last executing test programs: 3m5.03323582s ago: executing program 2 (id=450): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) r0 = syz_io_uring_setup(0x9f, &(0x7f0000000700)={0x0, 0x42d6, 0x10, 0x3, 0x2d6}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000000)={0x6, 0x22}, 0x1) io_uring_enter(r0, 0x47ba, 0x0, 0x47, 0x0, 0x0) 3m3.312956576s ago: executing program 2 (id=453): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 3m1.980315701s ago: executing program 2 (id=457): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0xf000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0xfffdffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000180)='4\x00', 0x2) 3m0.115020184s ago: executing program 2 (id=462): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) 2m59.06942008s ago: executing program 2 (id=463): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) 2m58.684090981s ago: executing program 2 (id=465): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0xf, 0x1, 0x800, 0x7}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) 2m43.058052637s ago: executing program 32 (id=465): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0xf, 0x1, 0x800, 0x7}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0) 11.204094788s ago: executing program 1 (id=1075): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) 11.181759183s ago: executing program 4 (id=1076): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x20040054) 10.968271485s ago: executing program 3 (id=1077): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.620523584s ago: executing program 1 (id=1079): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x100) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, 0xfffffffffffffffe) socket$inet_udplite(0x2, 0x2, 0x88) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 9.45178431s ago: executing program 5 (id=1080): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x16, 0x6c}, @in=@multicast2, {0x0, 0x0, 0x0, 0xffffffe7ffffffff, 0x0, 0xfffffffffffffffc, 0x1000000000000000, 0x7}, {0xa, 0x4, 0x0, 0x1}, {0x0, 0x5}, 0x0, 0x1, 0x2, 0x1, 0x6, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr-aes-neon\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_1\x00', 0x1}, 0x18) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000840)="75757a076d91c8842ee9dabb4061a24c4b529351c34c48e4e555ba05b43e01849e63da8cb7013915739f4cf0733461f8c95fd73fdbde29e45c5500382a9dfca9ba39bdcc0d545404fe25aeac3dc04b6775b173fdf6f19dd76861b3a156f0b2f962d0b16d093eaac94a7a7cc8eb0f5d4d98f8b394c6ef9d1937fc3d886dcff44077e857bd4f066ea3c133", 0x8a}, {&(0x7f0000000380)="6f372c0af93f6a3f8573dac3e1cca6cb28ee8fa86ba19486c44a2b538ddb3a", 0x1f}, {0x0}, {&(0x7f0000000900)="3c1434c0da0199a1b213e9afbb0657945e8b5694bb394d40a2b6d843e321193a2098ce9b25076dc216b6dadf7e54e92789328c31aefe1f3c3c96d9c8d6e0629bca29178e1f683840134b8f6658f847bca327432158d67b9016aca34878254c100e429ab373b4731065373e44776a09d0a4c6010a916bd9a490356fff4e1a98774416a702944e2eb4cf0472bfb615e4456b3e94f122eb407be7421024955d7e31c9fec662765c3b490d4e", 0xaa}, {&(0x7f0000000a00)="436bb95dff2737dc0aa7f0172677454c59fa459bf202ca142cc5323e4b958fe95ed52c13e9fe768705ee08cfdeaf8d9fb9a463f1d8c6ab6f9c85cbc6", 0x3c}, {&(0x7f0000000a40)="ef721bf29e817fa2807fbfb804895bdbb82133a27ff1a9aab0493e05ad5a46e36ea6396e8d2141ceebdb12311aeab569833ad76de9f42b70cc586f7830b658241dec05158aaf21e6b4a0fd5590247a16ea19cbdd73bbde757adc7fdf7d9b9934d041d87d2ec3", 0x66}, {&(0x7f0000000b00)="91f13925d61fdd2d6e6f57c45231f9d84019a0d11a1aeb14926283d325248202aecddf5723c0673532464961f6b164a2ccd387", 0x33}, {0x0}], 0x8}}], 0x1, 0x8810) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_cancel(0x0, 0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 9.451403963s ago: executing program 4 (id=1081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.319796452s ago: executing program 1 (id=1083): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='AF', @ANYBLOB="b2"], 0x4) 8.000267733s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3ff, 0x7, 0xffffffff, 0x5, 0x50, 0xe, 0xa31, 0x1}, &(0x7f00000000c0)={0x3, 0x90f, 0xff1, 0x9, 0x1, 0x7, 0x4, 0x2}, &(0x7f0000000180)={0xfab, 0x1, 0xfffffffffffffe01, 0x5, 0x1, 0x200, 0x1, 0x9e}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x33, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(r2, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) prlimit64(r4, 0x3, &(0x7f0000000340)={0x8, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)={0x5c, r6, 0x1, 0x70bd2d, 0x25dfdc00, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c5d8f890a080f40215c1c8709fd6b869"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0b15ec77601b07e6e89bb719d8510bcc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "793bb0bb537be833"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}]}, 0x5c}}, 0x4000080) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x50, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xff, 0x67}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xd1}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c090}, 0x4008944) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000004340)=""/102376, 0x18fe8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x80000) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) 7.93560512s ago: executing program 4 (id=1085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, 0x0, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 7.760655311s ago: executing program 1 (id=1086): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xf, 0xc}, {0x3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0xa4, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x2, 0x7, 0x6, 0xfffb, 0x8, 0x5, 0xffff, 0x5, [{0x5, 0xffff, 0x1, 0x100}, {0x9, 0x6, 0x1ff, 0x5}, {0x1000, 0x4, 0x5, 0x4b}, {0x3, 0x7, 0x8, 0x1}, {0xf7, 0x0, 0x7fff}, {0x10001, 0xfffffff1, 0x9}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.600141391s ago: executing program 1 (id=1087): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) close(0x3) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 6.516190457s ago: executing program 5 (id=1088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 6.182437143s ago: executing program 5 (id=1089): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) 3.644127071s ago: executing program 0 (id=1092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.474404431s ago: executing program 3 (id=1093): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x55c9, 0xc000, 0xe, 0x224}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x548c, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80}}) pipe(&(0x7f0000000000)) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.409523346s ago: executing program 4 (id=1094): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.14381605s ago: executing program 3 (id=1095): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=000000000000']) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[], 0x44}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.143567702s ago: executing program 4 (id=1096): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.027188667s ago: executing program 0 (id=1097): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xf, 0xc}, {0x3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0xa4, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x2, 0x7, 0x6, 0xfffb, 0x8, 0x5, 0xffff, 0x5, [{0x5, 0xffff, 0x1, 0x100}, {0x9, 0x6, 0x1ff, 0x5}, {0x1000, 0x4, 0x5, 0x4b}, {0x3, 0x7, 0x8, 0x1}, {0xf7, 0x0, 0x7fff}, {0x10001, 0xfffffff1, 0x9}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.769468004s ago: executing program 0 (id=1098): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) 2.049821116s ago: executing program 1 (id=1099): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[], 0x113c}}, 0x8004) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r3 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.938103928s ago: executing program 0 (id=1100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) sendto$inet6(r0, &(0x7f0000000380), 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.936340196s ago: executing program 4 (id=1101): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x60}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [{@euid_lt}, {@permit_directio}], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r7 = epoll_create(0x400) r8 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) write$eventfd(r8, &(0x7f00000000c0)=0x2b952170, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 1.860771735s ago: executing program 3 (id=1102): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c200000308060001080006040002aaaaaa1c5bfafe"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.816026201s ago: executing program 5 (id=1103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 915.909602ms ago: executing program 3 (id=1104): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 813.503401ms ago: executing program 0 (id=1105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000180)={0x2, 0xffff, 0x0, 'queue1\x00', 0xfffff39c}) 477.903375ms ago: executing program 5 (id=1106): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) close(r0) 209.671µs ago: executing program 5 (id=1107): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4040) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 0s ago: executing program 0 (id=1108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xf, 0xc}, {0x3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtfilter={0xa4, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x2, 0x7, 0x6, 0xfffb, 0x8, 0x5, 0xffff, 0x5, [{0x5, 0xffff, 0x1, 0x100}, {0x9, 0x6, 0x1ff, 0x5}, {0x1000, 0x4, 0x5, 0x4b}, {0x3, 0x7, 0x8, 0x1}, {0xf7, 0x0, 0x7fff}, {0x10001, 0xfffffff1, 0x9}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): 247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.522565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.407913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.734252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.423761][ T1209] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.988010][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 101.964251][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 102.745116][ T1209] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.4d [ 102.759952][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.771338][ T1209] usb 1-1: config 0 descriptor?? [ 102.921767][ T6050] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 102.936880][ T6051] fuse: Bad value for 'fd' [ 103.012736][ T1209] usb 1-1: string descriptor 0 read error: -71 [ 103.063908][ T1209] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 103.122265][ T1209] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 103.964851][ T1209] usb 1-1: USB disconnect, device number 2 [ 103.983197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.992976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.265273][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.002749][ T5928] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.212979][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 105.238211][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.291116][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.329484][ T5928] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.349236][ T1209] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.372725][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.419092][ T5928] usb 3-1: config 0 descriptor?? [ 105.552903][ T1209] usb 1-1: device descriptor read/64, error -71 [ 106.276296][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 106.285531][ T6093] sit0: Master is either lo or non-ether device [ 106.296657][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 106.314190][ T6093] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.323268][ T6093] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.332042][ T6093] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.340852][ T6093] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.350315][ T6093] vxlan0: entered promiscuous mode [ 106.355672][ T6093] vxlan0: entered allmulticast mode [ 106.370560][ T1209] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.544078][ T5928] ft260 0003:0403:6030.0001: item fetching