f66e4c562dcce42102143496b26b6e7b9d6277098a28f0850693a462b0dd1c87905938cda44225543134d0974c780d439a35f3b9375a66fa6e4f932038180b91fbd10977e3fb4c4b884573f1a5ade9c559507007c049af672060c4029ecaacfe62797c8aac4f2e23c418692caf4b386644d7f834551c2abd34c467ae2bac1afd1dfdf56c803b920896aa4e53d97c9ab4562ed92bb7efe8953bc0d2109ca04fa8a10bf0b1ff591daeabdd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xb0, 0x9, 0x0, 0x0, {{0x7}, {0x48}, {0x44, 0x6, "7ac5d2f3ac8bb6720ca273e21da242a7ff6fe52bd048dcbd7742bfd1593f0f172e8a2f261798fa0187cc67c32d480cf4d770842dde875a9a29b8fbc73c665ec9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x854}}, 0x0) 16.284453141s ago: executing program 3 (id=855): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x4c, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1000000a, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xa9a4], [0x0, 0x2, 0x0, 0x0, 0x2, 0x733, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x10080000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x6, 0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffffd, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6493, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x6, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffff7f, 0x8000000, 0x400, 0x0, 0x3, 0xfffffffe, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x189240, 0x0) 16.156321042s ago: executing program 3 (id=856): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x882c, &(0x7f0000000180)=ANY=[], 0x6, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x604000000000000) 16.147523029s ago: executing program 3 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x2c, 0x1a, 0x99, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x14, 0x1, 0xff, 0x2, 0xc8, 0x5, 0x800}, [@RTA_MARK={0x8, 0x10, 0x43}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x24, 0x6a, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8e04"]) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40081, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 15.992652097s ago: executing program 4 (id=858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x9, 0x6, 0x6, 0x3}, {0x7, 0x6, 0x2, 0x1}, {0x8, 0xef, 0x9, 0x200}, {0x2, 0xc, 0x0, 0x8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000280)=""/118) write$nci(r3, 0x0, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000280)="ef559c94", 0x4}], 0x2, 0xa, 0x8) lseek(r1, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470", 0x8b}, {&(0x7f0000000180)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2", 0x27}, {&(0x7f0000000480)="3b98c0", 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bc", 0x97}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642082e6a1f24ae56a85b1ca9402e1f325ef41aab6a21391", 0x90}], 0x4}}], 0x3, 0xc0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e0200000091b317650fefc2bd40c05a823a57c452a3ebb43251f02b8f0ae0c2b6ad08892c346f26075395e7f4abe548eba6607c72a7e6b162742447ab98608dc7"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0) 15.930269129s ago: executing program 1 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 15.869788307s ago: executing program 2 (id=860): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x800}, &(0x7f0000000080)=0x8) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000100)) 15.808786197s ago: executing program 1 (id=861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfafb, 0x2, [0x9, 0xff]}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a700000020000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.764416143s ago: executing program 2 (id=862): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x40}, 0x1, 0xba01}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x100800, 0xfffe, 0x0, 0x3, 0x8, 0x0, 0x0, 0x8, 0xfffff249}}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r4, r5, 0x3, 0x707a, 0x2, 0x804, {0x1000ac7c, 0x1, 0x3, 0x3, 0xf47, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1003, 0x7f, 0x400a, 0xffffffff, "fe1d000034130007d700007059816797a47e060000000000000000004000"}}) 1.724569506s ago: executing program 32 (id=853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x9, 0x6, 0x6, 0x3}, {0x7, 0x6, 0x2, 0x1}, {0x8, 0xef, 0x9, 0x200}, {0x2, 0xc, 0x0, 0x8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000280)=""/118) write$nci(r3, 0x0, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000280)="ef559c94", 0x4}], 0x2, 0xa, 0x8) lseek(r1, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470", 0x8b}, {&(0x7f0000000180)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2", 0x27}, {&(0x7f0000000480)="3b98c0", 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bc", 0x97}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642082e6a1f24ae56a85b1ca9402e1f325ef41aab6a21391", 0x90}], 0x4}}], 0x3, 0xc0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e61"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e0200000091b317650fefc2bd40c05a823a57c452a3ebb43251f02b8f0ae0c2b6ad08892c346f26075395e7f4abe548eba6607c72a7e6b162742447ab98608dc7"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0) 224.253521ms ago: executing program 33 (id=861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfafb, 0x2, [0x9, 0xff]}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a700000020000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 177.39291ms ago: executing program 34 (id=862): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x40}, 0x1, 0xba01}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x100800, 0xfffe, 0x0, 0x3, 0x8, 0x0, 0x0, 0x8, 0xfffff249}}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r4, r5, 0x3, 0x707a, 0x2, 0x804, {0x1000ac7c, 0x1, 0x3, 0x3, 0xf47, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1003, 0x7f, 0x400a, 0xffffffff, "fe1d000034130007d700007059816797a47e060000000000000000004000"}}) 107.674915ms ago: executing program 35 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x2c, 0x1a, 0x99, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x14, 0x1, 0xff, 0x2, 0xc8, 0x5, 0x800}, [@RTA_MARK={0x8, 0x10, 0x43}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x24, 0x6a, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8e04"]) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x1, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x84}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x40081, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 0s ago: executing program 36 (id=858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000040)=[{0x9, 0x6, 0x6, 0x3}, {0x7, 0x6, 0x2, 0x1}, {0x8, 0xef, 0x9, 0x200}, {0x2, 0xc, 0x0, 0x8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000280)=""/118) write$nci(r3, 0x0, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000280)="ef559c94", 0x4}], 0x2, 0xa, 0x8) lseek(r1, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470", 0x8b}, {&(0x7f0000000180)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2", 0x27}, {&(0x7f0000000480)="3b98c0", 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118fb170c1d", 0x53}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd0c398ab501a6044e76a0569297449768bc", 0x97}, {&(0x7f0000000b80)="5e93f51c80552080613760264b6008795ee1e8b68965025b8a5b43529d3a64b1947ab79563d895ac06f8e1df8ce3befc5707528570ed617ff1c87305dad0d429bb7245f67ac66435bd28dd2989c1a8a9dffb197f60548f295c14a8a9bdaa0691fe451b9b026a6ca951ad2dd50d8a2fab7a2c88ca6cbda171642082e6a1f24ae56a85b1ca9402e1f325ef41aab6a21391", 0x90}], 0x4}}], 0x3, 0xc0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000"], 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e0200000091b317650fefc2bd40c05a823a57c452a3ebb43251f02b8f0ae0c2b6ad08892c346f26075395e7f4abe548eba6607c72a7e6b162742447ab98608dc7"], 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3", 0x24, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): nder of the config [ 226.336990][ T47] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 226.346601][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 226.346648][ T5893] input: failed to attach handler mousedev to device input30, error: -5 [ 226.359753][ T47] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 226.400944][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 226.447109][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 226.470536][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.486952][ T5893] usb 1-1: USB disconnect, device number 37 [ 226.490468][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 226.502550][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.511847][ T5895] usb 2-1: Product: syz [ 226.551813][ T5895] usb 2-1: Manufacturer: syz [ 226.559227][ T5895] usb 2-1: SerialNumber: syz [ 226.615352][ T5895] usb 2-1: config 0 descriptor?? [ 226.626411][ T7773] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 226.735620][ T5895] rc_core: IR keymap rc-xbox-dvd not found [ 226.741552][ T5895] Registered IR keymap rc-empty [ 226.749460][ T5895] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 226.759943][ T5895] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 226.782802][ T7784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.810308][ T7784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.904222][ T5939] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 226.921736][ T5893] usb 2-1: USB disconnect, device number 37 [ 226.921859][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 226.946023][ T6720] udevd[6720]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 227.044365][ T5939] usb 3-1: device descriptor read/64, error -71 [ 227.307472][ T5939] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 227.493966][ T5939] usb 3-1: device descriptor read/64, error -71 [ 227.539678][ T7793] FAULT_INJECTION: forcing a failure. [ 227.539678][ T7793] name failslab, interval 1, probability 0, space 0, times 0 [ 227.557443][ T7793] CPU: 0 UID: 0 PID: 7793 Comm: syz.1.521 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 227.557476][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 227.557490][ T7793] Call Trace: [ 227.557498][ T7793] [ 227.557508][ T7793] dump_stack_lvl+0x189/0x250 [ 227.557548][ T7793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.557580][ T7793] ? __pfx__printk+0x10/0x10 [ 227.557607][ T7793] ? __pfx___might_resched+0x10/0x10 [ 227.557632][ T7793] should_fail_ex+0x414/0x560 [ 227.557679][ T7793] should_failslab+0xa8/0x100 [ 227.557709][ T7793] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 227.557737][ T7793] ? __alloc_skb+0x112/0x2d0 [ 227.557767][ T7793] __alloc_skb+0x112/0x2d0 [ 227.557796][ T7793] netlink_sendmsg+0x5c6/0xb30 [ 227.557831][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.557858][ T7793] ? aa_sock_msg_perm+0x94/0x160 [ 227.557883][ T7793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.557907][ T7793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.557931][ T7793] __sock_sendmsg+0x219/0x270 [ 227.557992][ T7793] ____sys_sendmsg+0x505/0x830 [ 227.558025][ T7793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.558069][ T7793] ? import_iovec+0x74/0xa0 [ 227.558102][ T7793] ___sys_sendmsg+0x21f/0x2a0 [ 227.558131][ T7793] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.558197][ T7793] ? __fget_files+0x2a/0x420 [ 227.558224][ T7793] ? __fget_files+0x3a0/0x420 [ 227.558262][ T7793] __x64_sys_sendmsg+0x19b/0x260 [ 227.558292][ T7793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.558337][ T7793] ? do_syscall_64+0xba/0x210 [ 227.558368][ T7793] do_syscall_64+0xf6/0x210 [ 227.558394][ T7793] ? clear_bhb_loop+0x45/0xa0 [ 227.558420][ T7793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.558441][ T7793] RIP: 0033:0x7fb72ed8e969 [ 227.558459][ T7793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.558479][ T7793] RSP: 002b:00007fb72fbfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.558502][ T7793] RAX: ffffffffffffffda RBX: 00007fb72efb5fa0 RCX: 00007fb72ed8e969 [ 227.558517][ T7793] RDX: 000000000000c0c0 RSI: 0000200000000080 RDI: 0000000000000006 [ 227.558530][ T7793] RBP: 00007fb72fbfa090 R08: 0000000000000000 R09: 0000000000000000 [ 227.558543][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.558557][ T7793] R13: 0000000000000000 R14: 00007fb72efb5fa0 R15: 00007fb72f0dfa28 [ 227.558589][ T7793] [ 227.608683][ T5939] usb usb3-port1: attempt power cycle [ 227.611957][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.623873][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 227.984185][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 227.992200][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.003489][ T9] usb 1-1: config 5 has an invalid interface number: 225 but max is 0 [ 228.012815][ T9] usb 1-1: config 5 has no interface number 0 [ 228.019098][ T9] usb 1-1: config 5 interface 225 has no altsetting 0 [ 228.028793][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=89.94 [ 228.038162][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.046358][ T9] usb 1-1: Product: syz [ 228.050653][ T9] usb 1-1: Manufacturer: syz [ 228.055383][ T9] usb 1-1: SerialNumber: syz [ 228.094173][ T5939] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 228.124718][ T5939] usb 3-1: device descriptor read/8, error -71 [ 228.133990][ T5893] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 228.296449][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.309587][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.323872][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.225/input/input32 [ 228.333956][ T5893] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 228.343050][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.358255][ T5187] bcm5974 1-1:5.225: could not read from device [ 228.364063][ T5939] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 228.366019][ T5893] usb 2-1: config 0 descriptor?? [ 228.380442][ T5187] bcm5974 1-1:5.225: could not read from device [ 228.391438][ T9] usb 1-1: USB disconnect, device number 38 [ 228.402431][ T5939] usb 3-1: device descriptor read/8, error -71 [ 228.404208][ T5187] bcm5974 1-1:5.225: could not read from device [ 228.534250][ T5939] usb usb3-port1: unable to enumerate USB device [ 228.788905][ T5895] usb 5-1: USB disconnect, device number 38 [ 228.828856][ T5893] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 228.873275][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 229.333993][ T5895] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 229.377239][ T5907] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 229.426155][ T7808] netlink: 11 bytes leftover after parsing attributes in process `syz.2.527'. [ 229.515501][ T5895] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.525776][ T5895] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.535916][ T5895] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.553490][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.562871][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 229.568434][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.578099][ T5895] usb 1-1: Product: syz [ 229.582638][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 229.594431][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.604691][ T5895] usb 1-1: Manufacturer: syz [ 229.609352][ T5895] usb 1-1: SerialNumber: syz [ 229.614835][ T5907] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.630842][ T5895] hub 1-1:1.0: bad descriptor, ignoring hub [ 229.641095][ T5895] hub 1-1:1.0: probe with driver hub failed with error -5 [ 229.648455][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.650744][ T5893] usb 2-1: USB disconnect, device number 38 [ 229.678144][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.702697][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.735153][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 229.837930][ T5895] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 229.894175][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 229.914469][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 229.923222][ T9] usb 3-1: config 0 has no interface number 0 [ 229.934406][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.948949][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 229.973115][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 229.988155][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.999311][ T9] usb 3-1: Product: syz [ 230.003574][ T9] usb 3-1: Manufacturer: syz [ 230.013252][ T9] usb 3-1: SerialNumber: syz [ 230.028837][ T9] usb 3-1: config 0 descriptor?? [ 230.042307][ T7808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.062866][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 230.085957][ T7813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.529'. [ 230.122244][ T7813] ip6tnl1: entered promiscuous mode [ 230.127836][ T7813] ip6tnl1: entered allmulticast mode [ 230.256556][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.274943][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.352928][ T9] usb 3-1: USB disconnect, device number 54 [ 230.496033][ T7804] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 230.878427][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 230.947331][ T5890] usb 1-1: USB disconnect, device number 39 [ 230.985895][ T5890] usblp0: removed [ 231.004063][ T5895] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 231.155971][ T7824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.164793][ T7824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.177941][ T5895] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.194377][ T7824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.212029][ T5895] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.224523][ T7824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.230344][ T5895] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.245257][ T5895] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 231.263064][ T5895] usb 2-1: Product: syz [ 231.270197][ T5895] usb 2-1: Manufacturer: syz [ 231.289530][ T7824] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.302540][ T5895] hub 2-1:4.0: USB hub found [ 231.498110][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.530985][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.572460][ T5895] hub 2-1:4.0: 6 ports detected [ 231.591001][ T5895] hub 