failed at offset 0/2 [ 106.743539][ T5928] ft260 0003:0403:6030.0001: failed to parse HID [ 106.803873][ T5928] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -22 [ 106.884872][ T5928] usb 3-1: USB disconnect, device number 3 [ 107.008484][ T6101] xt_CT: No such helper "syz0" [ 107.052863][ T1209] usb 1-1: device descriptor read/64, error -71 [ 107.183281][ T1209] usb usb1-port1: attempt power cycle [ 107.622840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 107.725392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.735455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.523385][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.803202][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.844596][ T5918] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.863161][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.886992][ T5918] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.908303][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.918072][ T6119] fuse: Unknown parameter 'fd0x0000000000000003' [ 109.934924][ T5918] usb 5-1: Product: syz [ 109.939271][ T5918] usb 5-1: Manufacturer: syz [ 109.951995][ T6119] overlay: filesystem on ./bus not supported as upperdir [ 109.963058][ T5918] usb 5-1: SerialNumber: syz [ 109.970066][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 110.000237][ T5918] usb 5-1: config 0 descriptor?? [ 110.019130][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 110.050433][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.078636][ T5918] usb 5-1: selecting invalid altsetting 0 [ 110.087976][ T24] usb 3-1: Product: syz [ 110.098838][ T24] usb 3-1: Manufacturer: syz [ 110.110882][ T24] usb 3-1: SerialNumber: syz [ 110.149763][ T24] usb 3-1: config 0 descriptor?? [ 110.177939][ T24] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 110.338952][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.374396][ T1209] usb 5-1: USB disconnect, device number 2 [ 110.397246][ T24] gspca_sn9c2028: read1 error -32 [ 110.420358][ T24] gspca_sn9c2028: read1 error -32 [ 110.440246][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.633467][ T5918] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 110.702531][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.936155][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.984588][ T24] gspca_sn9c2028: read1 error -110 [ 111.031777][ T24] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -110 [ 111.144082][ T5918] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 111.155174][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.211750][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.253022][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.276110][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.302222][ T5918] usb 1-1: Product: Ⰱ [ 111.317036][ T5918] usb 1-1: Manufacturer: 譕㫿닔ﶶ㮽䕳䴛䣺례ꗓ昛固ꁨ砦㡓Ე籕詿ﰡᗖ㝊쁢羵茇潁㲫体냪㩝ꉯ캦蟨徐劑徲ꀻ챨鏇䐽ࠨ晥ߨﲄ덣렫窸Ž꘵ﰾ궊ﻠꆘ却燌깺綱⥁扎ゼ뛡 [ 111.409963][ T5918] usb 1-1: SerialNumber: syz [ 111.682730][ T1209] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.699897][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.731975][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.896806][ T6154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.909846][ T6154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.156314][ T5918] usb 1-1: 0:2 : does not exist [ 112.192877][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 112.229187][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.486955][ T5918] usb 1-1: USB disconnect, device number 6 [ 112.510385][ T5965] usb 3-1: USB disconnect, device number 4 [ 112.537535][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.591294][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.622765][ T1209] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.681762][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.683854][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.744086][ T1209] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.766898][ T6160] program syz.1.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.811050][ T1209] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.843844][ T1209] usb 5-1: Manufacturer: syz [ 112.869948][ T1209] usb 5-1: config 0 descriptor?? [ 114.385470][ T6181] ======================================================= [ 114.385470][ T6181] WARNING: The mand mount option has been deprecated and [ 114.385470][ T6181] and is ignored by this kernel. Remove the mand [ 114.385470][ T6181] option from the mount to silence this warning. [ 114.385470][ T6181] ======================================================= [ 114.554086][ T6178] overlayfs: statfs failed on './file0' [ 114.560981][ T6182] overlayfs: statfs failed on './file0' [ 114.902765][ T1209] rc_core: IR keymap rc-hauppauge not found [ 114.922366][ T1209] Registered IR keymap rc-empty [ 114.933852][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 114.960879][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.046366][ T1209] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 115.116001][ T1209] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 115.892852][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.920892][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.963913][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 115.997712][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.025998][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.057455][ T30] audit: type=1326 audit(1755883462.069:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564fd8ebe9 code=0x0 [ 116.105444][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.183703][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.202847][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.350277][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.603161][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 116.995494][ T1209] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 117.216644][ T1209] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 117.267783][ T1209] usb 5-1: USB disconnect, device number 3 [ 117.586393][ T6215] program syz.0.67 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.617560][ T6220] loop6: detected capacity change from 0 to 524287999 [ 117.742862][ T5965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.923812][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 117.952247][ T5965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.004871][ T5965] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 118.023269][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.044933][ T5965] usb 2-1: config 0 descriptor?? [ 118.060717][ T5965] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 118.773830][ T6229] overlayfs: statfs failed on './file0' [ 118.773989][ T6228] overlayfs: statfs failed on './file0' [ 119.503883][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 119.522820][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 119.772061][ T30] audit: type=1804 audit(1755883465.739:3): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.74" name="/newroot/20/file0" dev="tmpfs" ino=122 res=1 errno=0 [ 120.375989][ T5965] gspca_vc032x: reg_w err -71 [ 120.451345][ T5965] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 120.606898][ T5965] usb 2-1: USB disconnect, device number 3 [ 121.247425][ T6249] warning: `syz.4.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.115443][ T30] audit: type=1326 audit(1755883468.129:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6258 comm="syz.4.79" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f786b18ebe9 code=0x0 [ 122.186535][ T6263] process 'syz.3.80' launched '/dev/fd/5' with NULL argv: empty string added [ 123.983754][ T6278] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 124.043869][ T6278] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 125.927116][ T6285] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.707697][ T30] audit: type=1326 audit(1755883473.709:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6295 comm="syz.3.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869758ebe9 code=0x0 [ 127.823491][ T30] audit: type=1326 audit(1755883473.839:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 127.920508][ T30] audit: type=1326 audit(1755883473.839:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 127.959998][ T6316] Can't find a SQUASHFS superblock on nullb0 [ 127.971478][ T30] audit: type=1326 audit(1755883473.879:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.057371][ T30] audit: type=1326 audit(1755883473.879:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.120440][ T30] audit: type=1326 audit(1755883473.879:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.150857][ T30] audit: type=1326 audit(1755883474.009:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.198555][ T30] audit: type=1326 audit(1755883474.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.231502][ T30] audit: type=1326 audit(1755883474.019:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.260644][ T30] audit: type=1326 audit(1755883474.019:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6313 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x7ffc0000 [ 128.508628][ T6328] FAULT_INJECTION: forcing a failure. [ 128.508628][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 128.522043][ T6328] CPU: 1 UID: 0 PID: 6328 Comm: syz.0.94 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 128.522071][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.522092][ T6328] Call Trace: [ 128.522105][ T6328] [ 128.522115][ T6328] dump_stack_lvl+0x189/0x250 [ 128.522152][ T6328] ? irqentry_exit+0x74/0x90 [ 128.522178][ T6328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.522224][ T6328] should_fail_ex+0x414/0x560 [ 128.522253][ T6328] should_failslab+0xa8/0x100 [ 128.522279][ T6328] kmem_cache_alloc_noprof+0x73/0x3c0 [ 128.522300][ T6328] ? skb_clone+0x212/0x3a0 [ 128.522327][ T6328] skb_clone+0x212/0x3a0 [ 128.522352][ T6328] __netlink_deliver_tap+0x404/0x850 [ 128.522406][ T6328] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.522439][ T6328] netlink_deliver_tap+0x19c/0x1b0 [ 128.522471][ T6328] netlink_sendskb+0x68/0x140 [ 128.522501][ T6328] netlink_rcv_skb+0x28c/0x470 [ 128.522532][ T6328] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 128.522559][ T6328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.522603][ T6328] ? bpf_lsm_capable+0x9/0x20 [ 128.522632][ T6328] ? security_capable+0x7e/0x2e0 [ 128.522667][ T6328] nfnetlink_rcv+0x26a/0x2520 [ 128.522694][ T6328] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 128.522731][ T6328] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 128.522765][ T6328] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.522788][ T6328] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 128.522821][ T6328] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.522856][ T6328] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 128.522886][ T6328] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 128.522936][ T6328] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 128.522980][ T6328] ? rcu_is_watching+0x15/0xb0 [ 128.523006][ T6328] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 128.523036][ T6328] ? skb_clone+0x246/0x3a0 [ 128.523063][ T6328] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 128.523093][ T6328] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.523131][ T6328] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.523171][ T6328] netlink_unicast+0x75c/0x8e0 [ 128.523210][ T6328] netlink_sendmsg+0x805/0xb30 [ 128.523252][ T6328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.523292][ T6328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.523314][ T6328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.523347][ T6328] __sock_sendmsg+0x21c/0x270 [ 128.523383][ T6328] ____sys_sendmsg+0x505/0x830 [ 128.523424][ T6328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.523468][ T6328] ? import_iovec+0x74/0xa0 [ 128.523551][ T6328] ___sys_sendmsg+0x21f/0x2a0 [ 128.523588][ T6328] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.523662][ T6328] ? __fget_files+0x2a/0x420 [ 128.523686][ T6328] ? __fget_files+0x3a0/0x420 [ 128.523723][ T6328] __x64_sys_sendmsg+0x19b/0x260 [ 128.523760][ T6328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.523805][ T6328] ? __pfx_ksys_write+0x10/0x10 [ 128.523823][ T6328] ? rcu_is_watching+0x15/0xb0 [ 128.523852][ T6328] ? do_syscall_64+0xbe/0x3b0 [ 128.523881][ T6328] do_syscall_64+0xfa/0x3b0 [ 128.523907][ T6328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.523928][ T6328] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 128.523949][ T6328] ? clear_bhb_loop+0x60/0xb0 [ 128.523976][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.523997][ T6328] RIP: 0033:0x7f5f2118ebe9 [ 128.524024][ T6328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.524042][ T6328] RSP: 002b:00007f5f21fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.524065][ T6328] RAX: ffffffffffffffda RBX: 00007f5f213b6180 RCX: 00007f5f2118ebe9 [ 128.524081][ T6328] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 128.524094][ T6328] RBP: 00007f5f21fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.524107][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.524120][ T6328] R13: 00007f5f213b6218 R14: 00007f5f213b6180 R15: 00007ffdb7b69398 [ 128.524154][ T6328] [ 130.125274][ T5928] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 131.860275][ T5928] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 131.932935][ T5928] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 132.013283][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.376371][ T5928] usb 4-1: probing VID:PID(2201:012C) [ 132.697393][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.102'. [ 133.292265][ T5928] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 133.312437][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 133.312459][ T30] audit: type=1326 audit(1755883479.319:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6354 comm="syz.2.