2-1:4.0: insufficient power available to use all downstream ports [ 231.739446][ T5890] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 231.779870][ T5895] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 231.834711][ T5895] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 231.896001][ T5895] usb 2-1: USB disconnect, device number 39 [ 231.937260][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.983730][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.018974][ T5890] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 232.036904][ T5890] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 232.049270][ T5890] usb 3-1: Manufacturer: syz [ 232.080151][ T5890] usb 3-1: config 0 descriptor?? [ 232.111793][ T5907] usb 5-1: usb_control_msg returned -71 [ 232.136832][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 232.177540][ T5907] usb 5-1: USB disconnect, device number 39 [ 232.214339][ T5939] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 232.373978][ T5939] usb 1-1: device descriptor read/64, error -71 [ 232.540282][ T5890] usbhid 3-1:0.0: can't add hid device: -71 [ 232.590840][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.644754][ T5939] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 232.684371][ T5890] usb 3-1: USB disconnect, device number 55 [ 232.815712][ T5939] usb 1-1: device descriptor read/64, error -71 [ 232.822202][ T5907] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 232.945126][ T5939] usb usb1-port1: attempt power cycle [ 233.054445][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 233.102641][ T5907] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 233.120255][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.134031][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 233.148338][ T5907] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 233.158158][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.172592][ T5907] usb 5-1: config 0 descriptor?? [ 233.184154][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.254136][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.254562][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.284263][ T5939] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 233.314889][ T5939] usb 1-1: device descriptor read/8, error -71 [ 233.334523][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.554699][ T5939] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 233.597638][ T5939] usb 1-1: device descriptor read/8, error -71 [ 233.774183][ T5939] usb usb1-port1: unable to enumerate USB device [ 233.800573][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.540'. [ 233.811666][ T7849] bridge_slave_1: left allmulticast mode [ 233.823482][ T7849] bridge_slave_1: left promiscuous mode [ 233.832875][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.873408][ T7849] bridge_slave_0: left allmulticast mode [ 233.879945][ T7849] bridge_slave_0: left promiscuous mode [ 233.887235][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.905674][ T5890] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 234.063868][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 234.076341][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.088170][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.098798][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.117333][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.129227][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.155016][ T5890] usb 2-1: config 0 descriptor?? [ 234.370586][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 234.379561][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 234.396276][ T5890] usb 2-1: USB disconnect, device number 40 [ 234.503870][ T5939] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 234.655830][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.673410][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.684468][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 234.694412][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.715568][ T5939] usb 3-1: config 0 descriptor?? [ 235.041629][ T7866] macvtap1: entered promiscuous mode [ 235.050850][ T7866] vlan0: entered promiscuous mode [ 235.056927][ T7866] macvtap1: entered allmulticast mode [ 235.062694][ T7866] vlan0: entered allmulticast mode [ 235.068319][ T7866] veth0_vlan: entered allmulticast mode [ 235.153973][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 235.213628][ T5939] logitech-djreceiver 0003:046D:C52F.0013: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.2-1/input0 [ 235.293893][ T9] usb 1-1: device descriptor read/64, error -71 [ 235.407447][ T5939] usb 3-1: USB disconnect, device number 56 [ 235.554081][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 235.700914][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 235.708078][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 235.729600][ T7868] fido_id[7868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 235.742293][ T5907] usb 5-1: USB disconnect, device number 40 [ 235.744663][ T9] usb 1-1: device descriptor read/64, error -71 [ 236.014173][ T9] usb usb1-port1: attempt power cycle [ 236.090266][ T7878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.118532][ T7878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.138835][ T7878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.154246][ T7878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.171346][ T7878] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 236.195754][ T5907] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 236.267586][ T7888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.553'. [ 236.404637][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.453602][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.493972][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 236.553418][ T9] usb 1-1: device descriptor read/8, error -71 [ 236.564040][ T5907] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 236.593502][ T5907] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 236.607102][ T5907] usb 5-1: Manufacturer: syz [ 236.663346][ T5907] usb 5-1: config 0 descriptor?? [ 236.953988][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 237.023981][ T5835] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 237.073048][ T9] usb 1-1: device descriptor read/8, error -71 [ 237.159824][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 237.175593][ T5835] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.184560][ T9] usb usb1-port1: unable to enumerate USB device [ 237.191778][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 237.199984][ T5835] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 237.207551][ T5907] usb 5-1: USB disconnect, device number 41 [ 237.218118][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.243321][ T5835] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 237.261440][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 237.287934][ T5835] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 237.315052][ T5835] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.331014][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.350731][ T5835] usb 3-1: Product: syz [ 237.355143][ T5893] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 237.362918][ T5835] usb 3-1: Manufacturer: syz [ 237.375957][ T5835] cdc_wdm 3-1:1.0: skipping garbage [ 237.384819][ T5835] cdc_wdm 3-1:1.0: skipping garbage [ 237.390684][ T5835] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 237.513871][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 237.522394][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.536662][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.546923][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.562208][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.571370][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.594067][ T5893] usb 2-1: config 0 descriptor?? [ 237.692255][ T30] kauditd_printk_skb: 755 callbacks suppressed [ 237.692276][ T30] audit: type=1326 audit(1746834264.327:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.2.555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f443838e969 code=0x0 [ 237.830597][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 237.842799][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 237.856951][ T5893] usb 2-1: USB disconnect, device number 41 [ 238.054085][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.134379][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.214160][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.214944][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 238.220332][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 239.224025][ T5907] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 239.399128][ T5907] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 239.408570][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.417070][ T5907] usb 1-1: Product: syz [ 239.421657][ T5907] usb 1-1: Manufacturer: syz [ 239.426688][ T5907] usb 1-1: SerialNumber: syz [ 239.439353][ T5907] usb 1-1: config 0 descriptor?? [ 239.449416][ T5907] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 239.659107][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 239.711069][ T5939] usb 3-1: USB disconnect, device number 57 [ 239.724315][ T7926] random: crng reseeded on system resumption [ 239.990281][ T7941] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 240.162928][ T7943] libceph: resolve ' [ 240.162928][ T7943] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 240.162928][ T7943] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 240.235577][ T7943] netlink: 52 bytes leftover after parsing attributes in process `syz.4.568'. [ 240.269393][ T5907] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 240.278524][ T7943] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 240.289782][ T5907] sq905c 1-1:0.0: Reading version command failed [ 240.300565][ T5907] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 240.318124][ T5907] usb 1-1: USB disconnect, device number 48 [ 240.703955][ T5893] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 240.753992][ T5835] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 240.956141][ T5893] usb 2-1: no configurations [ 241.005063][ T5835] usb 3-1: device descriptor read/64, error -71 [ 241.044671][ T5893] usb 2-1: can't read configurations, error -22 [ 241.203868][ T5893] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 241.284512][ T5835] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 241.432269][ T5893] usb 2-1: no configurations [ 241.437318][ T5835] usb 3-1: device descriptor read/64, error -71 [ 241.450879][ T5893] usb 2-1: can't read configurations, error -22 [ 241.468374][ T5893] usb usb2-port1: attempt power cycle [ 241.538028][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 241.584858][ T5835] usb usb3-port1: attempt power cycle [ 241.755674][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.766112][ T10] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 241.782166][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.824277][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 241.838595][ T5893] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 241.851287][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 241.879475][ T5893] usb 2-1: no configurations [ 241.884490][ T5893] usb 2-1: can't read configurations, error -22 [ 241.892397][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 241.910005][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.923128][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.934589][ T10] usb 5-1: Product: syz [ 241.938894][ T10] usb 5-1: Manufacturer: syz [ 241.973988][ T5835] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 242.018199][ T5893] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 242.032303][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 242.038232][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 242.114726][ T10] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 242.124335][ T5893] usb 2-1: no configurations [ 242.129175][ T5893] usb 2-1: can't read configurations, error -22 [ 242.172797][ T5835] usb 3-1: device descriptor read/8, error -71 [ 242.190067][ T5893] usb usb2-port1: unable to enumerate USB device [ 242.417118][ T30] audit: type=1326 audit(1746834269.057:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.4.575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x0 [ 242.467490][ T5893] usb 5-1: USB disconnect, device number 42 [ 242.543879][ T5835] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 242.565418][ T5835] usb 3-1: device descriptor read/8, error -71 [ 242.683025][ T5835] usb usb3-port1: unable to enumerate USB device [ 243.250406][ T7976] FAULT_INJECTION: forcing a failure. [ 243.250406][ T7976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.324091][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.0.576 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 243.324126][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 243.324139][ T7976] Call Trace: [ 243.324146][ T7976] [ 243.324155][ T7976] dump_stack_lvl+0x189/0x250 [ 243.324208][ T7976] ? __lock_acquire+0xaac/0xd20 [ 243.324271][ T7976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.324297][ T7976] ? __pfx__printk+0x10/0x10 [ 243.324317][ T7976] ? __might_fault+0xb0/0x130 [ 243.324354][ T7976] should_fail_ex+0x414/0x560 [ 243.324390][ T7976] _copy_from_user+0x2d/0xb0 [ 243.324421][ T7976] do_sys_poll+0x239/0x1050 [ 243.324461][ T7976] ? __pfx_do_sys_poll+0x10/0x10 [ 243.324593][ T7976] ? rcu_read_lock_any_held+0xb3/0x120 [ 243.324611][ T7976] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 243.324631][ T7976] ? vfs_write+0x8d8/0xa90 [ 243.324677][ T7976] ? set_user_sigmask+0xc7/0x1b0 [ 243.324699][ T7976] ? __pfx_set_user_sigmask+0x10/0x10 [ 243.324717][ T7976] ? do_sys_openat2+0x154/0x1c0 [ 243.324851][ T7976] __se_sys_ppoll+0x1ff/0x260 [ 243.324891][ T7976] ? __pfx___se_sys_ppoll+0x10/0x10 [ 243.324922][ T7976] ? do_syscall_64+0xba/0x210 [ 243.324944][ T7976] ? __x64_sys_ppoll+0x20/0xc0 [ 243.324968][ T7976] do_syscall_64+0xf6/0x210 [ 243.324993][ T7976] ? clear_bhb_loop+0x45/0xa0 [ 243.325018][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.325037][ T7976] RIP: 0033:0x7f73b6d8e969 [ 243.325057][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.325074][ T7976] RSP: 002b:00007f73b7c27038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 243.325095][ T7976] RAX: ffffffffffffffda RBX: 00007f73b6fb5fa0 RCX: 00007f73b6d8e969 [ 243.325109][ T7976] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 243.325123][ T7976] RBP: 00007f73b7c27090 R08: 0000000000000000 R09: 0000000000000000 [ 243.325136][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.325148][ T7976] R13: 0000000000000000 R14: 00007f73b6fb5fa0 R15: 00007f73b70dfa28 [ 243.325179][ T7976] [ 243.923916][ T5835] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 243.960044][ T7983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.968229][ T7983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.975205][ T5939] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 244.004423][ T7983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.058381][ T7983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.078445][ T7983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.086285][ T5835] usb 2-1: not running at top speed; connect to a high speed hub [ 244.120513][ T5835] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 244.133180][ T5835] usb 2-1: config 95 has no interface number 0 [ 244.142221][ T5835] usb 2-1: config 95 interface 1 has no altsetting 0 [ 244.153643][ T5835] usb 2-1: string descriptor 0 read error: -22 [ 244.161936][ T5835] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 244.175805][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.215799][ T5939] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.243954][ T5939] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.257284][ T5939] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.266435][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.463827][ T5890] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 244.486801][ T5939] usb 1-1: usb_control_msg returned -32 [ 244.514188][ T5939] usbtmc 1-1:16.0: can't read capabilities [ 244.653979][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 244.688186][ T5890] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 244.702254][ T7979] kernel read not supported for file /eth0 (pid: 7979 comm: syz.1.578) [ 244.737831][ T30] audit: type=1800 audit(1746834271.377:804): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.578" name="eth0" dev="mqueue" ino=17797 res=0 errno=0 [ 244.772659][ T5890] usb 3-1: config 0 has no interface number 0 [ 244.832339][ T5890] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.870255][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.889665][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.898364][ T5890] usb 3-1: config 0 interface 85 has no altsetting 0 [ 244.906633][ T7993] netlink: 'syz.4.583': attribute type 9 has an invalid length. [ 244.916083][ T5939] usb 2-1: USB disconnect, device number 46 [ 244.922249][ T7993] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.583'. [ 244.926528][ T5890] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 244.942403][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.994534][ T5890] usb 3-1: Product: syz [ 245.002405][ T5890] usb 3-1: Manufacturer: syz [ 245.013428][ T5890] usb 3-1: SerialNumber: syz [ 245.022941][ T5890] usb 3-1: config 0 descriptor?? [ 245.096395][ T5907] usb 1-1: USB disconnect, device number 49 [ 245.452782][ T5890] appletouch 3-1:0.85: Failed to request geyser raw mode [ 245.568044][ T5890] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 245.882493][ T8002] netlink: zone id is out of range [ 245.895767][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.919252][ T8002] netlink: zone id is out of range [ 245.927600][ T8002] netlink: zone id is out of range [ 245.932764][ T8002] netlink: zone id is out of range [ 245.938148][ T8002] netlink: zone id is out of range [ 245.949519][ T5890] usb 3-1: USB disconnect, device number 62 [ 245.964842][ T8002] netlink: zone id is out of range [ 245.983207][ T8002] netlink: zone id is out of range [ 246.011922][ T8002] netlink: zone id is out of range [ 246.021562][ T8002] netlink: zone id is out of range [ 246.054105][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.056143][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.063822][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 246.148179][ T8015] libceph: resolve ' [ 246.148179][ T8015] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 246.148179][ T8015] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 246.150260][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.167566][ T8013] libceph: resolve ' [ 246.167566][ T8013] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 246.167566][ T8013] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 246.168427][ T8013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.587'. [ 246.192773][ T8002] netlink: set zone limit has 4 unknown bytes [ 246.265692][ T8015] netlink: 52 bytes leftover after parsing attributes in process `syz.0.588'. [ 246.356010][ T8015] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 246.478736][ T8013] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 246.863404][ T8028] netlink: 11 bytes leftover after parsing attributes in process `syz.0.592'. [ 246.873670][ T8021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.891982][ T8021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.911423][ T8021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.923474][ T8021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.934842][ T8021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 247.184061][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 247.253959][ T5835] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 247.327947][ T5890] usb 2-1: device descriptor read/64, error -71 [ 247.403969][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 247.419549][ T5835] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 247.440166][ T5835] usb 1-1: config 0 has no interface number 0 [ 247.460705][ T5835] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 247.503887][ T5835] usb 1-1: config 0 interface 41 has no altsetting 0 [ 247.535634][ T5835] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 247.583965][ T5890] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 247.593164][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.618197][ T8037] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 247.622152][ T5835] usb 1-1: Product: syz [ 247.682187][ T5835] usb 1-1: Manufacturer: syz [ 247.693826][ T5835] usb 1-1: SerialNumber: syz [ 247.722948][ T5835] usb 1-1: config 0 descriptor?? [ 247.734181][ T5890] usb 2-1: device descriptor read/64, error -71 [ 247.741109][ T8029] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 247.766653][ T5835] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 247.866393][ T5890] usb usb2-port1: attempt power cycle [ 247.954024][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.962883][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.012044][ T5939] usb 1-1: USB disconnect, device number 50 [ 248.345351][ T5890] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 248.404683][ T5890] usb 2-1: device descriptor read/8, error -71 [ 248.677404][ T5890] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 248.694504][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.704626][ T5890] usb 2-1: device descriptor read/8, error -71 [ 248.744392][ T5939] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 248.824243][ T5890] usb usb2-port1: unable to enumerate USB device [ 248.913980][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 248.927447][ T5835] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 248.927596][ T5939] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 248.935521][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 248.935580][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.935616][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.935654][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.979330][ T5939] usb 5-1: config 0 has no interface number 0 [ 248.989066][ T5939] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.003241][ T5939] usb 5-1: config 0 interface 85 has no altsetting 0 [ 249.020250][ T5939] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 249.032333][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.044921][ T5939] usb 5-1: Product: syz [ 249.049304][ T5939] usb 5-1: Manufacturer: syz [ 249.057359][ T5939] usb 5-1: SerialNumber: syz [ 249.082637][ T5939] usb 5-1: config 0 descriptor?? [ 249.113956][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.128803][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.140162][ T5835] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 249.153968][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.175830][ T5835] usb 3-1: config 0 descriptor?? [ 249.516359][ T5939] appletouch 5-1:0.85: Failed to request geyser raw mode [ 249.531064][ T5939] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 249.554059][ T5939] usb 5-1: USB disconnect, device number 43 [ 249.608613][ T5835] usbhid 3-1:0.0: can't add hid device: -71 [ 249.621462][ T5835] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 249.650896][ T5835] usb 3-1: USB disconnect, device number 63 [ 250.384099][ T5939] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 250.576501][ T5939] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.592893][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.623103][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.792220][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.822310][ T5939] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.860068][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.880695][ T5939] usb 5-1: Product: syz [ 250.888125][ T5939] usb 5-1: Manufacturer: syz [ 251.002320][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 251.100213][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 251.116364][ T5939] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 251.214160][ T5939] usb 5-1: USB disconnect, device number 44 [ 251.414539][ T8080] netlink: 11 bytes leftover after parsing attributes in process `syz.3.612'. [ 252.044128][ T5939] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 252.208915][ T5939] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.217971][ T5939] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.228932][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.238350][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.250618][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.265500][ T5939] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.275263][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.283342][ T5939] usb 5-1: Product: syz [ 252.288576][ T5939] usb 5-1: Manufacturer: syz [ 252.309753][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 252.315733][ T5890] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 252.332790][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 252.348203][ T5939] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 252.354502][ T5939] cdc_wdm 5-1:1.0: Unknown control protocol [ 252.486126][ T5890] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.498876][ T5890] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.510386][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.524781][ T5890] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 252.524993][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 252.536130][ T5890] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 252.542264][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.556516][ T5890] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.576640][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.586059][ T5890] usb 3-1: Product: syz [ 252.591858][ T5890] usb 3-1: Manufacturer: syz [ 252.606689][ T5890] cdc_wdm 3-1:1.0: skipping garbage [ 252.612181][ T5890] cdc_wdm 3-1:1.0: skipping garbage [ 252.627909][ T5890] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 252.636240][ T5890] cdc_wdm 3-1:1.0: Unknown control protocol [ 252.791086][ T30] audit: type=1326 audit(1746834279.427:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.4.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x0 [ 252.812791][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.823949][ T5893] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 252.964063][ T5893] usb 1-1: device descriptor read/64, error -71 [ 253.079759][ T8088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.090273][ T8088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.102942][ T5890] usb 3-1: USB disconnect, device number 64 [ 253.173917][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 253.203937][ T5893] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 253.346116][ T5893] usb 1-1: device descriptor read/64, error -71 [ 253.354586][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 253.364027][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.378321][ T10] usb 2-1: config 0 descriptor?? [ 253.388836][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 253.454345][ T5893] usb usb1-port1: attempt power cycle [ 253.591050][ T10] gspca_spca508: reg_read err -71 [ 253.598328][ T10] gspca_spca508: reg_read err -71 [ 253.603982][ T10] gspca_spca508: reg_read err -71 [ 253.610254][ T10] gspca_spca508: reg_read err -71 [ 253.616241][ T10] gspca_spca508: reg_read err -71 [ 253.621795][ T10] gspca_spca508: reg write: error -71 [ 253.628176][ T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 253.638895][ T10] usb 2-1: USB disconnect, device number 51 [ 253.806774][ T5893] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 253.834496][ T5893] usb 1-1: device descriptor read/8, error -71 [ 254.073833][ T5893] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 254.094853][ T5893] usb 1-1: device descriptor read/8, error -71 [ 254.204788][ T5893] usb usb1-port1: unable to enumerate USB device [ 254.417470][ T5890] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 254.584138][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 254.594618][ T5890] usb 2-1: config 1 has an invalid interface number: 17 but max is 0 [ 254.602902][ T5890] usb 2-1: config 1 has no interface number 0 [ 254.609230][ T5890] usb 2-1: config 1 interface 17 has no altsetting 0 [ 254.618368][ T5890] usb 2-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=39.d8 [ 254.628113][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.636388][ T5890] usb 2-1: Product: í—²ä¥Ñ©è›¥æ±åƒ²é™¿î’ì…¯ê¸ëšâ›šæ¯ªï§±ç±‘쭹ᑽ阵ä’꤬쌫眘螺謖튨툀蕪郀饞ꃃ慓㕔㊈㮼⦉鶴䆉⡂촻ìšÊ™ë²“ꇅ䑺撑ퟟ豥峾⡯ [ 254.654065][ T5890] usb 2-1: Manufacturer: Ѓ [ 254.658644][ T5890] usb 2-1: SerialNumber: ⺨䠀ꙉ럻尬研éŒä§«â‰”驱ʘ✭쩮酮춱▬樓ç ã²„⒊⺮祒⹚뢢匮붚橯絚䥀ᾴ罩㚗螠텠㡠├ᬬ䇾쵪ê¹ã¼ˆz䛗췽ウ蔣좒ꉓᓑ貈턦䘮Ⲹဥ랣Ưâ²ï”옇泰ާá æ¯–茡ëšï«žå“«èŠ­à·šíä ‘ç…˜ [ 254.840075][ T10] usb 5-1: USB disconnect, device number 45 [ 254.920290][ T5890] spcp8x5 2-1:1.17: required endpoints missing [ 254.941975][ T5890] usb 2-1: USB disconnect, device number 52 [ 255.793933][ T5893] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 255.963956][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 255.982271][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.998296][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.008365][ T5893] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 256.059183][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.137676][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.145342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.156505][ T5893] usb 2-1: config 0 descriptor?? [ 256.467292][ T5893] lenovo 0003:17EF:6009.0014: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 256.615979][ T5893] usb 2-1: USB disconnect, device number 53 [ 256.654083][ T8130] fido_id[8130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 257.439018][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 257.747867][ T8139] ipvlan2: entered promiscuous mode [ 257.758125][ T8139] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.786931][ T8139] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.828181][ T5835] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 258.061231][ T5835] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 258.098046][ T5835] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 258.110124][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 258.135787][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 258.147208][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 258.160884][ T5835] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 258.171675][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 258.179991][ T5835] usb 5-1: Product: syz [ 258.185131][ T5835] usb 5-1: Manufacturer: syz [ 258.211618][ T5835] cdc_wdm 5-1:1.0: skipping garbage [ 258.217813][ T5835] cdc_wdm 5-1:1.0: skipping garbage [ 258.245937][ T5835] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 258.266117][ T5835] cdc_wdm 5-1:1.0: Unknown control protocol [ 258.415008][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 258.706309][ T30] audit: type=1326 audit(1746834285.347:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x0 [ 258.728115][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.734999][ T8158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.637'. [ 258.847815][ T5835] IPVS: starting estimator thread 0... [ 258.865685][ T8156] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.900040][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 258.980452][ T8158] netlink: 36 bytes leftover after parsing attributes in process `syz.1.637'. [ 258.989596][ T8161] IPVS: using max 31 ests per chain, 74400 per kthread [ 259.000807][ T8164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 259.007576][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.052477][ T8164] vhci_hcd vhci_hcd.0: Device attached [ 259.078550][ T8158] vlan2: entered allmulticast mode [ 259.102969][ T8158] macvtap0: entered allmulticast mode [ 259.140972][ T8158] veth0_macvtap: entered allmulticast mode [ 259.283902][ T5835] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 259.643951][ T5890] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 259.814367][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 259.825013][ T5890] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 259.840744][ T5890] usb 3-1: config 0 has no interface number 0 [ 259.853945][ T5890] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.869099][ T5890] usb 3-1: config 0 interface 85 has no altsetting 0 [ 259.916148][ T5890] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 259.957647][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.984331][ T5890] usb 3-1: Product: syz [ 259.988654][ T5890] usb 3-1: Manufacturer: syz [ 259.993418][ T5890] usb 3-1: SerialNumber: syz [ 260.020490][ T5890] usb 3-1: config 0 descriptor?? [ 260.610842][ T2152] usb 5-1: USB disconnect, device number 46 [ 260.649067][ T8183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 260.698028][ T5890] appletouch 3-1:0.85: Geyser mode initialized. [ 260.704894][ T5939] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 260.717732][ T5890] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input35 [ 260.757542][ T8183] batadv0: entered allmulticast mode [ 260.887259][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 260.898751][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.909635][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 260.918899][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.919886][ T5893] usb 3-1: USB disconnect, device number 65 [ 260.959696][ T5939] usb 2-1: config 0 descriptor?? [ 260.986387][ T5893] appletouch 3-1:0.85: input: appletouch disconnected [ 261.402638][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 261.424164][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.473682][ T5939] usb 2-1: USB disconnect, device number 54 [ 262.061097][ T8165] vhci_hcd: connection reset by peer [ 262.080254][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 262.093176][ T8213] fuse: Bad value for 'fd' [ 262.100308][ T8213] fuse: Unknown parameter 'smackfsfloor' [ 262.110268][ T6333] vhci_hcd: stop threads [ 262.118262][ T6333] vhci_hcd: release socket [ 262.139204][ T6333] vhci_hcd: disconnect device [ 262.223228][ T5844] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 262.614158][ T5893] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 262.785678][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 262.800331][ T5893] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 262.809059][ T5893] usb 1-1: config 0 has no interface number 0 [ 262.816980][ T5893] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.828651][ T5893] usb 1-1: config 0 interface 85 has no altsetting 0 [ 262.838709][ T5893] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 262.848126][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.856848][ T5893] usb 1-1: Product: syz [ 262.861109][ T5893] usb 1-1: Manufacturer: syz [ 262.866596][ T5893] usb 1-1: SerialNumber: syz [ 262.874502][ T5893] usb 1-1: config 0 descriptor?? [ 263.014038][ T10] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 263.189745][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.200990][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 263.211647][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.229159][ T10] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 263.238328][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 263.246561][ T10] usb 2-1: Manufacturer: syz [ 263.253523][ T10] usb 2-1: config 0 descriptor?? [ 263.344020][ T5824] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 263.363901][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 263.374335][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 263.383463][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.391629][ T9] usb 3-1: Product: syz [ 263.395916][ T9] usb 3-1: Manufacturer: syz [ 263.400571][ T9] usb 3-1: SerialNumber: syz [ 263.408734][ T9] usb 3-1: config 0 descriptor?? [ 263.418309][ T9] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 