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad0458ebe9 code=0x0 [ 134.010820][ T5928] vub300 4-1:64.0: probe with driver vub300 failed with error -22 [ 134.027434][ T5928] usb 4-1: USB disconnect, device number 2 [ 134.482917][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.690856][ T6369] Can't find a SQUASHFS superblock on nullb0 [ 134.723320][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 134.909315][ T5918] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.922665][ T24] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 134.963637][ T24] usb 5-1: Product: syz [ 134.974963][ T24] usb 5-1: Manufacturer: syz [ 134.979643][ T24] usb 5-1: SerialNumber: syz [ 135.075390][ T24] usb 5-1: config 0 descriptor?? [ 135.122968][ T5918] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 135.172378][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.217284][ T5918] usb 1-1: Product: syz [ 135.229280][ T5918] usb 1-1: Manufacturer: syz [ 135.241739][ T5918] usb 1-1: SerialNumber: syz [ 135.270525][ T5918] usb 1-1: config 0 descriptor?? [ 135.385173][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.493428][ T5918] usb-storage 1-1:0.0: USB Mass Storage device detected [ 135.513460][ T6364] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.648456][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 135.712781][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 135.805560][ T5928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.956535][ T5928] usb 4-1: config 4 interface 0 has no altsetting 0 [ 136.097601][ T5928] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 136.178210][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.338786][ T5928] usb 4-1: Product: syz [ 136.346883][ T5928] usb 4-1: Manufacturer: syz [ 136.360813][ T5928] usb 4-1: SerialNumber: syz [ 136.435329][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 136.463365][ T24] usb 5-1: USB disconnect, device number 4 [ 136.609784][ T6386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.112'. [ 136.626957][ T6387] fuse: Bad value for 'rootmode' [ 137.083319][ T5928] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 137.107952][ T5928] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 137.123336][ T5918] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.137946][ T5928] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 137.146326][ T5928] usb 4-1: media controller created [ 137.200164][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.462783][ T6400] syz.3.115 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.474751][ T6400] usb usb8: usbfs: process 6400 (syz.3.115) did not claim interface 0 before use [ 137.514256][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 137.534033][ T5928] zl10353_read_register: readreg error (reg=127, ret==0) [ 137.559711][ T5918] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.190845][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.202890][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.250075][ T5833] usb 1-1: USB disconnect, device number 7 [ 138.262265][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.272728][ T5918] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 138.309175][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.413876][ T5918] usb 3-1: config 0 descriptor?? [ 138.653214][ T5928] usb 4-1: USB disconnect, device number 3 [ 138.926455][ T6413] Failed to get privilege flags for destination (handle=0x2:0x0) [ 139.353034][ T5833] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.542906][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 139.593236][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 139.604530][ T5918] uclogic 0003:5543:0042.0002: hidraw0: USB HID v0.07 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 139.642536][ T5833] usb 5-1: can't read configurations, error -61 [ 139.738301][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.788090][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.835578][ T5964] usb 3-1: USB disconnect, device number 5 [ 139.894760][ T5833] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.037895][ T6423] fido_id[6423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.214425][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 140.272599][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 140.280489][ T5833] usb 5-1: can't read configurations, error -61 [ 140.313250][ T6430] FAULT_INJECTION: forcing a failure. [ 140.313250][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 140.326440][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.2.121 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 140.326469][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.326482][ T6430] Call Trace: [ 140.326492][ T6430] [ 140.326502][ T6430] dump_stack_lvl+0x189/0x250 [ 140.326531][ T6430] ? __pfx____ratelimit+0x10/0x10 [ 140.326555][ T6430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.326580][ T6430] ? __pfx__printk+0x10/0x10 [ 140.326608][ T6430] ? __might_fault+0xb0/0x130 [ 140.326643][ T6430] should_fail_ex+0x414/0x560 [ 140.326671][ T6430] _copy_from_user+0x2d/0xb0 [ 140.326709][ T6430] __sys_bpf+0x1ed/0x860 [ 140.326745][ T6430] ? __pfx___sys_bpf+0x10/0x10 [ 140.326809][ T6430] __x64_sys_bpf+0x7c/0x90 [ 140.326839][ T6430] do_syscall_64+0xfa/0x3b0 [ 140.326865][ T6430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.326887][ T6430] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 140.326908][ T6430] ? clear_bhb_loop+0x60/0xb0 [ 140.326935][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.326956][ T6430] RIP: 0033:0x7fad0458ebe9 [ 140.326975][ T6430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.326993][ T6430] RSP: 002b:00007fad0536b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.327016][ T6430] RAX: ffffffffffffffda RBX: 00007fad047b6180 RCX: 00007fad0458ebe9 [ 140.327032][ T6430] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 140.327045][ T6430] RBP: 00007fad0536b090 R08: 0000000000000000 R09: 0000000000000000 [ 140.327058][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.327071][ T6430] R13: 00007fad047b6218 R14: 00007fad047b6180 R15: 00007ffc2a234688 [ 140.327104][ T6430] [ 140.844265][ T5833] usb usb5-port1: attempt power cycle [ 141.192740][ T5833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.397720][ T5833] usb 5-1: device descriptor read/8, error -71 [ 142.600430][ T6411] xfrm0: entered promiscuous mode [ 142.623435][ T6411] xfrm0: entered allmulticast mode [ 142.655346][ T5918] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.862803][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 142.875402][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 142.927590][ T5918] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.977775][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.390215][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.134100][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.175656][ T5918] usb 4-1: string descriptor 0 read error: -22 [ 144.195304][ T5918] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.204539][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.238127][ T5918] usb 4-1: 0:2 : does not exist [ 144.267378][ T6466] fuse: Bad value for 'user_id' [ 144.274709][ T6466] fuse: Bad value for 'user_id' [ 144.304128][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 144.352738][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.362484][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.392872][ T5890] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 144.429374][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 144.438615][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.459584][ T24] usb 2-1: Product: syz [ 144.463968][ T24] usb 2-1: Manufacturer: syz [ 144.468614][ T24] usb 2-1: SerialNumber: syz [ 144.489369][ T24] usb 2-1: config 0 descriptor?? [ 144.649812][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 144.733937][ T5890] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.773510][ T5890] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 144.811719][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.846231][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.870939][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.893040][ T5890] usb 3-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 145.067200][ T5964] usb 2-1: USB disconnect, device number 4 [ 145.479373][ T5890] usb 3-1: 0:2 : does not exist [ 145.597453][ T5890] usb 3-1: USB disconnect, device number 6 [ 145.611010][ T43] usb 4-1: USB disconnect, device number 4 [ 145.739282][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.768660][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 145.776595][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.815686][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.837211][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.849766][ T6485] 9pnet_fd: Insufficient options for proto=fd [ 145.872899][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.892178][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.923427][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x3 [ 145.931116][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.947104][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.954966][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 145.967745][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x3 [ 145.975611][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.006662][ T5898] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.014429][ T5898] hid-generic 0000:0000:0000.0003: unexpected long global item [ 146.034142][ T5898] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 147.576439][ T6503] loop2: detected capacity change from 0 to 7 [ 147.612191][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.139'. [ 147.672422][ T6503] Dev loop2: unable to read RDB block 7 [ 147.686322][ T6483] netlink: 'syz.1.139': attribute type 4 has an invalid length. [ 147.712930][ T6503] loop2: unable to read partition table [ 147.718908][ T6503] loop2: partition table beyond EOD, truncated [ 147.942316][ T6503] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 149.732306][ T6534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.767782][ T6535] Can't find a SQUASHFS superblock on nullb0 [ 149.883758][ T5964] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 150.093776][ T5964] usb 5-1: not running at top speed; connect to a high speed hub [ 150.110059][ T5964] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 