263.490472][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 263.497876][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.506349][ T5893] appletouch 1-1:0.85: Geyser mode initialized. [ 263.513521][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.532593][ T5893] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input36 [ 263.542563][ T10] usb 2-1: USB disconnect, device number 55 [ 263.549803][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.571341][ T5824] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 263.585034][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.613913][ T5824] usb 5-1: config 0 descriptor?? [ 263.625560][ T9] gspca_sn9c2028: read1 error -32 [ 263.718857][ T5939] usb 1-1: USB disconnect, device number 55 [ 263.751526][ T5939] appletouch 1-1:0.85: input: appletouch disconnected [ 263.837549][ T9] gspca_sn9c2028: read1 error -71 [ 263.843046][ T9] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 263.860006][ T9] usb 3-1: USB disconnect, device number 66 [ 264.051808][ T5824] usbhid 5-1:0.0: can't add hid device: -71 [ 264.064072][ T5824] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 264.096075][ T5824] usb 5-1: USB disconnect, device number 47 [ 264.122082][ T8243] fuse: Bad value for 'fd' [ 264.292988][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 264.444001][ T5835] vhci_hcd: vhci_device speed not set [ 264.776555][ T5939] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 264.812492][ T8260] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 264.964127][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 264.993024][ T5939] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 265.056911][ T5939] usb 1-1: config 0 has no interface number 0 [ 265.078925][ T5939] usb 1-1: config 0 interface 185 has no altsetting 0 [ 265.205596][ T5939] usb 1-1: New USB device found, idVendor=1435, idProduct=0828, bcdDevice=e1.b0 [ 265.235674][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.259971][ T5939] usb 1-1: Product: syz [ 265.268523][ T5939] usb 1-1: Manufacturer: syz [ 265.273412][ T5939] usb 1-1: SerialNumber: syz [ 265.282990][ T5939] usb 1-1: config 0 descriptor?? [ 265.343408][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 265.402858][ T8268] fuse: Bad value for 'rootmode' [ 265.513261][ T8268] fuse: Unknown parameter 'smackfsfloor' [ 265.527749][ T5939] usb 1-1: Could not find all expected endpoints [ 265.545226][ T5939] usb 1-1: USB disconnect, device number 56 [ 265.907407][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 265.916633][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.670'. [ 266.063993][ T5835] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 266.071801][ T5824] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 266.233898][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 266.243627][ T5835] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.258139][ T5824] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 266.267020][ T5835] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.283889][ T5824] usb 2-1: config 0 has no interface number 0 [ 266.294472][ T5824] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.315233][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 266.332089][ T5835] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 266.341666][ T5824] usb 2-1: config 0 interface 85 has no altsetting 0 [ 266.363485][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.412791][ T5824] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 266.441741][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.459451][ T5835] usb 5-1: config 0 descriptor?? [ 266.480075][ T5824] usb 2-1: Product: syz [ 266.503307][ T5824] usb 2-1: Manufacturer: syz [ 266.514346][ T5824] usb 2-1: SerialNumber: syz [ 266.584374][ T5824] usb 2-1: config 0 descriptor?? [ 266.901043][ T5835] aquacomputer_d5next 0003:0C70:F010.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.4-1/input0 [ 267.142198][ T5835] usb 5-1: USB disconnect, device number 48 [ 267.248976][ T8290] fido_id[8290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 267.264724][ T5824] appletouch 2-1:0.85: Geyser mode initialized. [ 267.273585][ T5824] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input37 [ 267.484366][ T5939] usb 2-1: USB disconnect, device number 56 [ 267.584694][ T5939] appletouch 2-1:0.85: input: appletouch disconnected [ 268.022059][ T8303] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 268.136667][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 268.263694][ T8306] fuse: Bad value for 'rootmode' [ 268.285903][ T8306] fuse: Unknown parameter 'smackfsfloor' [ 268.635759][ T8311] tipc: Started in network mode [ 268.640914][ T8311] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 268.649119][ T8311] tipc: Enabled bearer , priority 0 [ 269.283977][ T5890] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 269.444000][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 269.475991][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 269.483688][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.508433][ T5890] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.587578][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 269.596966][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 269.745580][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.766911][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.767329][ T5835] tipc: Node number set to 11578026 [ 269.812592][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 269.856285][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.880222][ T5890] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.925389][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.951084][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.978649][ T5824] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 270.055600][ T5890] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 270.090544][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 270.127241][ T5890] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.144992][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 270.154299][ T5824] usb 3-1: config 1 has an invalid interface number: 17 but max is 0 [ 270.162993][ T5824] usb 3-1: config 1 has no interface number 0 [ 270.185775][ T5824] usb 3-1: config 1 interface 17 has no altsetting 0 [ 270.206691][ T5824] usb 3-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=39.d8 [ 270.219479][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.221701][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.260178][ T5824] usb 3-1: Product: í—²ä¥Ñ©è›¥æ±åƒ²é™¿î’ì…¯ê¸ëšâ›šæ¯ªï§±ç±‘쭹ᑽ阵ä’꤬쌫眘螺謖튨툀蕪郀饞ꃃ慓㕔㊈㮼⦉鶴䆉⡂촻ìšÊ™ë²“ꇅ䑺撑ퟟ豥峾⡯ [ 270.280213][ T5824] usb 3-1: Manufacturer: Ѓ [ 270.289778][ T5824] usb 3-1: SerialNumber: ⺨䠀ꙉ럻尬研éŒä§«â‰”驱ʘ✭쩮酮춱▬樓ç ã²„⒊⺮祒⹚뢢匮붚橯絚䥀ᾴ罩㚗螠텠㡠├ᬬ䇾쵪ê¹ã¼ˆz䛗췽ウ蔣좒ꉓᓑ貈턦䘮Ⲹဥ랣Ưâ²ï”옇泰ާá æ¯–茡ëšï«žå“«èŠ­à·šíä ‘ç…˜ [ 270.313322][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.340154][ T5890] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.408568][ T5890] usb 5-1: string descriptor 0 read error: -22 [ 270.419142][ T5890] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.431533][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.465262][ T5890] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 270.514032][ T5835] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 270.548495][ T5824] spcp8x5 3-1:1.17: required endpoints missing [ 270.595040][ T5824] usb 3-1: USB disconnect, device number 67 [ 270.654871][ T5890] usb 5-1: USB disconnect, device number 49 [ 270.676334][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.712469][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.741246][ T5835] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 270.769601][ T5835] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 270.784592][ T5835] usb 1-1: Manufacturer: syz [ 270.802161][ T5835] usb 1-1: config 0 descriptor?? [ 271.483295][ T5835] usbhid 1-1:0.0: can't add hid device: -71 [ 271.504034][ T5835] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 271.526759][ T5835] usb 1-1: USB disconnect, device number 57 [ 271.894046][ T5890] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 272.070296][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 272.095837][ T5890] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 272.120075][ T5890] usb 5-1: config 0 has no interface number 0 [ 272.147711][ T5890] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.177759][ T8343] ip6erspan0: entered promiscuous mode [ 272.182168][ T5890] usb 5-1: config 0 interface 85 has no altsetting 0 [ 272.202848][ T5890] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 272.216451][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.228046][ T5890] usb 5-1: Product: syz [ 272.232306][ T5890] usb 5-1: Manufacturer: syz [ 272.237780][ T5890] usb 5-1: SerialNumber: syz [ 272.254822][ T5890] usb 5-1: config 0 descriptor?? [ 272.444169][ T5835] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 272.630137][ T5835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.650979][ T5835] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.662623][ T5835] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.685314][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 272.708488][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.723979][ T5835] usb 1-1: Product: syz [ 272.909730][ T5835] usb 1-1: Manufacturer: syz [ 272.946167][ T5835] usb 1-1: SerialNumber: syz [ 273.130463][ T5890] appletouch 5-1:0.85: Geyser mode initialized. [ 273.183281][ T5890] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input38 [ 273.362193][ T10] usb 5-1: USB disconnect, device number 50 [ 273.362309][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 273.441377][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 273.591460][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 273.602773][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 274.742212][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.790556][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.963943][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 275.176376][ T8386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.189035][ T8386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.249409][ T5835] cdc_ncm 1-1:1.0: bind() failure [ 275.272019][ T5835] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 275.297880][ T5835] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 275.308199][ T5835] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 275.329032][ T5835] usb 1-1: USB disconnect, device number 58 [ 275.364808][ T5824] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 275.536985][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.548572][ T5824] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 275.557818][ T5824] usb 2-1: config 1 has no interface number 1 [ 275.567949][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 275.581289][ T5824] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 275.600043][ T5824] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.610910][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.620416][ T5824] usb 2-1: Product: syz [ 275.626410][ T5824] usb 2-1: Manufacturer: syz [ 275.631442][ T5824] usb 2-1: SerialNumber: syz [ 275.652964][ T8383] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 276.456246][ T8400] netlink: 'syz.2.709': attribute type 2 has an invalid length. [ 276.464677][ T5824] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 276.492075][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.709'. [ 276.494366][ T5824] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 276.543514][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.709'. [ 276.575700][ T5824] usb 2-1: USB disconnect, device number 57 [ 276.697948][ T8403] netlink: 156 bytes leftover after parsing attributes in process `syz.1.710'. [ 276.851481][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.480173][ T8415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.519399][ T8415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.577261][ T8415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.604664][ T8422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'. [ 277.622234][ T8422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'. [ 277.631955][ T8415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.654590][ T8422] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 277.764039][ T5939] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 277.861995][ T8426] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ:»[ŒÉSÀµñù<ÕÕ÷R¹|F¸ªš×T/scripts/get_dvb_firmware to get the firmware [ 286.961828][ T47] dvb_usb_az6027 4-1:0.120: probe with driver dvb_usb_az6027 failed with error -110 [ 286.994919][ T47] usb 4-1: USB disconnect, device number 52 [ 287.129814][ T8557] trusted_key: encrypted_key: keyword 'newdefault' not recognized [ 287.264652][ T10] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 287.356544][ T5939] usb 1-1: USB disconnect, device number 61 [ 287.429507][ T10] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 287.479799][ T10] usb 5-1: config 0 has no interface number 0 [ 287.499933][ T10] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 287.516953][ T10] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 287.530919][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 287.550976][ T10] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 287.563495][ T10] usb 5-1: Product: syz [ 287.587049][ T10] usb 5-1: SerialNumber: syz [ 287.597214][ T10] usb 5-1: config 0 descriptor?? [ 287.612329][ T10] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 287.664127][ T47] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 287.824578][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 287.831484][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.831585][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.855203][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 287.861349][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.874386][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.884257][ T5939] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 287.891902][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 287.925377][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.943100][ T47] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 287.958532][ T47] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 287.966909][ T47] usb 4-1: Manufacturer: syz [ 287.980609][ T47] usb 4-1: config 0 descriptor?? [ 288.074031][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 288.085822][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.102459][ T5939] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 288.115945][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.143500][ T5939] usb 1-1: config 0 descriptor?? [ 288.166314][ T5939] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 288.227913][ T5939] usb 2-1: USB disconnect, device number 59 [ 288.308677][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.328239][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.338570][ T47] rc_core: IR keymap rc-hauppauge not found [ 288.338589][ T47] Registered IR keymap rc-empty [ 288.339134][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.364135][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.385893][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 288.388665][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 288.416464][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.445125][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.464077][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.493935][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.513902][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.534043][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.554011][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.574114][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.603884][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.623966][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 288.647404][ T47] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 288.656712][ T47] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 288.683542][ T5824] usb 4-1: USB disconnect, device number 53 [ 288.736620][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.751845][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.823822][ T5835] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 288.949727][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.959751][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.975337][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.989441][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.000427][ T5835] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 289.010801][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.022374][ T5835] usb 2-1: config 0 descriptor?? [ 289.444175][ T5835] logitech-djreceiver 0003:046D:C52F.0017: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 289.493927][ T2152] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 289.641726][ T5835] usb 2-1: USB disconnect, device number 60 [ 289.667771][ T2152] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.705675][ T2152] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.729310][ T2152] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 289.738785][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.748477][ T2152] usb 4-1: Product: syz [ 289.752779][ T2152] usb 4-1: Manufacturer: syz [ 289.758996][ T2152] usb 4-1: SerialNumber: syz [ 290.156566][ T5939] usb 5-1: USB disconnect, device number 53 [ 290.231616][ T8593] netlink: 44 bytes leftover after parsing attributes in process `syz.4.772'. [ 290.245332][ T8593] netlink: 43 bytes leftover after parsing attributes in process `syz.4.772'. [ 290.258884][ T8593] netlink: 'syz.4.772': attribute type 5 has an invalid length. [ 290.310383][ T8593] netlink: 43 bytes leftover after parsing attributes in process `syz.4.772'. [ 290.581295][ T5939] usb 1-1: USB disconnect, device number 62 [ 290.684794][ T5835] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 