150.136682][ T5964] usb 5-1: config 1 has no interface number 1 [ 150.166424][ T5964] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 150.210846][ T5964] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.234666][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.252735][ T5964] usb 5-1: Product: syz [ 150.260106][ T5964] usb 5-1: Manufacturer: syz [ 150.278936][ T5964] usb 5-1: SerialNumber: syz [ 150.323272][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.779242][ T6556] FAULT_INJECTION: forcing a failure. [ 150.779242][ T6556] name failslab, interval 1, probability 0, space 0, times 0 [ 150.792172][ T6556] CPU: 0 UID: 0 PID: 6556 Comm: syz.2.157 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 150.792205][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.792218][ T6556] Call Trace: [ 150.792227][ T6556] [ 150.792236][ T6556] dump_stack_lvl+0x189/0x250 [ 150.792267][ T6556] ? __pfx____ratelimit+0x10/0x10 [ 150.792291][ T6556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.792316][ T6556] ? __pfx__printk+0x10/0x10 [ 150.792348][ T6556] ? __pfx___might_resched+0x10/0x10 [ 150.792372][ T6556] ? fs_reclaim_acquire+0x7d/0x100 [ 150.792404][ T6556] should_fail_ex+0x414/0x560 [ 150.792432][ T6556] should_failslab+0xa8/0x100 [ 150.792469][ T6556] __kmalloc_cache_noprof+0x70/0x3d0 [ 150.792491][ T6556] ? alloc_pipe_info+0xe9/0x4d0 [ 150.792519][ T6556] alloc_pipe_info+0xe9/0x4d0 [ 150.792545][ T6556] splice_direct_to_actor+0xa5d/0xcc0 [ 150.792571][ T6556] ? __lock_acquire+0xab9/0xd20 [ 150.792606][ T6556] ? __lock_acquire+0xab9/0xd20 [ 150.792625][ T6556] ? __pfx_direct_splice_actor+0x10/0x10 [ 150.792648][ T6556] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 150.792691][ T6556] do_splice_direct+0x181/0x270 [ 150.792718][ T6556] ? __pfx_do_splice_direct+0x10/0x10 [ 150.792742][ T6556] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 150.792775][ T6556] ? rw_verify_area+0x258/0x650 [ 150.792813][ T6556] do_sendfile+0x4da/0x7e0 [ 150.792850][ T6556] ? __pfx_do_sendfile+0x10/0x10 [ 150.792892][ T6556] __se_sys_sendfile64+0xd9/0x190 [ 150.792922][ T6556] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 150.792944][ T6556] ? rcu_is_watching+0x15/0xb0 [ 150.792974][ T6556] ? do_syscall_64+0xbe/0x3b0 [ 150.793003][ T6556] do_syscall_64+0xfa/0x3b0 [ 150.793026][ T6556] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.793049][ T6556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.793071][ T6556] ? clear_bhb_loop+0x60/0xb0 [ 150.793097][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.793119][ T6556] RIP: 0033:0x7fad0458ebe9 [ 150.793139][ T6556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.793157][ T6556] RSP: 002b:00007fad0536b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.793179][ T6556] RAX: ffffffffffffffda RBX: 00007fad047b6180 RCX: 00007fad0458ebe9 [ 150.793195][ T6556] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 150.793208][ T6556] RBP: 00007fad0536b090 R08: 0000000000000000 R09: 0000000000000000 [ 150.793221][ T6556] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 150.793234][ T6556] R13: 00007fad047b6218 R14: 00007fad047b6180 R15: 00007ffc2a234688 [ 150.793268][ T6556] [ 151.433599][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.577494][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.739219][ T43] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 151.755798][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.796445][ T43] usb 1-1: config 0 has no interface number 0 [ 151.799099][ T5964] usb 5-1: failed to enable PITCH for EP 0x82 [ 151.812932][ T43] usb 1-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.871677][ T43] usb 1-1: config 0 interface 25 has no altsetting 0 [ 151.896975][ T43] usb 1-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 151.938154][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.951633][ T5964] usb 5-1: USB disconnect, device number 9 [ 151.990162][ T43] usb 1-1: Product: syz [ 152.012862][ T43] usb 1-1: Manufacturer: syz [ 152.017547][ T43] usb 1-1: SerialNumber: syz [ 152.113754][ T43] usb 1-1: config 0 descriptor?? [ 152.141350][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.343454][ T5890] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 152.518020][ T6577] capability: warning: `syz.0.154' uses 32-bit capabilities (legacy support in use) [ 152.923575][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.966785][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.011983][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 153.058884][ T5890] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.081062][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.110103][ T5890] usb 2-1: SerialNumber: syz [ 153.401325][ T5890] usb 2-1: 0:2 : does not exist [ 153.423495][ T5890] usb 2-1: unit 5 not found! [ 153.489988][ T5890] usb 2-1: USB disconnect, device number 5 [ 153.726367][ T6599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.771792][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.466574][ T43] usb 1-1: Found UVC 0.00 device syz (1b3b:2951) [ 154.482732][ T43] usb 1-1: No valid video chain found. [ 154.490595][ T43] usb 1-1: USB disconnect, device number 8 [ 154.750522][ T6605] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 154.786343][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 154.811319][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 156.125889][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.190341][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.201623][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.211498][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.224366][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.229589][ T6620] block device autoloading is deprecated and will be removed. [ 156.234699][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.253877][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.320483][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.382083][ T5964] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.412496][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.475116][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.496080][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 156.613144][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 156.664697][ T5964] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.727733][ T5964] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 156.794260][ T5964] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.633756][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.641944][ T5964] usb 2-1: Product: 坘眹〈옺몀쨆ጴḬ眎갟楩㽠掝楑尯ꏆ䅂è䖤⁸⿭奩ᓇᾸ梸뒅뙧蔑鈺䚚犩璪ﳦ鶕∐ꃰ컯荒䙔૲氆쬚䍼캴꒸釘农ﻔ藈爤䈲灾뾍ዣ䎉蟉㰴둎댨ꯞ鰳돛䱛腤䂮쬑㋙኎阅࢜겴쇎㙴ꟳ┶㢑ధ䖧┎뮰趃㨆▚瞦侏혃⦍ॳ鉔䄅䫚á簗ﱋ삮摲ꓐ㾽踂檸教 [ 157.674936][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.793602][ T5964] usb 2-1: Manufacturer: ࠔ [ 157.798811][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 157.818248][ T6635] fuse: Unknown parameter 'user_i00000000000000000000' [ 157.834835][ T5964] usb 2-1: SerialNumber: 〉 [ 157.919286][ T6637] binder: BINDER_SET_CONTEXT_MGR already set [ 157.932403][ T6637] binder: 6632:6637 ioctl 4018620d 200000000040 returned -16 [ 157.952491][ T6636] xt_nat: multiple ranges no longer supported [ 158.186915][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.199455][ T5964] cdc_ncm 2-1:1.0: bind() failure [ 158.214763][ T5964] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 158.222390][ T5964] cdc_ncm 2-1:1.1: bind() failure [ 158.234979][ T5964] usb 2-1: USB disconnect, device number 6 [ 158.293218][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.352829][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 158.374480][ T5890] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 158.392817][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.408463][ T5890] usb 3-1: config 0 has no interface number 0 [ 158.437209][ T5890] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 158.452423][ T5890] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 158.462777][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 158.474314][ T5890] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 158.488637][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.494070][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.497433][ T5890] usb 3-1: Product: syz [ 158.512393][ T5890] usb 3-1: Manufacturer: syz [ 158.518177][ T43] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 158.518212][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 158.518241][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.521422][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 158.541509][ T5890] usb 3-1: SerialNumber: syz [ 158.557807][ T5890] usb 3-1: config 0 descriptor?? [ 158.588229][ T6630] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 158.589585][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.606358][ T5890] usb-storage 3-1:0.231: USB Mass Storage device detected [ 158.609226][ T43] usb 5-1: Product: syz [ 158.658680][ T43] usb 5-1: Manufacturer: syz [ 158.673083][ T43] usb 5-1: SerialNumber: syz [ 158.702378][ T43] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.745151][ T43] usbtest 5-1:1.0: Linux user mode ISO test driver [ 158.757371][ T43] usbtest 5-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 158.892941][ T6652] capability: warning: `syz.0.178' uses deprecated v2 capabilities in a way that may be insecure [ 159.047042][ T1209] usb 3-1: USB disconnect, device number 7 [ 159.369248][ T6644] overlayfs: statfs failed on './file0' [ 159.467446][ T6645] overlayfs: statfs failed on './file0' [ 160.861351][ T1209] usb 5-1: USB disconnect, device number 10 [ 161.183892][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 162.073857][ T6660] xt_hashlimit: max too large, truncated to 1048576 [ 162.092456][ T6660] fuse: Unknown parameter 'fscontext' [ 162.375000][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 162.468623][ T6671] netlink: 44 bytes leftover after parsing attributes in process `syz.3.181'. [ 163.859522][ T6680] --map-set only usable from mangle table [ 164.011469][ T6677] syz_tun: entered allmulticast mode [ 164.086169][ T6677] dvmrp8: entered allmulticast mode [ 164.952722][ T5890] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 164.969421][ T6674] syz_tun: left allmulticast mode [ 165.293237][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 165.325706][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.747491][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.808744][ T5890] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 165.969266][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.296436][ T5890] usb 2-1: SerialNumber: syz [ 166.491742][ T5890] usb 2-1: config 0 descriptor?? [ 166.654267][ T5890] hso 2-1:0.0: Can't find BULK IN endpoint [ 166.919368][ T5833] usb 2-1: USB disconnect, device number 7 [ 170.134770][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.283791][ T24] usb 3-1: device descriptor read/64, error -71 [ 170.903118][ T5898] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.995774][ T5833] kernel write not supported for file /input/event2 (pid: 5833 comm: kworker/0:3) [ 171.102336][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.110769][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 171.147462][ T5898] usb 2-1: config 0 has an invalid interface number: 127 but max is 0 [ 171.167484][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.208135][ T5898] usb 2-1: config 0 has no interface number 0 [ 171.225868][ T5898] usb 2-1: New USB device found, idVendor=0403, idProduct=bdc8, bcdDevice=63.99 [ 171.243450][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.251527][ T5898] usb 2-1: Product: syz [ 171.256632][ T5898] usb 2-1: Manufacturer: syz [ 171.261303][ T5898] usb 2-1: SerialNumber: syz [ 171.291285][ T5898] usb 2-1: config 0 descriptor?? [ 171.298631][ T24] usb 3-1: device descriptor read/64, error -71 [ 171.319853][ T5898] ftdi_sio 2-1:0.127: FTDI USB Serial Device converter detected [ 171.331591][ T5898] ftdi_sio ttyUSB0: unknown device type: 0x6399 [ 171.413356][ T24] usb usb3-port1: attempt power cycle [ 171.747969][ T5918] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.822987][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.996981][ T24] usb 3-1: device descriptor read/8, error -71 [ 172.683405][ T43] usb 2-1: USB disconnect, device number 8 [ 172.690579][ T43] ftdi_sio 2-1:0.127: device disconnected [ 172.712813][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 172.730641][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.742157][ T5918] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 172.783125][ T5918] usb 5-1: config 7 has no interface number 0 [ 172.823124][ T5918] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 172.832316][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.859600][ T5918] usb 5-1: Product: syz [ 172.864143][ T5918] usb 5-1: Manufacturer: syz [ 172.868796][ T5918] usb 5-1: SerialNumber: syz [ 174.705040][ T6796] Can't find a SQUASHFS superblock on nullb0 [ 174.863817][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 175.050549][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 175.071101][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.106382][ T24] usb 3-1: Product: syz [ 175.117835][ T24] usb 3-1: Manufacturer: syz [ 175.128357][ T24] usb 3-1: SerialNumber: syz [ 175.450737][ T5918] usb 5-1: USB disconnect, device number 11 [ 175.891409][ T24] rtl8150 3-1:1.0: couldn't reset the device [ 176.028658][ T24] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 177.031150][ T6816] overlayfs: failed to resolve './file1': -2 [ 177.053085][ T24] usb 3-1: USB disconnect, device number 12 [ 177.665606][ T6823] pim6reg: entered allmulticast mode [ 178.110383][ T6834] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 178.193203][ T6829] pim6reg: left allmulticast mode [ 180.949413][ T6869] netlink: 172 bytes leftover after parsing attributes in process `syz.3.232'. [ 180.968435][ T6869] openvswitch: netlink: Flow key attr not present in new flow. [ 181.158977][ T5833] IPVS: starting estimator thread 0... [ 181.404060][ T6872] IPVS: using max 18 ests per chain, 43200 per kthread [ 182.323090][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.632809][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 182.689974][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 182.823140][ T43] usb 4-1: config index 0 descriptor too short (expected 17956, got 36) [ 182.903067][ T43] usb 4-1: config 113 has too many interfaces: 54, using maximum allowed: 32 [ 183.800532][ T43] usb 4-1: config 113 has an invalid descriptor of length 1, skipping remainder of the config [ 183.830296][ T43] usb 4-1: config 113 has 0 interfaces, different from the descriptor's value: 54 [ 184.544708][ T43] usb 4-1: string descriptor 0 read error: -71 [ 184.551122][ T43] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 185.314052][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.616547][ T43] usb 4-1: can't set config #113, error -71 [ 186.210279][ T43] usb 4-1: USB disconnect, device number 5 [ 188.129508][ T6941] netlink: 2 bytes leftover after parsing attributes in process `syz.4.254'. [ 188.427067][ T6951] netlink: 'syz.2.255': attribute type 20 has an invalid length. [ 188.824333][ T6951] dvmrp17: entered allmulticast mode [ 188.888351][ T6936] veth1_macvtap: left promiscuous mode [ 188.921204][ T6936] macsec0: entered promiscuous mode [ 188.936971][ T6936] macsec0: entered allmulticast mode [ 188.962848][ T6953] netlink: 56 bytes leftover after parsing attributes in process `syz.3.252'. [ 190.016042][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.215825][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 190.227148][ T5890] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 190.240063][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.261820][ T5890] usb 3-1: Product: syz [ 190.278422][ T5890] usb 3-1: Manufacturer: syz [ 190.307849][ T5890] usb 3-1: SerialNumber: syz [ 190.336100][ T5890] usb 3-1: config 0 descriptor?? [ 190.342724][ T5898] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 190.388832][ T5890] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 190.538005][ T5898] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.561172][ T5898] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.587681][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.625231][ T5898] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 190.665175][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.746570][ T5898] usb 5-1: config 0 descriptor?? [ 190.766748][ T43] usb 3-1: USB disconnect, device number 13 [ 191.008984][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 191.023585][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.057168][ T5898] usb 5-1: USB disconnect, device number 12 [ 191.621409][ T13] bond0: (slave bond_slave_0): interface is now down [ 191.637309][ T6975] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 191.646115][ T13] bond0: (slave bond_slave_1): interface is now down [ 191.673953][ T59] bond0: (slave bond_slave_0): interface is now down [ 191.681136][ T59] bond0: (slave bond_slave_1): interface is now down [ 191.706959][ T59] bond0: now running without any active interface! [ 191.941937][ T6981] hub 9-0:1.0: USB hub found [ 191.947730][ T6981] hub 9-0:1.0: 1 port detected [ 191.952890][ T5833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 192.126691][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 192.158330][ T5833] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 192.202323][ T5833] usb 5-1: config 16 has an invalid descriptor of length 52, skipping remainder of the config [ 192.244742][ T5833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 52, changing to 7 [ 192.256374][ T5833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 9272, setting to 1024 [ 192.272863][ T5833] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.289696][ T5833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.291194][ T6988] netlink: 'syz.1.264': attribute type 2 has an invalid length. [ 192.305399][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.348268][ T5833] usbtmc 5-1:16.0: bulk endpoints not found [ 192.362752][ T5965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.522773][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 192.531509][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.546792][ T5965] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.556676][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.575271][ T5965] usb 1-1: config 0 descriptor?? [ 192.583518][ T5918] usb 5-1: USB disconnect, device number 13 [ 193.253568][ T5965] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.467794][ T5964] usb 1-1: USB disconnect, device number 9 [ 193.473946][ C0] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 193.677289][ T43] IPVS: starting estimator thread 0... [ 194.013172][ T7011] IPVS: using max 22 ests per chain, 52800 per kthread [ 194.993379][ T5843] Bluetooth: hci2: unknown advertising packet type: 0x6d [ 194.993462][ T5843] Bluetooth: hci2: Malformed LE Event: 0x02 [ 195.247779][ T5965] IPVS: starting estimator thread 0... [ 195.360001][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 195.392886][ T7050] IPVS: using max 23 ests per chain, 55200 per kthread [ 195.949826][ T7034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.213158][ T7034] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 196.256823][ T7034] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 196.344266][ T7034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.350941][ T7034] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.406665][ T7034] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.421983][ T7061] fuse: Bad value for 'fd' [ 196.435858][ T7034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.455738][ T7034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.480865][ T7034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 196.503215][ T30] audit: type=1800 audit(1755884055.514:29): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.289" name="/" dev="9p" ino=2 res=0 errno=0 [ 196.563996][ T7034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.577656][ T7034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 196.785602][ T7034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.102809][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.104669][ T7034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.164590][ T7034] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.223524][ T7034] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 197.740469][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 197.750281][ T7079] netlink: 'syz.0.295': attribute type 30 has an invalid length. [ 197.960653][ T7079] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.970141][ T7079] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.979665][ T7079] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.989018][ T7079] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.372961][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.452741][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.612882][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.852935][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.952140][ T5837] Bluetooth: hci3: unknown advertising packet type: 0x6d [ 198.952209][ T5837] Bluetooth: hci3: Malformed LE Event: 0x02 [ 199.024433][ T43] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 199.041992][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.086731][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.172785][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.219132][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 199.295267][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.338018][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.375449][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.459029][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 199.500264][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.519245][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.540540][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.586383][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 199.630734][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.631921][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.637311][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.917271][ T7102] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.924181][ T7102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.930507][ T7102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.958899][ T7102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.969035][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.029543][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.066818][ T7102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.098243][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 200.133178][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.141661][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.155919][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.616030][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 200.626573][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.640517][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.650341][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.662807][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 200.674825][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.683678][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.700275][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.713467][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 200.746112][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.770125][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 200.800605][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 200.818123][ T43] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 200.829554][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.840399][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 200.867719][ T43] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 200.902494][ T43] usb 1-1: Product: syz [ 200.930362][ T7128] ALSA: mixer_oss: invalid OSS volume '8' [ 200.954161][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.982889][ T43] usb 1-1: Manufacturer: syz [ 200.992859][ T43] usb 1-1: SerialNumber: syz [ 201.079785][ T43] usb 1-1: config 0 descriptor?? [ 201.110370][ T43] yurex 1-1:0.0: Could