290.856820][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 290.868728][ T5835] usb 2-1: config 1 has an invalid interface number: 17 but max is 0 [ 290.884037][ T5835] usb 2-1: config 1 has no interface number 0 [ 290.903916][ T5835] usb 2-1: config 1 interface 17 has no altsetting 0 [ 290.942698][ T5835] usb 2-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=39.d8 [ 290.977070][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.009007][ T5835] usb 2-1: Product: í—²ä¥Ñ©è›¥æ±åƒ²é™¿î’ì…¯ê¸ëšâ›šæ¯ªï§±ç±‘쭹ᑽ阵ä’꤬쌫眘螺謖튨툀蕪郀饞ꃃ慓㕔㊈㮼⦉鶴䆉⡂촻ìšÊ™ë²“ꇅ䑺撑ퟟ豥峾⡯ [ 291.034052][ T5939] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 291.099883][ T5835] usb 2-1: Manufacturer: Ѓ [ 291.235802][ T5939] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 291.263437][ T5939] usb 1-1: config 0 has no interface number 0 [ 291.324677][ T5939] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 291.353934][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.363102][ T5939] usb 1-1: Product: syz [ 291.402498][ T5939] usb 1-1: Manufacturer: syz [ 291.413997][ T5939] usb 1-1: SerialNumber: syz [ 291.455830][ T5939] usb 1-1: config 0 descriptor?? [ 291.488922][ T5835] spcp8x5 2-1:1.17: required endpoints missing [ 291.532413][ T5835] usb 2-1: USB disconnect, device number 61 [ 291.804235][ T8605] syz.3.770: attempt to access beyond end of device [ 291.804235][ T8605] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 292.135421][ T5939] usb 1-1: Firmware version (0.0) predates our first public release. [ 292.169554][ T5939] usb 1-1: Please update to version 0.2 or newer [ 292.329390][ T5939] usb 1-1: USB disconnect, device number 63 [ 292.357540][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.433361][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.710098][ T30] audit: type=1326 audit(1746834319.347:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8622 comm="syz.2.780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f443838e969 code=0x0 [ 292.924729][ T2152] cdc_ncm 4-1:1.0: bind() failure [ 292.950598][ T2152] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 292.965535][ T2152] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 292.982220][ T2152] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 293.013074][ T2152] usb 4-1: USB disconnect, device number 54 [ 293.294722][ T5939] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 293.405512][ T8643] FAULT_INJECTION: forcing a failure. [ 293.405512][ T8643] name failslab, interval 1, probability 0, space 0, times 0 [ 293.419332][ T8643] CPU: 0 UID: 0 PID: 8643 Comm: syz.3.785 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 293.419358][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 293.419382][ T8643] Call Trace: [ 293.419390][ T8643] [ 293.419397][ T8643] dump_stack_lvl+0x189/0x250 [ 293.419432][ T8643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.419456][ T8643] ? __pfx__printk+0x10/0x10 [ 293.419479][ T8643] ? ref_tracker_alloc+0x318/0x460 [ 293.419500][ T8643] should_fail_ex+0x414/0x560 [ 293.419534][ T8643] should_failslab+0xa8/0x100 [ 293.419557][ T8643] kmem_cache_alloc_noprof+0x73/0x3c0 [ 293.419578][ T8643] ? skb_clone+0x212/0x3a0 [ 293.419604][ T8643] skb_clone+0x212/0x3a0 [ 293.419630][ T8643] __netlink_deliver_tap+0x404/0x850 [ 293.419660][ T8643] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.419680][ T8643] netlink_deliver_tap+0x19c/0x1b0 [ 293.419698][ T8643] netlink_unicast+0x72f/0x8d0 [ 293.419724][ T8643] netlink_sendmsg+0x805/0xb30 [ 293.419751][ T8643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.419773][ T8643] ? aa_sock_msg_perm+0x94/0x160 [ 293.419793][ T8643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.419812][ T8643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.419832][ T8643] __sock_sendmsg+0x219/0x270 [ 293.419861][ T8643] ____sys_sendmsg+0x505/0x830 [ 293.419889][ T8643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.419919][ T8643] ? import_iovec+0x74/0xa0 [ 293.419946][ T8643] ___sys_sendmsg+0x21f/0x2a0 [ 293.419970][ T8643] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.420024][ T8643] ? __fget_files+0x2a/0x420 [ 293.420045][ T8643] ? __fget_files+0x3a0/0x420 [ 293.420076][ T8643] __x64_sys_sendmsg+0x19b/0x260 [ 293.420106][ T8643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.420143][ T8643] ? do_syscall_64+0xba/0x210 [ 293.420167][ T8643] do_syscall_64+0xf6/0x210 [ 293.420188][ T8643] ? clear_bhb_loop+0x45/0xa0 [ 293.420209][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.420225][ T8643] RIP: 0033:0x7f774b38e969 [ 293.420242][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.420257][ T8643] RSP: 002b:00007f774c25b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.420287][ T8643] RAX: ffffffffffffffda RBX: 00007f774b5b5fa0 RCX: 00007f774b38e969 [ 293.420299][ T8643] RDX: 000000000000c0c0 RSI: 0000200000000080 RDI: 0000000000000006 [ 293.420309][ T8643] RBP: 00007f774c25b090 R08: 0000000000000000 R09: 0000000000000000 [ 293.420320][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.420329][ T8643] R13: 0000000000000000 R14: 00007f774b5b5fa0 R15: 00007f774b6dfa28 [ 293.420355][ T8643] [ 293.420475][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 293.491943][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.722236][ T5939] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 293.732947][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.748441][ T5939] usb 2-1: Product: syz [ 293.752707][ T5939] usb 2-1: Manufacturer: syz [ 293.774421][ T5939] usb 2-1: SerialNumber: syz [ 293.782648][ T5939] usb 2-1: config 0 descriptor?? [ 293.797405][ T5939] option 2-1:0.0: GSM modem (1-port) converter detected [ 293.864194][ T5835] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 294.001648][ T5824] usb 2-1: USB disconnect, device number 62 [ 294.008883][ T5824] option 2-1:0.0: device disconnected [ 294.013831][ T2152] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 294.014582][ T5835] usb 1-1: device descriptor read/64, error -71 [ 294.103968][ T5939] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 294.174184][ T2152] usb 5-1: Using ep0 maxpacket: 32 [ 294.183248][ T2152] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 294.192180][ T2152] usb 5-1: config 0 has no interface number 0 [ 294.200559][ T2152] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.212705][ T2152] usb 5-1: config 0 interface 85 has no altsetting 0 [ 294.224610][ T2152] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 294.238936][ T2152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.247534][ T2152] usb 5-1: Product: syz [ 294.251752][ T2152] usb 5-1: Manufacturer: syz [ 294.256579][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 294.261815][ T2152] usb 5-1: SerialNumber: syz [ 294.263966][ T5835] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 294.270576][ T2152] usb 5-1: config 0 descriptor?? [ 294.284491][ T5939] usb 4-1: config 1 has an invalid interface number: 17 but max is 0 [ 294.295628][ T5939] usb 4-1: config 1 has no interface number 0 [ 294.301803][ T5939] usb 4-1: config 1 interface 17 has no altsetting 0 [ 294.312999][ T5939] usb 4-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=39.d8 [ 294.322455][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.330697][ T5939] usb 4-1: Product: í—²ä¥Ñ©è›¥æ±åƒ²é™¿î’ì…¯ê¸ëšâ›šæ¯ªï§±ç±‘쭹ᑽ阵ä’꤬쌫眘螺謖튨툀蕪郀饞ꃃ慓㕔㊈㮼⦉鶴䆉⡂촻ìšÊ™ë²“ꇅ䑺撑ퟟ豥峾⡯ [ 294.348498][ T5939] usb 4-1: Manufacturer: Ѓ [ 294.413845][ T5835] usb 1-1: device descriptor read/64, error -71 [ 294.497355][ T2152] appletouch 5-1:0.85: Failed to read mode from device. [ 294.509055][ T2152] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 294.527691][ T5835] usb usb1-port1: attempt power cycle [ 294.535242][ T2152] usb 5-1: USB disconnect, device number 54 [ 294.575878][ T5939] spcp8x5 4-1:1.17: required endpoints missing [ 294.599310][ T5939] usb 4-1: USB disconnect, device number 55 [ 294.883888][ T5835] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 294.905357][ T5835] usb 1-1: device descriptor read/8, error -71 [ 295.148250][ T5939] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 295.164006][ T5835] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 295.215629][ T5835] usb 1-1: device descriptor read/8, error -71 [ 295.303978][ T5824] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 295.313794][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 295.335303][ T5939] usb 2-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 295.347299][ T5835] usb usb1-port1: unable to enumerate USB device [ 295.383838][ T5939] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 295.429413][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 295.458648][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.466828][ T5939] usb 2-1: SerialNumber: syz [ 295.474359][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 295.485635][ T8655] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 295.505665][ T5939] cdc_ether 2-1:1.0: skipping garbage [ 295.506381][ T5824] usb 5-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 295.511115][ T5939] usb 2-1: bad CDC descriptors [ 295.554352][ T5824] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.576070][ T5824] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 295.585777][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.600507][ T5824] usb 5-1: config 0 descriptor?? [ 295.738974][ T5824] usb 2-1: USB disconnect, device number 63 [ 295.906426][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'. [ 295.915665][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.794'. [ 296.172114][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.181313][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.537369][ T8682] libceph: resolve ' [ 296.537369][ T8682] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 296.537369][ T8682] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 296.571515][ T8682] netlink: 80 bytes leftover after parsing attributes in process `syz.1.798'. [ 296.703404][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 296.775364][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 297.073858][ T5824] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 297.227567][ T5824] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 297.241688][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.386367][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 297.411523][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 297.432748][ T5824] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 297.442407][ T5824] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 297.452026][ T5824] usb 1-1: Manufacturer: syz [ 297.462838][ T5824] usb 1-1: config 0 descriptor?? [ 297.834335][ T5835] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 297.891403][ T5824] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 297.899596][ T5824] appleir 0003:05AC:8243.0018: No inputs registered, leaving [ 297.914956][ T5824] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 297.984016][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 297.992270][ T5835] usb 4-1: config 1 has an invalid interface number: 17 but max is 0 [ 298.010463][ T5835] usb 4-1: config 1 has no interface number 0 [ 298.022916][ T5835] usb 4-1: config 1 interface 17 has no altsetting 0 [ 298.040608][ T5835] usb 4-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=39.d8 [ 298.050014][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.058212][ T5835] usb 4-1: Product: í—²ä¥Ñ©è›¥æ±åƒ²é™¿î’ì…¯ê¸ëšâ›šæ¯ªï§±ç±‘쭹ᑽ阵ä’꤬쌫眘螺謖튨툀蕪郀饞ꃃ慓㕔㊈㮼⦉鶴䆉⡂촻ìšÊ™ë²“ꇅ䑺撑ퟟ豥峾⡯ [ 298.076253][ T5835] usb 4-1: Manufacturer: Ѓ [ 298.109397][ T5939] usb 5-1: USB disconnect, device number 55 [ 298.152380][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 298.207038][ T2152] usb 1-1: USB disconnect, device number 68 [ 298.279918][ T30] audit: type=1326 audit(1746834324.917:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x7ffc0000 [ 298.303006][ T5835] spcp8x5 4-1:1.17: required endpoints missing [ 298.344817][ T5835] usb 4-1: USB disconnect, device number 56 [ 298.357058][ T30] audit: type=1326 audit(1746834324.917:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x7ffc0000 [ 298.393882][ T30] audit: type=1326 audit(1746834324.917:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb0fa98e969 code=0x7ffc0000 [ 298.417438][ T30] audit: type=1326 audit(1746834324.927:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0fa98e9a3 code=0x7ffc0000 [ 298.443600][ T30] audit: type=1326 audit(1746834324.947:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0fa98e9a3 code=0x7ffc0000 [ 298.466040][ T30] audit: type=1326 audit(1746834324.957:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x7ffc0000 [ 298.489052][ T30] audit: type=1326 audit(1746834324.957:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0fa98e969 code=0x7ffc0000 [ 298.512857][ T30] audit: type=1326 audit(1746834324.997:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb0fa98e969 code=0x7ffc0000 [ 298.542112][ T30] audit: type=1326 audit(1746834325.027:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0fa98e9a3 code=0x7ffc0000 [ 298.576634][ T30] audit: type=1326 audit(1746834325.027:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0fa98e9a3 code=0x7ffc0000 [ 299.178568][ T8711] libceph: resolve ' [ 299.178568][ T8711] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 299.178568][ T8711] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 299.203246][ T8711] netlink: 80 bytes leftover after parsing attributes in process `syz.2.809'. [ 299.268039][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 299.308459][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 299.490084][ T8713] xt_CT: No such helper "netbios-ns" [ 299.784213][ T8724] syzkaller1: entered promiscuous mode [ 299.789784][ T8724] syzkaller1: entered allmulticast mode [ 300.024042][ T2152] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 300.353967][ T5824] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 300.546976][ T5824] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.556006][ T5824] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 300.758213][ T5824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.814226][ T5824] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.846136][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.880562][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.898456][ T5824] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.941819][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 300.962192][ T5824] usb 2-1: Product: syz [ 300.966780][ T5824] usb 2-1: Manufacturer: syz [ 300.998079][ T5824] cdc_wdm 2-1:1.0: skipping garbage [ 301.005035][ T5824] cdc_wdm 2-1:1.0: skipping garbage [ 301.010577][ T5824] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 301.384206][ T2152] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 301.401128][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'. [ 301.444132][ T8747] netlink: 88 bytes leftover after parsing attributes in process `syz.1.816'. [ 301.611982][ T2152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.653233][ T2152] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 301.695803][ T5835] usb 2-1: USB disconnect, device number 64 [ 301.719239][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.741294][ T2152] usb 1-1: Product: syz [ 301.749210][ T2152] usb 1-1: Manufacturer: syz [ 301.756781][ T2152] usb 1-1: SerialNumber: syz [ 301.770040][ T2152] usb 1-1: config 0 descriptor?? [ 301.777465][ T2152] usb 1-1: bad CDC descriptors [ 301.783307][ T2152] usb 1-1: unsupported MDLM descriptors [ 301.894371][ T5939] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 302.117024][ T5835] usb 1-1: USB disconnect, device number 70 [ 302.154023][ T5939] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.168345][ T5939] usb 5-1: can't read configurations, error -61 [ 302.316026][ T5939] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 302.531119][ T5939] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.552144][ T5939] usb 5-1: can't read configurations, error -61 [ 302.566866][ T5939] usb usb5-port1: attempt power cycle [ 302.913929][ T5939] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 302.949346][ T5939] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.961555][ T5939] usb 5-1: can't read configurations, error -61 [ 303.071825][ T8768] fuse: Unknown parameter '0x0000000000000005' [ 303.115634][ T5939] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 303.269962][ T5939] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 303.277630][ T5939] usb 5-1: can't read configurations, error -61 [ 303.284013][ T47] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 303.301297][ T5939] usb usb5-port1: unable to enumerate USB device [ 303.430507][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.440102][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.473337][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 303.482720][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 303.567593][ T47] usb 4-1: config 0 has no interfaces? [ 303.652798][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 303.668233][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.695263][ T47] usb 4-1: Product: syz [ 303.706409][ T47] usb 4-1: Manufacturer: syz [ 303.714328][ T47] usb 4-1: SerialNumber: syz [ 303.728913][ T47] usb 4-1: config 0 descriptor?? [ 303.873962][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 304.548222][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 304.557321][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.567727][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.578906][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.588790][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 304.598686][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.615251][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 304.627541][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 304.635765][ T10] usb 2-1: Manufacturer: syz [ 304.708271][ T10] usb 2-1: config 0 descriptor?? [ 304.884243][ T8783] netlink: zone id is out of range [ 304.930896][ T8783] netlink: set zone limit has 4 unknown bytes [ 304.934115][ T5835] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 305.181922][ T5835] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 305.210557][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.219042][ T10] rc_core: IR keymap rc-hauppauge not found [ 305.225277][ T10] Registered IR keymap rc-empty [ 305.239276][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.246915][ T5835] usb 1-1: Product: syz [ 305.251307][ T5835] usb 1-1: Manufacturer: syz [ 305.256632][ T5835] usb 1-1: SerialNumber: syz [ 305.263927][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.274762][ T5835] usb 1-1: config 0 descriptor?? [ 305.296247][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 305.316776][ T5835] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 305.360650][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43 [ 305.399877][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.425050][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.453059][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.477804][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.507189][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.527518][ T8781] random: crng reseeded on system resumption [ 305.565592][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.624000][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.656404][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.725610][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.904001][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.936173][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 306.066913][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 306.092538][ T5835] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 306.125500][ T5835] sq905c 1-1:0.0: Reading version command failed [ 306.184799][ T10] usb 2-1: USB disconnect, device number 65 [ 306.197010][ T5835] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 306.313692][ T5939] usb 4-1: USB disconnect, device number 57 [ 306.340752][ T8802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.349794][ T5835] usb 1-1: USB disconnect, device number 71 [ 306.433336][ T8802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.863982][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 307.037251][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.139768][ T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.185240][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 307.195254][ T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 307.312261][ T10] usb 5-1: Product: syz [ 307.322291][ T10] usb 5-1: Manufacturer: syz [ 307.360998][ T10] hub 5-1:4.0: USB hub found [ 307.473941][ T5939] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 307.568456][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.607600][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.622762][ T10] hub 5-1:4.0: 6 ports detected [ 307.632775][ T10] hub 5-1:4.0: insufficient power available to use all downstream ports [ 307.721165][ T5939] usb 4-1: device descriptor read/64, error -71 [ 307.828511][ T10] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 307.850640][ T10] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 307.882473][ T5835] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 307.914741][ T10] usb 5-1: USB disconnect, device number 60 [ 307.963889][ T5939] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 308.054014][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 308.060436][ T5835] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 308.073074][ T5835] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.090686][ T5835] usb 2-1: can't read configurations, error -61 [ 308.103822][ T5939] usb 4-1: device descriptor read/64, error -71 [ 308.113428][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.836'. [ 308.133889][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 308.216867][ T5939] usb usb4-port1: attempt power cycle [ 308.244780][ T5835] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 308.424005][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 308.440139][ T5835] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 308.486937][ T5835] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.504068][ T5835] usb 2-1: can't read configurations, error -61 [ 308.515688][ T5835] usb usb2-port1: attempt power cycle [ 308.574026][ T5939] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 308.605452][ T5939] usb 4-1: device descriptor read/8, error -71 [ 308.793823][ T47] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 308.873858][ T5939] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 308.886018][ T5835] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 308.945000][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 308.951691][ T5835] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 308.964832][ T5939] usb 4-1: device descriptor read/8, error -71 [ 308.965795][ T5835] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 308.973851][ T5890] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 308.988225][ T5835] usb 2-1: can't read configurations, error -61 [ 308.994871][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 309.002436][ T47] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 309.011250][ T47] usb 5-1: config 0 has no interface number 0 [ 309.017617][ T47] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.052358][ T47] usb 5-1: config 0 interface 85 has no altsetting 0 [ 309.070213][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 309.081882][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.107710][ T5939] usb usb4-port1: unable to enumerate USB device [ 309.116147][ T47] usb 5-1: Product: syz [ 309.122920][ T47] usb 5-1: Manufacturer: syz [ 309.124128][ T5835] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 309.141536][ T47] usb 5-1: SerialNumber: syz [ 309.158029][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 309.165921][ T47] usb 5-1: config 0 descriptor?? [ 309.166402][ T5835] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 309.209655][ T5890] usb 1-1: config 0 has no interfaces? [ 309.236767][ T5890] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.239356][ T5835] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 309.249621][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.268013][ T5835] usb 2-1: can't read configurations, error -61 [ 309.292633][ T5890] usb 1-1: Product: syz [ 309.310916][ T5890] usb 1-1: Manufacturer: syz [ 309.316681][ T5835] usb usb2-port1: unable to enumerate USB device [ 309.332845][ T5890] usb 1-1: SerialNumber: syz [ 309.360764][ T5890] usb 1-1: config 0 descriptor?? [ 309.660398][ T47] appletouch 5-1:0.85: Failed to request geyser raw mode [ 309.674350][ T47] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 309.717921][ T47] usb 5-1: USB disconnect, device number 61 [ 310.331852][ T47] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 310.514234][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 310.536316][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.551906][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.562970][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.574083][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 310.588467][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.639316][ T47] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 310.693466][ T47] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 310.729889][ T47] usb 4-1: Manufacturer: syz [ 310.752466][ T47] usb 4-1: config 0 descriptor?? [ 311.034781][ T2152] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 311.208351][ T8861] netlink: 35 bytes leftover after parsing attributes in process `syz.2.847'. [ 311.223839][ T47] rc_core: IR keymap rc-hauppauge not found [ 311.230181][ T47] Registered IR keymap rc-empty [ 311.243204][ T2152] usb 2-1: string descriptor 0 read error: -22 [ 311.251675][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 311.251853][ T2152] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 311.280230][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.302105][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.329635][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.381606][ T2152] usb 2-1: config 0 descriptor?? [ 311.405269][ T47] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 311.471190][ T47] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 311.533413][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.584036][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.606386][ T2152] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 311.615411][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.656726][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.702053][ T2152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 311.731028][ T2152] dib0700: firmware download failed at 7 with -22 [ 311.746552][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.792151][ T2152] usb 2-1: USB disconnect, device number 70 [ 311.798454][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.833913][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.873993][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.905400][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.934106][ T47] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 311.966642][ T47] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 311.983863][ T47] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 312.016493][ T47] usb 4-1: USB disconnect, device number 62 [ 312.394084][ T5893] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 312.425928][ T10] usb 1-1: USB disconnect, device number 72 [ 312.492149][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 312.514450][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 312.595955][ T5893] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.623835][ T5893] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.663385][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 312.679901][ T5893] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 312.690792][ T5893] usb 5-1: Product: syz [ 312.695422][ T5893] usb 5-1: Manufacturer: syz [ 312.704106][ T47] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 312.747379][ T5893] hub 5-1:4.0: USB hub found [ 312.845728][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.862555][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.918474][ T8870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.931454][ T8870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.943153][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.959327][ T47] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 312.981848][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.993384][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'. [ 313.003460][ T8892] netlink: 88 bytes leftover after parsing attributes in process `syz.2.854'. [ 313.015006][ T5893] hub 5-1:4.0: 6 ports detected [ 313.023550][ T47] usb 2-1: Product: syz [ 313.023624][ T5893] hub 5-1:4.0: insufficient power available to use all downstream ports [ 313.033801][ T47] usb 2-1: Manufacturer: syz [ 313.052454][ T47] usb 2-1: SerialNumber: syz [ 313.075566][ T47] usb 2-1: config 0 descriptor?? [ 313.102519][ T47] option 2-1:0.0: GSM modem (1-port) converter detected [ 313.194044][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 313.230019][ T5893] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 313.262253][ T5893] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 313.318424][ T47] usb 2-1: USB disconnect, device number 71 [ 313.328380][ T47] option 2-1:0.0: device disconnected [ 313.344179][ T10] usb 1-1: device descriptor read/64, error -71 [ 313.383335][ T5893] usb 5-1: USB disconnect, device number 62 [ 313.527769][ T8896] input: syz0 as /devices/virtual/input/input46 [ 313.623839][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 313.754183][ T10] usb 1-1: device descriptor read/64, error -71 [ 313.864759][ T10] usb usb1-port1: attempt power cycle [ 313.908253][ T5835] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 314.086300][ T5835] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 314.124143][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.132389][ T5835] usb 4-1: Product: syz [ 314.137537][ T5835] usb 4-1: Manufacturer: syz [ 314.142352][ T5835] usb 4-1: SerialNumber: syz [ 314.151154][ T5835] usb 4-1: config 0 descriptor?? [ 314.165146][ T5835] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 314.213952][ T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 314.244636][ T10] usb 1-1: device descriptor read/8, error -71 [ 314.494054][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 314.514817][ T10] usb 1-1: device descriptor read/8, error -71 [ 314.634517][ T10] usb usb1-port1: unable to enumerate USB device [ 314.987601][ T5835] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 314.995035][ T5835] sq905c 4-1:0.0: Reading version command failed [ 315.001588][ T5835] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 315.573864][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 315.574066][ T2152] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 315.588785][ T2152] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 317.576836][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.583194][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.654005][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.654004][ T2152] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 317.654030][ T2152] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 319.735245][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 319.741413][ T2152] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 319.748770][ T2152] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 321.813957][ T2152] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 321.817988][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 321.820112][ T2152] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 323.893978][ T2152] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 323.894067][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 323.900103][ T2152] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 329.723280][ T8378] raw-gadget.0 gadget.2: failed to queue disconnect event [ 379.028119][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.034634][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.467166][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.473557][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 472.454236][ T31] INFO: task kworker/1:2:2152 blocked for more than 143 seconds. [ 472.462303][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 472.470184][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.478961][ T31] task:kworker/1:2 state:D stack:14920 pid:2152 tgid:2152 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 472.491096][ T31] Workqueue: events rfkill_op_handler [ 472.496670][ T31] Call Trace: [ 472.499997][ T31] [ 472.502962][ T31] __schedule+0x16e2/0x4cd0 [ 472.507914][ T31] ? schedule+0x165/0x360 [ 472.512304][ T31] ? __pfx___schedule+0x10/0x10 [ 472.517281][ T31] ? schedule+0x91/0x360 [ 472.521574][ T31] schedule+0x165/0x360 [ 472.525817][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.531325][ T31] __mutex_lock+0x724/0xe80 [ 472.541560][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.546414][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 472.551759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.557151][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.562403][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 472.568479][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.575008][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 472.580793][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 472.586026][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 472.591798][ T31] rfkill_set_block+0x1cf/0x440 [ 472.596777][ T31] rfkill_epo+0x7e/0x180 [ 472.601068][ T31] rfkill_op_handler+0x84/0x240 [ 472.606087][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 472.611878][ T31] process_scheduled_works+0xadb/0x17a0 [ 472.617683][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.623808][ T31] worker_thread+0x8a0/0xda0 [ 472.628472][ T31] kthread+0x70e/0x8a0 [ 472.632573][ T31] ? __pfx_worker_thread+0x10/0x10 [ 472.637762][ T31] ? __pfx_kthread+0x10/0x10 [ 472.642388][ T31] ? __pfx_kthread+0x10/0x10 [ 472.647051][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.652277][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.657653][ T31] ? __pfx_kthread+0x10/0x10 [ 472.662279][ T31] ret_from_fork+0x4b/0x80 [ 472.666782][ T31] ? __pfx_kthread+0x10/0x10 [ 472.671403][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.676288][ T31] [ 472.679416][ T31] INFO: task syz-executor:5852 blocked for more than 143 seconds. [ 472.687306][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 472.695092][ T31] Blocked by coredump. [ 472.699704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.708951][ T31] task:syz-executor state:D stack:21608 pid:5852 tgid:5852 ppid:1 task_flags:0x40054c flags:0x00004006 [ 472.721087][ T31] Call Trace: [ 472.724472][ T31] [ 472.727414][ T31] __schedule+0x16e2/0x4cd0 [ 472.731954][ T31] ? schedule+0x165/0x360 [ 472.737419][ T31] ? __pfx___schedule+0x10/0x10 [ 472.742322][ T31] ? schedule+0x91/0x360 [ 472.746682][ T31] schedule+0x165/0x360 [ 472.750868][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.756456][ T31] __mutex_lock+0x724/0xe80 [ 472.761020][ T31] ? kobject_put+0x43f/0x480 [ 472.765733][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.770446][ T31] ? rfkill_unregister+0xc8/0x220 [ 472.775617][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.780709][ T31] ? __pfx_device_del+0x10/0x10 [ 472.785642][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 472.790878][ T31] rfkill_unregister+0xc8/0x220 [ 472.795880][ T31] hci_unregister_dev+0x360/0x500 [ 472.800958][ T31] vhci_release+0x80/0xd0 [ 472.805886][ T31] ? __pfx_vhci_release+0x10/0x10 [ 472.810966][ T31] __fput+0x449/0xa70 [ 472.815167][ T31] task_work_run+0x1d1/0x260 [ 472.819975][ T31] ? __pfx_task_work_run+0x10/0x10 [ 472.826102][ T31] ? kmem_cache_free+0x192/0x3f0 [ 472.831213][ T31] do_exit+0x8d6/0x2550 [ 472.835465][ T31] ? do_raw_spin_lock+0x121/0x290 [ 472.840532][ T31] ? __pfx_do_exit+0x10/0x10 [ 472.845241][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.850667][ T31] do_group_exit+0x21c/0x2d0 [ 472.855383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.860618][ T31] get_signal+0x125e/0x1310 [ 472.865287][ T31] arch_do_signal_or_restart+0x95/0x780 [ 472.870871][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.877230][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 472.883185][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 472.888830][ T31] do_syscall_64+0x103/0x210 [ 472.893458][ T31] ? clear_bhb_loop+0x45/0xa0 [ 472.898254][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.904240][ T31] RIP: 0033:0x7f73b6d84bd7 [ 472.908680][ T31] RSP: 002b:00007f73b70dfd80 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 472.917191][ T31] RAX: fffffffffffffe00 RBX: 0000000000000244 RCX: 00007f73b6d84bd7 [ 472.925271][ T31] RDX: 0000000040000000 RSI: 00007f73b70dfdec RDI: 00000000ffffffff [ 472.933283][ T31] RBP: 00007f73b70dfdec R08: 0000000000000000 R09: 0000000000000000 [ 472.942461][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000af [ 472.950840][ T31] R13: 000055557a19f590 R14: 000000000004c643 R15: 00007f73b70dfe40 [ 472.958923][ T31] [ 472.961977][ T31] INFO: task kworker/1:3:5890 blocked for more than 143 seconds. [ 472.969778][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 472.977492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.986274][ T31] task:kworker/1:3 state:D stack:22584 pid:5890 tgid:5890 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 472.998379][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 473.005145][ T31] Call Trace: [ 473.008443][ T31] [ 473.011385][ T31] __schedule+0x16e2/0x4cd0 [ 473.016222][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.021642][ T31] ? schedule+0x165/0x360 [ 473.026076][ T31] ? __pfx___schedule+0x10/0x10 [ 473.030965][ T31] ? schedule+0x91/0x360 [ 473.035291][ T31] schedule+0x165/0x360 [ 473.039477][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.045076][ T31] __mutex_lock+0x724/0xe80 [ 473.049636][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.054408][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.060699][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.065812][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 473.071624][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 473.077512][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.083732][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 473.089505][ T31] process_scheduled_works+0xadb/0x17a0 [ 473.095287][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.101326][ T31] worker_thread+0x8a0/0xda0 [ 473.106022][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.112388][ T31] ? __kthread_parkme+0x7b/0x200 [ 473.117402][ T31] kthread+0x70e/0x8a0 [ 473.121527][ T31] ? __pfx_worker_thread+0x10/0x10 [ 473.126785][ T31] ? __pfx_kthread+0x10/0x10 [ 473.131417][ T31] ? __pfx_kthread+0x10/0x10 [ 473.136099][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.141335][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.146700][ T31] ? __pfx_kthread+0x10/0x10 [ 473.151328][ T31] ret_from_fork+0x4b/0x80 [ 473.155829][ T31] ? __pfx_kthread+0x10/0x10 [ 473.160453][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.165328][ T31] [ 473.168434][ T31] INFO: task syz.0.853:8884 blocked for more than 144 seconds. [ 473.176106][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 473.183859][ T31] Blocked by coredump. [ 473.188474][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.197266][ T31] task:syz.0.853 state:D stack:25112 pid:8884 tgid:8879 ppid:5852 task_flags:0x40054c flags:0x00004006 [ 473.209351][ T31] Call Trace: [ 473.212669][ T31] [ 473.215703][ T31] __schedule+0x16e2/0x4cd0 [ 473.220266][ T31] ? schedule+0x165/0x360 [ 473.224704][ T31] ? __pfx___schedule+0x10/0x10 [ 473.229603][ T31] ? schedule+0x91/0x360 [ 473.233953][ T31] schedule+0x165/0x360 [ 473.238156][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.243695][ T31] __mutex_lock+0x724/0xe80 [ 473.248236][ T31] ? kobject_put+0x43f/0x480 [ 473.252837][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.257753][ T31] ? rfkill_unregister+0xc8/0x220 [ 473.262829][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.267956][ T31] ? __pfx_device_del+0x10/0x10 [ 473.272849][ T31] rfkill_unregister+0xc8/0x220 [ 473.277787][ T31] nfc_unregister_device+0x96/0x2a0 [ 473.283023][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 473.288850][ T31] virtual_ncidev_close+0x56/0x90 [ 473.293950][ T31] __fput+0x449/0xa70 [ 473.297985][ T31] task_work_run+0x1d1/0x260 [ 473.302584][ T31] ? __pfx_task_work_run+0x10/0x10 [ 473.307774][ T31] do_exit+0x8d6/0x2550 [ 473.311969][ T31] ? do_raw_spin_lock+0x121/0x290 [ 473.317116][ T31] ? __pfx_do_exit+0x10/0x10 [ 473.321757][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.327283][ T31] do_group_exit+0x21c/0x2d0 [ 473.331921][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.337207][ T31] get_signal+0x125e/0x1310 [ 473.341776][ T31] arch_do_signal_or_restart+0x95/0x780 [ 473.347380][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 473.353582][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 473.359547][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 473.365204][ T31] do_syscall_64+0x103/0x210 [ 473.369838][ T31] ? clear_bhb_loop+0x45/0xa0 [ 473.374589][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.380514][ T31] RIP: 0033:0x7f73b6d8e56b [ 473.385016][ T31] RSP: 002b:00007f73b7c03f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.393464][ T31] RAX: fffffffffffffffc RBX: 000000000000000b RCX: 00007f73b6d8e56b [ 473.401506][ T31] RDX: 00007f73b7c04fe0 RSI: 0000000080085502 RDI: 000000000000000b [ 473.409554][ T31] RBP: 00007f73b7c04fe0 R08: 0000000000000080 R09: 00007f73b7c03fd8 [ 473.417597][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 473.425680][ T31] R13: 0000000800000000 R14: 0000000000000008 R15: 00007f73b6e1ba1e [ 473.433895][ T31] [ 473.436977][ T31] INFO: task syz.3.857:8900 blocked for more than 144 seconds. [ 473.444600][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 473.452262][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.461034][ T31] task:syz.3.857 state:D stack:26392 pid:8900 tgid:8899 ppid:5849 task_flags:0x400140 flags:0x00000004 [ 473.473041][ T31] Call Trace: [ 473.476418][ T31] [ 473.479381][ T31] __schedule+0x16e2/0x4cd0 [ 473.483965][ T31] ? __kasan_slab_free+0x62/0x70 [ 473.488933][ T31] ? security_file_open+0xb1/0x270 [ 473.494139][ T31] ? schedule+0x165/0x360 [ 473.498497][ T31] ? __pfx___schedule+0x10/0x10 [ 473.503362][ T31] ? schedule+0x91/0x360 [ 473.507690][ T31] schedule+0x165/0x360 [ 473.511877][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.517393][ T31] __mutex_lock+0x724/0xe80 [ 473.521926][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.526692][ T31] ? misc_open+0x51/0x330 [ 473.531058][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.536198][ T31] misc_open+0x51/0x330 [ 473.540394][ T31] chrdev_open+0x4c9/0x5e0 [ 473.544881][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.549855][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.554847][ T31] do_dentry_open+0xdf0/0x1970 [ 473.559659][ T31] vfs_open+0x3b/0x340 [ 473.563793][ T31] ? path_openat+0x2ecd/0x3830 [ 473.568590][ T31] path_openat+0x2ee5/0x3830 [ 473.573207][ T31] ? arch_stack_walk+0xfc/0x150 [ 473.581803][ T31] ? preempt_schedule+0xae/0xc0 [ 473.587014][ T31] ? __pfx_path_openat+0x10/0x10 [ 473.591986][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.598430][ T31] do_filp_open+0x1fa/0x410 [ 473.602971][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 473.608239][ T31] ? _raw_spin_unlock+0x28/0x50 [ 473.613129][ T31] ? alloc_fd+0x64c/0x6c0 [ 473.617793][ T31] do_sys_openat2+0x121/0x1c0 [ 473.622518][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.627797][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.632617][ T31] __x64_sys_openat+0x138/0x170 [ 473.637643][ T31] do_syscall_64+0xf6/0x210 [ 473.642191][ T31] ? clear_bhb_loop+0x45/0xa0 [ 473.646964][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.652891][ T31] RIP: 0033:0x7f774b38e969 [ 473.657423][ T31] RSP: 002b:00007f774c25b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.665900][ T31] RAX: ffffffffffffffda RBX: 00007f774b5b5fa0 RCX: 00007f774b38e969 [ 473.673944][ T31] RDX: 0000000000040081 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 473.681949][ T31] RBP: 00007f774b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 473.690036][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.698089][ T31] R13: 0000000000000000 R14: 00007f774b5b5fa0 R15: 00007f774b6dfa28 [ 473.706177][ T31] [ 473.709240][ T31] INFO: task syz.3.857:8921 blocked for more than 144 seconds. [ 473.716911][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 473.724622][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.733322][ T31] task:syz.3.857 state:D stack:28104 pid:8921 tgid:8899 ppid:5849 task_flags:0x400040 flags:0x00000004 [ 473.745398][ T31] Call Trace: [ 473.748709][ T31] [ 473.751650][ T31] __schedule+0x16e2/0x4cd0 [ 473.756252][ T31] ? __kasan_slab_free+0x62/0x70 [ 473.761232][ T31] ? security_file_open+0xb1/0x270 [ 473.766443][ T31] ? schedule+0x165/0x360 [ 473.770805][ T31] ? __pfx___schedule+0x10/0x10 [ 473.775744][ T31] ? schedule+0x91/0x360 [ 473.780027][ T31] schedule+0x165/0x360 [ 473.784237][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.789732][ T31] __mutex_lock+0x724/0xe80 [ 473.794318][ T31] ? __mutex_lock+0x51b/0xe80 [ 473.799034][ T31] ? misc_open+0x51/0x330 [ 473.803387][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.808501][ T31] ? chrdev_open+0x7e/0x5e0 [ 473.813050][ T31] misc_open+0x51/0x330 [ 473.817331][ T31] chrdev_open+0x4c9/0x5e0 [ 473.821799][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.826826][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 473.831810][ T31] do_dentry_open+0xdf0/0x1970 [ 473.836670][ T31] vfs_open+0x3b/0x340 [ 473.840777][ T31] ? path_openat+0x2ecd/0x3830 [ 473.845606][ T31] path_openat+0x2ee5/0x3830 [ 473.850202][ T31] ? arch_stack_walk+0xfc/0x150 [ 473.855163][ T31] ? __pfx_path_openat+0x10/0x10 [ 473.860127][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.866303][ T31] do_filp_open+0x1fa/0x410 [ 473.870838][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 473.875950][ T31] ? _raw_spin_unlock+0x28/0x50 [ 473.880835][ T31] ? alloc_fd+0x64c/0x6c0 [ 473.885233][ T31] do_sys_openat2+0x121/0x1c0 [ 473.889955][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.895285][ T31] ? exc_page_fault+0x68/0x110 [ 473.900083][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 473.905450][ T31] __x64_sys_openat+0x138/0x170 [ 473.910326][ T31] do_syscall_64+0xf6/0x210 [ 473.914918][ T31] ? clear_bhb_loop+0x45/0xa0 [ 473.919624][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.925594][ T31] RIP: 0033:0x7f774b38e969 [ 473.930044][ T31] RSP: 002b:00007f774c23a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.938517][ T31] RAX: ffffffffffffffda RBX: 00007f774b5b6080 RCX: 00007f774b38e969 [ 473.946588][ T31] RDX: 0000000000000800 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 473.954657][ T31] RBP: 00007f774b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 473.962675][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.970778][ T31] R13: 0000000000000001 R14: 00007f774b5b6080 R15: 00007f774b6dfa28 [ 473.978942][ T31] [ 473.981978][ T31] INFO: task syz.4.858:8902 blocked for more than 144 seconds. [ 473.989872][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 473.997604][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.006389][ T31] task:syz.4.858 state:D stack:26152 pid:8902 tgid:8901 ppid:5850 task_flags:0x400040 flags:0x00004004 [ 474.018469][ T31] Call Trace: [ 474.021753][ T31] [ 474.024759][ T31] __schedule+0x16e2/0x4cd0 [ 474.029305][ T31] ? schedule+0x165/0x360 [ 474.033711][ T31] ? __pfx___schedule+0x10/0x10 [ 474.038618][ T31] ? schedule+0x91/0x360 [ 474.042893][ T31] schedule+0x165/0x360 [ 474.047140][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.052627][ T31] __mutex_lock+0x724/0xe80 [ 474.057212][ T31] ? __mutex_lock+0x51b/0xe80 [ 474.061944][ T31] ? rfkill_register+0x37/0x8e0 [ 474.066891][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.071943][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 474.077435][ T31] ? device_initialize+0x24b/0x440 [ 474.082592][ T31] rfkill_register+0x37/0x8e0 [ 474.087381][ T31] nfc_register_device+0x14a/0x320 [ 474.092555][ T31] nci_register_device+0x87f/0x9d0 [ 474.097799][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 474.103477][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 474.108959][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 474.114529][ T31] virtual_ncidev_open+0x129/0x1a0 [ 474.119680][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 474.125406][ T31] misc_open+0x2b9/0x330 [ 474.129697][ T31] chrdev_open+0x4c9/0x5e0 [ 474.134218][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.139208][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.144347][ T31] do_dentry_open+0xdf0/0x1970 [ 474.149189][ T31] vfs_open+0x3b/0x340 [ 474.153286][ T31] ? path_openat+0x2ecd/0x3830 [ 474.158185][ T31] path_openat+0x2ee5/0x3830 [ 474.162814][ T31] ? arch_stack_walk+0xfc/0x150 [ 474.167784][ T31] ? futex_wait_queue+0x31/0x200 [ 474.172767][ T31] ? __pfx_path_openat+0x10/0x10 [ 474.177822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.184020][ T31] do_filp_open+0x1fa/0x410 [ 474.188560][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 474.193627][ T31] ? _raw_spin_unlock+0x28/0x50 [ 474.198632][ T31] ? alloc_fd+0x64c/0x6c0 [ 474.203028][ T31] do_sys_openat2+0x121/0x1c0 [ 474.207851][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.213099][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.217950][ T31] __x64_sys_openat+0x138/0x170 [ 474.222851][ T31] do_syscall_64+0xf6/0x210 [ 474.227443][ T31] ? clear_bhb_loop+0x45/0xa0 [ 474.232169][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.238146][ T31] RIP: 0033:0x7fb0fa98e969 [ 474.242590][ T31] RSP: 002b:00007fb0fb724038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.251112][ T31] RAX: ffffffffffffffda RBX: 00007fb0fabb5fa0 RCX: 00007fb0fa98e969 [ 474.259185][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 474.267267][ T31] RBP: 00007fb0faa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 474.275321][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.283312][ T31] R13: 0000000000000000 R14: 00007fb0fabb5fa0 R15: 00007fb0facdfa28 [ 474.291396][ T31] [ 474.294595][ T31] INFO: task syz.4.858:8906 blocked for more than 145 seconds. [ 474.302162][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 474.309865][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.318610][ T31] task:syz.4.858 state:D stack:28344 pid:8906 tgid:8901 ppid:5850 task_flags:0x400040 flags:0x00000004 [ 474.330659][ T31] Call Trace: [ 474.333999][ T31] [ 474.336970][ T31] __schedule+0x16e2/0x4cd0 [ 474.341515][ T31] ? __kasan_slab_free+0x62/0x70 [ 474.346578][ T31] ? security_file_open+0xb1/0x270 [ 474.351733][ T31] ? schedule+0x165/0x360 [ 474.356152][ T31] ? __pfx___schedule+0x10/0x10 [ 474.361046][ T31] ? schedule+0x91/0x360 [ 474.365377][ T31] schedule+0x165/0x360 [ 474.369562][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.375185][ T31] __mutex_lock+0x724/0xe80 [ 474.379725][ T31] ? __mutex_lock+0x51b/0xe80 [ 474.384483][ T31] ? misc_open+0x51/0x330 [ 474.388852][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.393982][ T31] misc_open+0x51/0x330 [ 474.398178][ T31] chrdev_open+0x4c9/0x5e0 [ 474.402618][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.407649][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.412621][ T31] do_dentry_open+0xdf0/0x1970 [ 474.417497][ T31] vfs_open+0x3b/0x340 [ 474.421604][ T31] ? path_openat+0x2ecd/0x3830 [ 474.426486][ T31] path_openat+0x2ee5/0x3830 [ 474.431104][ T31] ? arch_stack_walk+0xfc/0x150 [ 474.436088][ T31] ? __pfx_path_openat+0x10/0x10 [ 474.441054][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.447211][ T31] do_filp_open+0x1fa/0x410 [ 474.451745][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 474.456870][ T31] ? _raw_spin_unlock+0x28/0x50 [ 474.461752][ T31] ? alloc_fd+0x64c/0x6c0 [ 474.466212][ T31] do_sys_openat2+0x121/0x1c0 [ 474.470942][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.476315][ T31] ? exc_page_fault+0x68/0x110 [ 474.481126][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 474.486514][ T31] __x64_sys_openat+0x138/0x170 [ 474.491407][ T31] do_syscall_64+0xf6/0x210 [ 474.496017][ T31] ? clear_bhb_loop+0x45/0xa0 [ 474.500732][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.506711][ T31] RIP: 0033:0x7fb0fa98e969 [ 474.511169][ T31] RSP: 002b:00007fb0f87f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 474.519694][ T31] RAX: ffffffffffffffda RBX: 00007fb0fabb6080 RCX: 00007fb0fa98e969 [ 474.527754][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 474.535929][ T31] RBP: 00007fb0faa10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 474.543989][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.552108][ T31] R13: 0000000000000001 R14: 00007fb0fabb6080 R15: 00007fb0facdfa28 [ 474.560198][ T31] [ 474.563243][ T31] INFO: task syz.4.858:8914 blocked for more than 145 seconds. [ 474.570843][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 474.578544][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.587266][ T31] task:syz.4.858 state:D stack:25144 pid:8914 tgid:8901 ppid:5850 task_flags:0x400140 flags:0x00000004 [ 474.599290][ T31] Call Trace: [ 474.602591][ T31] [ 474.605631][ T31] __schedule+0x16e2/0x4cd0 [ 474.610195][ T31] ? schedule+0x165/0x360 [ 474.615141][ T31] ? __pfx___schedule+0x10/0x10 [ 474.620064][ T31] ? schedule+0x91/0x360 [ 474.626043][ T31] schedule+0x165/0x360 [ 474.630270][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.635846][ T31] __mutex_lock+0x724/0xe80 [ 474.640524][ T31] ? __mutex_lock+0x51b/0xe80 [ 474.645321][ T31] ? misc_open+0x51/0x330 [ 