not submitting URB [ 201.743167][ T43] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 201.854293][ T43] usb 1-1: USB disconnect, device number 10 [ 201.984932][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.988441][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.991206][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.021676][ T7128] syz.2.310 (7128): drop_caches: 2 [ 202.132948][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.012829][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.053921][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.054148][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.060212][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.212909][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.318208][ T7148] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 204.332220][ T7148] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.764908][ T7169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'. [ 204.774961][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'. [ 204.841777][ T7171] random: crng reseeded on system resumption [ 206.416483][ T7181] block nbd0: shutting down sockets [ 206.567636][ T7191] siw: device registration error -23 [ 207.272118][ T5985] udevd[5985]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 207.591006][ T5965] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 208.043255][ T5833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 208.064845][ T5965] usb 4-1: Using ep0 maxpacket: 32 [ 208.094582][ T5965] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 208.103999][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.112066][ T5965] usb 4-1: Product: syz [ 208.116995][ T5965] usb 4-1: Manufacturer: syz [ 208.121728][ T5965] usb 4-1: SerialNumber: syz [ 208.224399][ T5965] usb 4-1: config 0 descriptor?? [ 208.255360][ T5833] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.273173][ T5833] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 208.315028][ T5833] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.340947][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.350118][ T5833] usb 3-1: Product: syz [ 208.354876][ T5833] usb 3-1: Manufacturer: syz [ 208.359715][ T5833] usb 3-1: SerialNumber: syz [ 208.411436][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 208.420923][ T5833] cdc_mbim 3-1:1.0: skipping garbage [ 208.584614][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 208.603940][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.625463][ T7201] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.640111][ T43] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 208.643119][ T5965] airspy 4-1:0.0: Board ID: 00 [ 208.656848][ T5965] airspy 4-1:0.0: Firmware version: [ 208.663082][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.685992][ T43] usb 5-1: Product: syz [ 208.703680][ T43] usb 5-1: Manufacturer: syz [ 208.710379][ T43] usb 5-1: SerialNumber: syz [ 208.741382][ T43] usb 5-1: config 0 descriptor?? [ 209.183303][ T43] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 209.316160][ T7201] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 209.333713][ T5833] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 209.344683][ T5833] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 209.547050][ T5833] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 209.566717][ T5833] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 209.611753][ T43] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 209.667881][ T5833] wwan wwan0: port wwan0mbim0 attached [ 209.727362][ T5965] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 209.741508][ T5965] airspy 4-1:0.0: Registered as swradio24 [ 209.747735][ T5965] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 209.792228][ T43] usb 5-1: USB disconnect, device number 14 [ 209.933306][ T5965] usb 4-1: USB disconnect, device number 6 [ 209.940664][ T5833] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 86:e3:4b:5e:32:ec [ 210.028522][ T5833] usb 3-1: USB disconnect, device number 14 [ 210.079792][ T5833] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 210.413871][ T5833] wwan wwan0: port wwan0mbim0 disconnected [ 213.633520][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.774576][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.782090][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.793527][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.795951][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 213.801271][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.825513][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.834111][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.845641][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 213.855749][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.871056][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.872122][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.886007][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.906765][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.919847][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.962893][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.976412][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.988822][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 213.998954][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.142087][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.157984][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 214.165913][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.165946][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.187472][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 214.195865][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 214.211060][ T7265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.227141][ T5928] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 214.266076][ T5928] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 214.471011][ T24] usb 2-1: usb_control_msg returned -32 [ 214.499324][ T24] usbtmc 2-1:16.0: can't read capabilities [ 214.547368][ T7267] fido_id[7267]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.802768][ T30] audit: type=1326 audit(1755884073.804:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.0.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f2118ebe9 code=0x0 [ 214.823570][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.925496][ T7272] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 214.958631][ T24] usb 2-1: USB disconnect, device number 9 [ 215.968251][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 216.817224][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 216.825818][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.853067][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.863508][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.873290][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.906115][ T5928] usb 2-1: config 0 descriptor?? [ 216.931035][ T5928] hub 2-1:0.0: USB hub found [ 217.174060][ T5928] hub 2-1:0.0: 1 port detected [ 217.403696][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.725433][ T5928] usb 2-1: USB disconnect, device number 10 [ 217.793850][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.834591][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 217.909049][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.010579][ T24] usb 4-1: config 0 descriptor?? [ 219.738070][ T24] wacom 0003:056A:00BC.0005: collection stack underflow [ 219.808124][ T24] wacom 0003:056A:00BC.0005: item 0 2 0 12 parsing failed [ 219.811332][ T5837] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 219.817060][ T24] wacom 0003:056A:00BC.0005: parse failed [ 219.829720][ T24] wacom 0003:056A:00BC.0005: probe with driver wacom failed with error -22 [ 219.997101][ T24] usb 4-1: USB disconnect, device number 7 [ 221.439616][ T7350] syz.1.379: attempt to access beyond end of device [ 221.439616][ T7350] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 221.750334][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.183146][ T5964] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.372790][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 222.401257][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.474198][ T5964] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.485906][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.670214][ T5964] usb 5-1: config 0 descriptor?? [ 223.312935][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 223.663120][ T5964] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 223.860220][ T5964] usb 5-1: USB disconnect, device number 15 [ 224.051182][ T7376] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.101421][ T7376] overlayfs: missing 'lowerdir' [ 225.216874][ T7398] can0: slcan on ttyS3. [ 225.954085][ T5928] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 225.984016][ T7396] loop7: detected capacity change from 0 to 7 [ 226.059635][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.069170][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.093398][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.102747][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.137808][ T7403] comedi: No check for data length of config insn id 69634 is implemented [ 226.171766][ T7403] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 226.173755][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.191037][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.200391][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.210037][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.213540][ T7403] comedi: Assuming n=15 is correct [ 226.227051][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.236298][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.251183][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 226.252925][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.265619][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.302916][ T7396] ldm_validate_partition_table(): Disk read failed. [ 226.308707][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.319547][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.332344][ T5928] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 226.343070][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.350748][ T5928] usb 4-1: config 0 has no interface number 0 [ 226.352306][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.371826][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.381265][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.392399][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 226.401826][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 226.411855][ T7396] Dev loop7: unable to read RDB block 0 [ 226.430712][ T5928] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 226.449057][ T7396] loop7: unable to read partition table [ 226.474106][ T7396] loop7: partition table beyond EOD, truncated [ 226.483310][ T5928] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.503063][ T7396] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 226.532093][ T5928] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.577522][ T5205] ldm_validate_partition_table(): Disk read failed. [ 226.586424][ T5928] usb 4-1: config 0 interface 196 has no altsetting 0 [ 226.608551][ T5205] Dev loop7: unable to read RDB block 0 [ 226.732387][ T5928] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 226.750167][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.758585][ T5205] loop7: unable to read partition table [ 226.770437][ T5205] loop7: partition table beyond EOD, truncated [ 226.797815][ T5928] usb 4-1: Product: syz [ 226.822011][ T5928] usb 4-1: Manufacturer: syz [ 226.922838][ T5928] usb 4-1: SerialNumber: syz [ 226.962957][ T5928] usb 4-1: config 0 descriptor?? [ 227.097883][ T7399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.040515][ T5928] ipheth 4-1:0.196: Unable to find endpoints [ 229.131083][ T5928] usb 4-1: USB disconnect, device number 8 [ 229.344723][ T7398] can0 (unregistered): slcan off ttyS3. [ 231.206074][ T24] kernel write not supported for file /comedi4 (pid: 24 comm: kworker/1:0) [ 233.392778][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 234.148805][ T7513] syz.4.428(7513): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 234.971365][ T7512] delete_channel: no stack [ 246.821531][ T7640] lo speed is unknown, defaulting to 1000 [ 246.866356][ T7640] lo speed is unknown, defaulting to 1000 [ 246.901370][ T7640] lo speed is unknown, defaulting to 1000 [ 248.109124][ T5964] IPVS: starting estimator thread 0... [ 248.282767][ T7671] IPVS: using max 24 ests per chain, 57600 per kthread [ 248.410285][ T5918] lo speed is unknown, defaulting to 1000 [ 248.423675][ T7640] infiniband syz2: set active [ 248.438628][ T7640] infiniband syz2: added lo [ 248.550673][ T7640] syz2: rxe_create_cq: returned err = -12 [ 248.699675][ T7640] infiniband syz2: Couldn't create ib_mad CQ [ 248.706495][ T7640] infiniband syz2: Couldn't open port 1 [ 248.847278][ T7640] RDS/IB: syz2: added [ 248.880199][ T7640] smc: adding ib device syz2 with port count 1 [ 248.900652][ T7640] smc: ib device syz2 port 1 has pnetid [ 248.971844][ T5918] lo speed is unknown, defaulting to 1000 [ 249.424610][ T7640] lo speed is unknown, defaulting to 1000 [ 254.209952][ T7640] lo speed is unknown, defaulting to 1000 [ 255.187280][ T5918] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.207730][ T7741] : renamed from bridge_slave_0 (while UP) [ 255.480318][ T5918] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 255.491090][ T5918] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 256.304980][ T5918] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 256.333223][ T5918] usb 1-1: config 220 has no interface number 2 [ 256.380653][ T5918] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 256.402480][ T7640] lo speed is unknown, defaulting to 1000 [ 256.421419][ T5918] usb 1-1: config 220 interface 0 has no altsetting 0 [ 256.583975][ T5918] usb 1-1: config 220 interface 76 has no altsetting 0 [ 256.590912][ T5918] usb 1-1: config 220 interface 1 has no altsetting 0 [ 256.666965][ T5918] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 256.703016][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.772267][ T5918] usb 1-1: Product: syz [ 256.802376][ T5918] usb 1-1: Manufacturer: syz [ 256.819196][ T5918] usb 1-1: SerialNumber: syz [ 257.107536][ T5918] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 257.137407][ T5918] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 257.175790][ T5918] usb 1-1: No valid video chain found. [ 257.194597][ T5918] usb 1-1: selecting invalid altsetting 0 [ 257.264389][ T5918] usb 1-1: selecting invalid altsetting 0 [ 257.283649][ T5918] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 258.279311][ T7640] lo speed is unknown, defaulting to 1000 [ 258.699007][ T5918] usb 1-1: USB disconnect, device number 11 [ 259.490150][ T7640] lo speed is unknown, defaulting to 1000 [ 261.027372][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.034215][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.219427][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.247621][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.259004][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.281358][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.291552][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.527429][ T7828] lo speed is unknown, defaulting to 1000 [ 263.721059][ T30] audit: type=1804 audit(1755884122.734:31): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.529" name="/newroot/102/file0" dev="tmpfs" ino=570 res=1 errno=0 [ 264.668139][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.860993][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.963120][ T5898] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 265.295317][ T5898] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 265.346797][ T5898] usb 2-1: config 0 has no interface number 0 [ 265.413765][ T5837] Bluetooth: hci5: command tx timeout [ 265.466782][ T5898] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 265.583092][ T5898] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.586677][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.603033][ T5898] usb 2-1: config 0 interface 12 has no altsetting 0 [ 265.630334][ T5898] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 265.710990][ T5898] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 265.732185][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.772730][ T5898] usb 2-1: Product: syz [ 265.777034][ T5898] usb 2-1: Manufacturer: syz [ 265.781684][ T5898] usb 2-1: SerialNumber: syz [ 265.849240][ T7862] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 265.862534][ T5898] usb 2-1: config 0 descriptor?? [ 265.869360][ T7857] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.894988][ T5898] f81534 2-1:0.12: unsupported endpoint max packet size [ 266.092916][ T10] usb 2-1: USB disconnect, device number 11 [ 266.863427][ T7886] siw: device registration error -23 [ 267.503566][ T5837] Bluetooth: hci5: command tx timeout [ 267.773234][ T49] bridge_slave_1: left allmulticast mode [ 267.787990][ T49] bridge_slave_1: left promiscuous mode [ 267.810137][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.855144][ T49] bridge_slave_0: left allmulticast mode [ 267.912710][ T49] bridge_slave_0: left promiscuous mode [ 267.918796][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.945195][ T49] dvmrp17 (unregistering): left allmulticast mode [ 269.266754][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.280855][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.295288][ T49] bond0 (unregistering): Released all slaves [ 269.444956][ T7828] chnl_net:caif_netlink_parms(): no params data found [ 269.573420][ T5837] Bluetooth: hci5: command tx timeout [ 269.821366][ T7921] netlink: 'syz.3.550': attribute type 10 has an invalid length. [ 271.270586][ T7921] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 271.368689][ T7938] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.652820][ T5837] Bluetooth: hci5: command tx timeout [ 274.982131][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.012142][ T7957] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 275.019209][ T7957] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.028192][ T7957] vhci_hcd vhci_hcd.0: Device attached [ 275.034185][ T7966] vhci_hcd: connection closed [ 275.039529][ T12] vhci_hcd: stop threads [ 275.068323][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.154754][ T7828] bridge_slave_0: entered allmulticast mode [ 275.283672][ T12] vhci_hcd: release socket [ 275.285099][ T7828] bridge_slave_0: entered promiscuous mode [ 275.290026][ T12] vhci_hcd: disconnect device [ 275.473170][ T5964] vhci_hcd: vhci_device speed not set [ 275.691335][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.742842][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.772856][ T7828] bridge_slave_1: entered allmulticast mode [ 275.781056][ T7828] bridge_slave_1: entered promiscuous mode [ 277.371225][ T7828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.450305][ T7828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.532806][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.788853][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 278.786061][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 278.822712][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.830909][ T10] usb 5-1: Product: syz [ 279.515116][ T10] usb 5-1: Manufacturer: syz [ 279.527797][ T10] usb 5-1: SerialNumber: syz [ 279.545334][ T10] usb 5-1: config 0 descriptor?? [ 279.569765][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 279.813322][ T49] hsr_slave_0: left promiscuous mode [ 279.819823][ T49] hsr_slave_1: left promiscuous mode [ 279.827560][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.889199][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.922826][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.951658][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.975143][ T43] usb 5-1: USB disconnect, device number 16 [ 280.039729][ T49] veth1_macvtap: left promiscuous mode [ 280.066001][ T49] veth0_macvtap: left promiscuous mode [ 280.091167][ T49] veth1_vlan: left promiscuous mode [ 280.112413][ T49] veth0_vlan: left promiscuous mode [ 280.873935][ T5898] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 281.039679][ T5898] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 281.063241][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.084861][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.096940][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.132544][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.176748][ T5898] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.201873][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.227331][ T5898] usb 5-1: config 0 descriptor?? [ 281.236753][ T8013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.351835][ T49] team0 (unregistering): Port device team_slave_1 removed [ 281.881129][ T5898] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 281.938030][ T49] team0 (unregistering): Port device team_slave_0 removed [ 282.112475][ T5898] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 282.197159][ T5898] usb 5-1: USB disconnect, device number 17 [ 282.257798][ T8037] fido_id[8037]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:047F:FFFF.0006/report_descriptor': No such device [ 283.306606][ T13] smc: removing ib device syz2 [ 283.316957][ T7828] team0: Port device team_slave_0 added [ 283.327648][ T43] lo speed is unknown, defaulting to 1000 [ 283.334191][ T43] syz2: Port: 1 Link DOWN [ 283.336426][ T7828] team0: Port device team_slave_1 added [ 283.518881][ T43] lo speed is unknown, defaulting to 1000 [ 283.520681][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.559885][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.704884][ T8042] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.723754][ T7828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.755438][ T8042] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 283.790596][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.847550][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.947210][ T8042] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.959233][ T7828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.002397][ T8042] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 284.545035][ T8042] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.551406][ T8042] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 284.757712][ T8042] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.826840][ T8042] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 284.880902][ T8042] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 284.912221][ T8042] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 285.261685][ T7828] hsr_slave_0: entered promiscuous mode [ 285.280565][ T7828] hsr_slave_1: entered promiscuous mode [ 285.324351][ T7828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.339205][ T7828] Cannot create hsr debugfs directory [ 286.122990][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 286.132196][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.585'. [ 288.876448][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 288.889007][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 288.935159][ T8106] ceph: No mds server is up or the cluster is laggy [ 288.980684][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 289.011962][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 289.268150][ T7828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 289.376475][ T7828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 289.465898][ T7828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 289.613470][ T7828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 290.454277][ T8135] mmap: syz.1.601 (8135) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.518720][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 290.984709][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.201115][ T7828] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.277884][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.285173][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.337187][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.344466][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.970847][ T49] IPVS: stop unused estimator