474.649699][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.655640][ T31] misc_open+0x51/0x330 [ 474.659847][ T31] chrdev_open+0x4c9/0x5e0 [ 474.664367][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.669345][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.674384][ T31] do_dentry_open+0xdf0/0x1970 [ 474.679233][ T31] vfs_open+0x3b/0x340 [ 474.683318][ T31] ? path_openat+0x2ecd/0x3830 [ 474.688217][ T31] path_openat+0x2ee5/0x3830 [ 474.692849][ T31] ? arch_stack_walk+0xfc/0x150 [ 474.697978][ T31] ? __pfx_path_openat+0x10/0x10 [ 474.702962][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.709340][ T31] do_filp_open+0x1fa/0x410 [ 474.713955][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 474.719009][ T31] ? _raw_spin_unlock+0x28/0x50 [ 474.725184][ T31] ? alloc_fd+0x64c/0x6c0 [ 474.729617][ T31] do_sys_openat2+0x121/0x1c0 [ 474.734520][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 474.739764][ T31] ? exc_page_fault+0x68/0x110 [ 474.744664][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 474.749986][ T31] __x64_sys_openat+0x138/0x170 [ 474.754976][ T31] do_syscall_64+0xf6/0x210 [ 474.759515][ T31] ? clear_bhb_loop+0x45/0xa0 [ 474.764339][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.770277][ T31] RIP: 0033:0x7fb0fa98d2d0 [ 474.774978][ T31] RSP: 002b:00007fb0f83afef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 474.783457][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb0fa98d2d0 [ 474.791597][ T31] RDX: 0000000000000002 RSI: 00007fb0faa1078c RDI: 00000000ffffff9c [ 474.799768][ T31] RBP: 00007fb0faa1078c R08: 0000000000000000 R09: 0000000000000000 [ 474.807830][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 474.816103][ T31] R13: 0000000000000024 R14: 0000200000000000 R15: 00007fb0facdfa28 [ 474.824200][ T31] [ 474.827251][ T31] INFO: task syz.2.862:8913 blocked for more than 145 seconds. [ 474.834906][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 474.842586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.851391][ T31] task:syz.2.862 state:D stack:24952 pid:8913 tgid:8912 ppid:5851 task_flags:0x400140 flags:0x00000004 [ 474.863536][ T31] Call Trace: [ 474.866980][ T31] [ 474.869951][ T31] __schedule+0x16e2/0x4cd0 [ 474.874561][ T31] ? __kasan_slab_free+0x62/0x70 [ 474.879548][ T31] ? security_file_open+0xb1/0x270 [ 474.884793][ T31] ? schedule+0x165/0x360 [ 474.889158][ T31] ? __pfx___schedule+0x10/0x10 [ 474.894160][ T31] ? schedule+0x91/0x360 [ 474.898438][ T31] schedule+0x165/0x360 [ 474.902604][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.908162][ T31] __mutex_lock+0x724/0xe80 [ 474.912721][ T31] ? __mutex_lock+0x51b/0xe80 [ 474.917470][ T31] ? misc_open+0x51/0x330 [ 474.921836][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.927177][ T31] misc_open+0x51/0x330 [ 474.931407][ T31] chrdev_open+0x4c9/0x5e0 [ 474.935940][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.940929][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 474.946000][ T31] do_dentry_open+0xdf0/0x1970 [ 474.950998][ T31] vfs_open+0x3b/0x340 [ 474.955179][ T31] ? path_openat+0x2ecd/0x3830 [ 474.960009][ T31] path_openat+0x2ee5/0x3830 [ 474.964724][ T31] ? arch_stack_walk+0xfc/0x150 [ 474.969629][ T31] ? futex_wait_queue+0x31/0x200 [ 474.974665][ T31] ? __pfx_path_openat+0x10/0x10 [ 474.979673][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.985869][ T31] do_filp_open+0x1fa/0x410 [ 474.990423][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 474.995582][ T31] ? _raw_spin_unlock+0x28/0x50 [ 475.000466][ T31] ? alloc_fd+0x64c/0x6c0 [ 475.004923][ T31] do_sys_openat2+0x121/0x1c0 [ 475.009640][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.015123][ T31] ? rcu_is_watching+0x15/0xb0 [ 475.019945][ T31] __x64_sys_openat+0x138/0x170 [ 475.025170][ T31] do_syscall_64+0xf6/0x210 [ 475.029753][ T31] ? clear_bhb_loop+0x45/0xa0 [ 475.034704][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.040636][ T31] RIP: 0033:0x7f443838e969 [ 475.045161][ T31] RSP: 002b:00007f4439116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.053614][ T31] RAX: ffffffffffffffda RBX: 00007f44385b5fa0 RCX: 00007f443838e969 [ 475.061705][ T31] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 475.069781][ T31] RBP: 00007f4438410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 475.077868][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.085971][ T31] R13: 0000000000000000 R14: 00007f44385b5fa0 R15: 00007f44386dfa28 [ 475.094527][ T31] [ 475.097582][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 475.106741][ T31] INFO: task syz.1.861:8916 blocked for more than 146 seconds. [ 475.114370][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 475.122040][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.131193][ T31] task:syz.1.861 state:D stack:28344 pid:8916 tgid:8915 ppid:5848 task_flags:0x400040 flags:0x00000004 [ 475.143254][ T31] Call Trace: [ 475.146746][ T31] [ 475.149686][ T31] __schedule+0x16e2/0x4cd0 [ 475.154359][ T31] ? __kasan_slab_free+0x62/0x70 [ 475.159325][ T31] ? security_file_open+0xb1/0x270 [ 475.164561][ T31] ? schedule+0x165/0x360 [ 475.168920][ T31] ? __pfx___schedule+0x10/0x10 [ 475.173918][ T31] ? schedule+0x91/0x360 [ 475.178218][ T31] schedule+0x165/0x360 [ 475.182379][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.187944][ T31] __mutex_lock+0x724/0xe80 [ 475.192478][ T31] ? __mutex_lock+0x51b/0xe80 [ 475.197236][ T31] ? misc_open+0x51/0x330 [ 475.201600][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.207159][ T31] misc_open+0x51/0x330 [ 475.211372][ T31] chrdev_open+0x4c9/0x5e0 [ 475.215873][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 475.220982][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 475.226027][ T31] do_dentry_open+0xdf0/0x1970 [ 475.230875][ T31] vfs_open+0x3b/0x340 [ 475.235044][ T31] ? path_openat+0x2ecd/0x3830 [ 475.239836][ T31] path_openat+0x2ee5/0x3830 [ 475.244559][ T31] ? arch_stack_walk+0xfc/0x150 [ 475.249491][ T31] ? __pfx_path_openat+0x10/0x10 [ 475.254745][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.260900][ T31] do_filp_open+0x1fa/0x410 [ 475.265502][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 475.270568][ T31] ? _raw_spin_unlock+0x28/0x50 [ 475.275503][ T31] ? alloc_fd+0x64c/0x6c0 [ 475.279898][ T31] do_sys_openat2+0x121/0x1c0 [ 475.284719][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.289978][ T31] ? exc_page_fault+0x68/0x110 [ 475.294855][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 475.300176][ T31] __x64_sys_openat+0x138/0x170 [ 475.305176][ T31] do_syscall_64+0xf6/0x210 [ 475.309719][ T31] ? clear_bhb_loop+0x45/0xa0 [ 475.314510][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.320428][ T31] RIP: 0033:0x7fb72ed8d2d0 [ 475.324930][ T31] RSP: 002b:00007fb72fbf7ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 475.333398][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb72ed8d2d0 [ 475.341746][ T31] RDX: 0000000000000002 RSI: 00007fb72ee1078c RDI: 00000000ffffff9c [ 475.349958][ T31] RBP: 00007fb72ee1078c R08: 0000000000000000 R09: 0000000000000000 [ 475.358000][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 475.366378][ T31] R13: 000000000000004a R14: 0000200000000000 R15: 00007fb72f0dfa28 [ 475.374465][ T31] [ 475.377591][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 475.386727][ T31] INFO: task syz-executor:8926 blocked for more than 146 seconds. [ 475.394648][ T31] Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 [ 475.402323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.411296][ T31] task:syz-executor state:D stack:24280 pid:8926 tgid:8926 ppid:5819 task_flags:0x400000 flags:0x00000004 [ 475.423421][ T31] Call Trace: [ 475.426803][ T31] [ 475.429785][ T31] __schedule+0x16e2/0x4cd0 [ 475.434381][ T31] ? __kasan_slab_free+0x62/0x70 [ 475.439349][ T31] ? security_file_open+0xb1/0x270 [ 475.444583][ T31] ? schedule+0x165/0x360 [ 475.448951][ T31] ? __pfx___schedule+0x10/0x10 [ 475.453918][ T31] ? schedule+0x91/0x360 [ 475.458191][ T31] schedule+0x165/0x360 [ 475.462377][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.467932][ T31] __mutex_lock+0x724/0xe80 [ 475.472473][ T31] ? __mutex_lock+0x51b/0xe80 [ 475.477525][ T31] ? misc_open+0x51/0x330 [ 475.481896][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.487039][ T31] misc_open+0x51/0x330 [ 475.491232][ T31] chrdev_open+0x4c9/0x5e0 [ 475.495767][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 475.500743][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 475.505887][ T31] do_dentry_open+0xdf0/0x1970 [ 475.510724][ T31] vfs_open+0x3b/0x340 [ 475.514950][ T31] ? path_openat+0x2ecd/0x3830 [ 475.519755][ T31] path_openat+0x2ee5/0x3830 [ 475.524458][ T31] ? arch_stack_walk+0xfc/0x150 [ 475.529383][ T31] ? do_syscall_64+0xf6/0x210 [ 475.534149][ T31] ? __pfx_path_openat+0x10/0x10 [ 475.539114][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.545316][ T31] do_filp_open+0x1fa/0x410 [ 475.549848][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 475.554964][ T31] ? _raw_spin_unlock+0x28/0x50 [ 475.559841][ T31] ? alloc_fd+0x64c/0x6c0 [ 475.564309][ T31] do_sys_openat2+0x121/0x1c0 [ 475.569030][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.575346][ T31] ? fd_install+0x97/0x540 [ 475.579829][ T31] ? fd_install+0x30d/0x540 [ 475.584611][ T31] __x64_sys_openat+0x138/0x170 [ 475.589510][ T31] do_syscall_64+0xf6/0x210 [ 475.594109][ T31] ? clear_bhb_loop+0x45/0xa0 [ 475.598818][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.604821][ T31] RIP: 0033:0x7fe5ba38d251 [ 475.609256][ T31] RSP: 002b:00007ffcce560140 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 475.617738][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe5ba38d251 [ 475.625818][ T31] RDX: 0000000000000002 RSI: 00007fe5ba41147e RDI: 00000000ffffff9c [ 475.633891][ T31] RBP: 00007fe5ba41147e R08: 00000000000000d7 R09: 0000000000000000 [ 475.641887][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 475.650846][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 475.659923][ T31] [ 475.663016][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 475.672562][ T31] [ 475.672562][ T31] Showing all locks held in the system: [ 475.680483][ T31] 1 lock held by khungtaskd/31: [ 475.686420][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 475.696594][ T31] 4 locks held by kworker/1:2/2152: [ 475.701823][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 475.712923][ T31] #1: ffffc90004f07c60 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 475.724003][ T31] #2: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 475.733558][ T31] #3: ffff88807e65c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 475.743426][ T31] 2 locks held by getty/5595: [ 475.748222][ T31] #0: ffff8880349020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 475.758136][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 475.768397][ T31] 1 lock held by syz-executor/5852: [ 475.773621][ T31] #0: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 475.783960][ T31] 3 locks held by kworker/1:3/5890: [ 475.789182][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 475.800364][ T31] #1: ffffc90004c5fc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 475.816157][ T31] #2: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 475.827655][ T31] 5 locks held by kworker/u8:12/6333: [ 475.833042][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 475.843073][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x318/0x6d0 [ 475.854582][ T31] #2: ffffffff99ad5ec8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 475.865123][ T31] #3: ffffffff99a4ab90 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 475.875502][ T31] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 475.885256][ T31] 1 lock held by syz.2.329/7010: [ 475.890216][ T31] #0: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 475.900539][ T31] 2 locks held by syz.0.853/8884: [ 475.905635][ T31] #0: ffff88807e65c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 475.915530][ T31] #1: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 475.925972][ T31] 1 lock held by syz.3.857/8900: [ 475.930957][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 475.939548][ T31] 1 lock held by syz.3.857/8921: [ 475.944615][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 475.953127][ T31] 3 locks held by syz.4.858/8902: [ 475.958229][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 475.966827][ T31] #1: ffff88805358f100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 475.976560][ T31] #2: ffffffff8f5c87a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 475.986608][ T31] 1 lock held by syz.4.858/8906: [ 475.991566][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.000129][ T31] 1 lock held by syz.4.858/8914: [ 476.005160][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.013787][ T31] 1 lock held by syz.2.862/8913: [ 476.018745][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.027273][ T31] 1 lock held by syz.1.861/8916: [ 476.032301][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.041039][ T31] 1 lock held by syz-executor/8926: [ 476.046333][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.054945][ T31] 1 lock held by syz-executor/8928: [ 476.060198][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.068840][ T31] 1 lock held by syz-executor/8929: [ 476.074360][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.082906][ T31] 1 lock held by syz-executor/8930: [ 476.088162][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.096783][ T31] 1 lock held by syz-executor/8931: [ 476.102000][ T31] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 476.110537][ T31] [ 476.112923][ T31] ============================================= [ 476.112923][ T31] [ 476.121455][ T31] NMI backtrace for cpu 0 [ 476.121482][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 476.121507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 476.121521][ T31] Call Trace: [ 476.121529][ T31] [ 476.121538][ T31] dump_stack_lvl+0x189/0x250 [ 476.121571][ T31] ? __wake_up_klogd+0xd9/0x110 [ 476.121598][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.121628][ T31] ? __pfx__printk+0x10/0x10 [ 476.121660][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 476.121696][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 476.121725][ T31] ? _printk+0xcf/0x120 [ 476.121749][ T31] ? __pfx__printk+0x10/0x10 [ 476.121771][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.121794][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 476.121830][ T31] watchdog+0xfee/0x1030 [ 476.121858][ T31] ? watchdog+0x1de/0x1030 [ 476.121891][ T31] kthread+0x70e/0x8a0 [ 476.121918][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.121943][ T31] ? __pfx_kthread+0x10/0x10 [ 476.121968][ T31] ? __pfx_kthread+0x10/0x10 [ 476.121990][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.122012][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.122036][ T31] ? __pfx_kthread+0x10/0x10 [ 476.122071][ T31] ret_from_fork+0x4b/0x80 [ 476.122091][ T31] ? __pfx_kthread+0x10/0x10 [ 476.122114][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.122146][ T31] [ 476.122153][ T31] Sending NMI from CPU 0 to CPUs 1: [ 476.269568][ C1] NMI backtrace for cpu 1 [ 476.269590][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 476.269610][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 476.269621][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 476.269645][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 0b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 476.269660][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 476.269676][ C1] RAX: c5ea745cd6f7b600 RBX: ffffffff81974f08 RCX: c5ea745cd6f7b600 [ 476.269689][ C1] RDX: 0000000000000001 RSI: ffffffff8d74ab54 RDI: ffffffff8bc1d260 [ 476.269701][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 476.269714][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ed170 [ 476.269726][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038deb40 [ 476.269737][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 476.269759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.269771][ C1] CR2: 000056378e64a168 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 476.269785][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 476.269795][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 476.269806][ C1] Call Trace: [ 476.269812][ C1] [ 476.269819][ C1] default_idle+0x13/0x20 [ 476.269841][ C1] default_idle_call+0x74/0xb0 [ 476.269864][ C1] do_idle+0x1e8/0x510 [ 476.269882][ C1] ? __pfx_do_idle+0x10/0x10 [ 476.269906][ C1] cpu_startup_entry+0x44/0x60 [ 476.269921][ C1] start_secondary+0x101/0x110 [ 476.269937][ C1] common_startup_64+0x13e/0x147 [ 476.269968][ C1] [ 476.270645][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 476.455397][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00158-g3013c33dcbd9 #0 PREEMPT(full) [ 476.467211][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 476.477288][ T31] Call Trace: [ 476.480576][ T31] [ 476.483515][ T31] dump_stack_lvl+0x99/0x250 [ 476.488124][ T31] ? __asan_memcpy+0x40/0x70 [ 476.492738][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.497955][ T31] ? __pfx__printk+0x10/0x10 [ 476.502578][ T31] panic+0x2db/0x790 [ 476.506595][ T31] ? __pfx_panic+0x10/0x10 [ 476.511023][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 476.516841][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 476.522227][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 476.528408][ T31] watchdog+0x102d/0x1030 [ 476.532753][ T31] ? watchdog+0x1de/0x1030 [ 476.537188][ T31] kthread+0x70e/0x8a0 [ 476.541287][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.545981][ T31] ? __pfx_kthread+0x10/0x10 [ 476.550579][ T31] ? __pfx_kthread+0x10/0x10 [ 476.555176][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.560383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.565593][ T31] ? __pfx_kthread+0x10/0x10 [ 476.570193][ T31] ret_from_fork+0x4b/0x80 [ 476.574617][ T31] ? __pfx_kthread+0x10/0x10 [ 476.579217][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.584002][ T31] [ 476.587382][ T31] Kernel Offset: disabled [ 476.591718][ T31] Rebooting in 86400 seconds..