thread 0... [ 292.739760][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.953467][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 293.124412][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 293.143241][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 293.164872][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.199949][ T10] usb 2-1: Product: syz [ 293.230251][ T10] usb 2-1: Manufacturer: syz [ 293.266313][ T10] usb 2-1: SerialNumber: syz [ 293.329140][ T10] usb 2-1: config 0 descriptor?? [ 293.511853][ T8181] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 293.923207][ T10] airspy 2-1:0.0: Board ID: 00 [ 293.928239][ T10] airspy 2-1:0.0: Firmware version: [ 294.468567][ T10] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 294.533725][ T10] airspy 2-1:0.0: Registered as swradio24 [ 294.692880][ T10] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 294.716706][ T10] usb 2-1: USB disconnect, device number 12 [ 295.003577][ T7828] veth0_vlan: entered promiscuous mode [ 295.475372][ T7828] veth1_vlan: entered promiscuous mode [ 295.713390][ T7828] veth0_macvtap: entered promiscuous mode [ 295.794576][ T7828] veth1_macvtap: entered promiscuous mode [ 295.887780][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.206551][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.888763][ T7828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.898036][ T7828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.907241][ T7828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.916412][ T7828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.481228][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.506985][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.592742][ T5918] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 297.602187][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.647331][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.773282][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 297.793955][ T5918] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 297.816509][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.895317][ T5918] usb 2-1: config 0 descriptor?? [ 297.940559][ T5918] gspca_main: sq930x-2.14.0 probing 041e:403c [ 298.783074][ T5918] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 298.847614][ T5918] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 298.892988][ T5918] usb 2-1: USB disconnect, device number 13 [ 298.953428][ T30] audit: type=1326 audit(1755884157.964:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8240 comm="syz.5.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94ad8ebe9 code=0x0 [ 300.266559][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 300.874968][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 300.896076][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.3.631'. [ 300.922719][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.945383][ T24] usb 6-1: Product: syz [ 301.028018][ T24] usb 6-1: Manufacturer: syz [ 301.034166][ T24] usb 6-1: SerialNumber: syz [ 301.097858][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.138868][ T8283] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 301.207908][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 301.308110][ T5918] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.608746][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.662019][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.502937][ T5918] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 302.510571][ T5918] ath9k_htc: Failed to initialize the device [ 302.571864][ T24] usb 6-1: USB disconnect, device number 2 [ 302.608978][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 303.002298][ T8281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.016681][ T8281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.033009][ T8281] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 303.048721][ T8281] bond0 (unregistering): Released all slaves [ 303.264767][ T5837] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 305.412725][ T30] audit: type=1326 audit(1755884164.404:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8317 comm="syz.1.643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564fd8ebe9 code=0x0 [ 309.962731][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 310.262662][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 310.264960][ T43] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 310.297449][ T43] usb 5-1: config 0 has no interface number 0 [ 310.400420][ T8360] ALSA: mixer_oss: invalid OSS volume '8' [ 310.445208][ T43] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 311.398215][ T43] usb 5-1: string descriptor 0 read error: -71 [ 311.404958][ T43] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 311.451376][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.523498][ T43] usb 5-1: config 0 descriptor?? [ 311.537719][ T43] usb 5-1: can't set config #0, error -71 [ 311.584708][ T43] usb 5-1: USB disconnect, device number 18 [ 312.109935][ T8404] comedi: valid board names for 8255 driver are: [ 312.138607][ T8404] 8255 [ 312.180939][ T8404] comedi: valid board names for vmk80xx driver are: [ 312.250661][ T8404] vmk80xx [ 312.282707][ T8404] comedi: valid board names for usbduxsigma driver are: [ 312.310469][ T8404] usbduxsigma [ 312.325696][ T8404] comedi: valid board names for usbduxfast driver are: [ 312.406633][ T8404] usbduxfast [ 312.476786][ T8404] comedi: valid board names for usbdux driver are: [ 312.543184][ T8404] usbdux [ 312.625320][ T8404] comedi: valid board names for ni6501 driver are: [ 312.683787][ T8404] ni6501 [ 312.686919][ T8404] comedi: valid board names for dt9812 driver are: [ 312.744341][ T8404] dt9812 [ 312.792304][ T8404] comedi: valid board names for ni_labpc_cs driver are: [ 312.799617][ T8404] ni_labpc_cs [ 312.803213][ T8404] comedi: valid board names for ni_daq_700 driver are: [ 312.810167][ T8404] ni_daq_700 [ 312.813643][ T8404] comedi: valid board names for labpc_pci driver are: [ 312.820496][ T8404] labpc_pci [ 312.824886][ T8404] comedi: valid board names for adl_pci9118 driver are: [ 312.833630][ T8404] pci9118dg [ 312.837083][ T8404] pci9118hg [ 312.841589][ T8404] pci9118hr [ 312.850534][ T8404] comedi: valid board names for 8255_pci driver are: [ 312.889298][ T8418] tc_dump_action: action bad kind [ 312.900269][ T8373] syz.5.656 (8373): drop_caches: 2 [ 312.930044][ T8404] 8255_pci [ 313.070903][ T8404] comedi: valid board names for s526 driver are: [ 313.142878][ T8420] Bluetooth: MGMT ver 1.23 [ 313.154315][ T8404] s526 [ 313.182079][ T8404] comedi: valid board names for multiq3 driver are: [ 313.217465][ T8404] multiq3 [ 313.220591][ T8404] comedi: valid board names for pcmuio driver are: [ 313.263975][ T8404] pcmuio48 [ 313.279269][ T8404] pcmuio96 [ 313.288446][ T8404] comedi: valid board names for pcmmio driver are: [ 313.317493][ T8404] pcmmio [ 313.326253][ T8404] comedi: valid board names for pcmda12 driver are: [ 313.431580][ T8404] pcmda12 [ 313.435438][ T8404] comedi: valid board names for pcmad driver are: [ 313.441879][ T8404] pcmad12 [ 313.449338][ T8404] pcmad16 [ 313.452420][ T8404] comedi: valid board names for ni_labpc driver are: [ 313.477664][ T8404] lab-pc-1200 [ 313.489716][ T8404] lab-pc-1200ai [ 313.502819][ T8404] lab-pc+ [ 313.514080][ T8404] comedi: valid board names for atmio16 driver are: [ 313.520765][ T8404] atmio16 [ 313.525707][ T8404] atmio16d [ 313.529040][ T8404] comedi: valid board names for ni_at_ao driver are: [ 313.542715][ T8404] at-ao-6 [ 313.547308][ T8404] at-ao-10 [ 313.551649][ T8404] comedi: valid board names for ni_at_a2150 driver are: [ 313.558964][ T8404] ni_at_a2150 [ 313.563764][ T8404] comedi: valid board names for adq12b driver are: [ 313.570358][ T8404] adq12b [ 313.574223][ T8404] comedi: valid board names for mpc624 driver are: [ 313.581131][ T8404] mpc624 [ 313.584464][ T8404] comedi: valid board names for c6xdigio driver are: [ 313.591172][ T8404] c6xdigio [ 313.594539][ T8404] comedi: valid board names for aio_iiro_16 driver are: [ 313.602712][ T8404] aio_iiro_16 [ 313.606212][ T8404] comedi: valid board names for aio_aio12_8 driver are: [ 313.632995][ T8404] aio_aio12_8 [ 313.660262][ T8404] aio_ai12_8 [ 313.670370][ T8404] aio_ao12_4 [ 313.680409][ T8404] comedi: valid board names for fl512 driver are: [ 313.732292][ T8404] fl512 [ 313.747926][ T8404] comedi: valid board names for dmm32at driver are: [ 313.783885][ T8404] dmm32at [ 313.796384][ T8404] comedi: valid board names for dt282x driver are: [ 313.922121][ T8404] dt2821 [ 313.931809][ T8404] dt2821-f [ 313.968217][ T8404] dt2821-g [ 314.039492][ T8404] dt2823 [ 314.042525][ T8404] dt2824-pgh [ 314.288263][ T8404] dt2824-pgl [ 314.414882][ T8404] dt2825 [ 314.419511][ T8404] dt2827 [ 314.422689][ T8404] dt2828 [ 314.426040][ T8404] dt2829 [ 314.436030][ T8404] dt21-ez [ 314.443825][ T8404] dt23-ez [ 314.448514][ T8404] dt24-ez [ 314.480065][ T8404] dt24-ez-pgl [ 314.503152][ T8404] comedi: valid board names for dt2817 driver are: [ 314.552665][ T8404] dt2817 [ 314.555690][ T8404] comedi: valid board names for dt2815 driver are: [ 314.616576][ T8404] dt2815 [ 314.635702][ T8404] comedi: valid board names for dt2814 driver are: [ 314.662860][ T8404] dt2814 [ 314.682869][ T8404] comedi: valid board names for dt2811 driver are: [ 314.720192][ T8404] dt2811-pgh [ 314.740441][ T8404] dt2811-pgl [ 314.938549][ T8404] comedi: valid board names for dt2801 driver are: [ 315.716004][ T8404] dt2801 [ 315.735506][ T8404] comedi: valid board names for das6402 driver are: [ 315.763312][ T8404] das6402-12 [ 315.772788][ T8404] das6402-16 [ 315.810393][ T8404] comedi: valid board names for das1800 driver are: [ 315.853178][ T8404] das-1701st [ 315.864808][ T8404] das-1701st-da [ 315.892747][ T8404] das-1702st [ 315.896518][ T8404] das-1702st-da [ 315.922037][ T8404] das-1702hr [ 315.972339][ T8404] das-1702hr-da [ 316.028491][ T8404] das-1701ao [ 316.048320][ T8404] das-1702ao [ 316.070149][ T8404] das-1801st [ 316.085275][ T8404] das-1801st-da [ 316.092666][ T8404] das-1802st [ 316.109096][ T8404] das-1802st-da [ 316.182827][ T8404] das-1802hr [ 316.221139][ T8404] das-1802hr-da [ 316.242907][ T8404] das-1801hc [ 316.246271][ T8404] das-1802hc [ 316.249587][ T8404] das-1801ao [ 316.295548][ T8404] das-1802ao [ 316.327318][ T8404] comedi: valid board names for das800 driver are: [ 316.397983][ T8404] das-800 [ 316.404033][ T8404] cio-das800 [ 316.407403][ T8404] das-801 [ 316.410459][ T8404] cio-das801 [ 316.447763][ T8404] das-802 [ 316.451041][ T8404] cio-das802 [ 316.457865][ T8404] cio-das802/16 [ 316.467982][ T8404] comedi: valid board names for isa-das08 driver are: [ 316.522809][ T8404] isa-das08 [ 316.526138][ T8404] das08-pgm [ 316.529376][ T8404] das08-pgh [ 316.557879][ T8404] das08-pgl [ 316.561179][ T8404] das08-aoh [ 316.577118][ T8404] das08-aol [ 316.580483][ T8404] das08-aom [ 316.597884][ T8404] das08/jr-ao [ 316.601316][ T8404] das08jr-16-ao [ 316.633479][ T8404] pc104-das08 [ 316.636944][ T8404] das08jr/16 [ 316.657817][ T8404] comedi: valid board names for das16m1 driver are: [ 316.665198][ T8404] das16m1 [ 316.668355][ T8404] comedi: valid board names for dac02 driver are: [ 316.678164][ T8404] dac02 [ 316.681196][ T8404] comedi: valid board names for rti802 driver are: [ 316.688159][ T8404] rti802 [ 316.691344][ T8404] comedi: valid board names for rti800 driver are: [ 316.733506][ T8404] rti800 [ 316.814184][ T5965] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 316.823428][ T8404] rti815 [ 316.828248][ T8404] comedi: valid board names for pcm3724 driver are: [ 316.892969][ T8404] pcm3724 [ 316.957138][ T8404] comedi: valid board names for pcl818 driver are: [ 316.982207][ T8404] pcl818l [ 316.986467][ T8404] pcl818h [ 316.989905][ T8404] pcl818hd [ 316.996107][ T8404] pcl818hg [ 316.999335][ T8404] pcl818 [ 317.002408][ T8404] pcl718 [ 317.015667][ T5965] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 317.018523][ T8404] pcm3718 [ 317.025084][ T5965] usb 6-1: config 0 has no interface number 0 [ 317.042368][ T8404] comedi: valid board names for pcl816 driver are: [ 317.052393][ T8404] pcl816 [ 317.057242][ T8404] pcl814b [ 317.060327][ T8404] comedi: valid board names for pcl812 driver are: [ 317.101687][ T5965] usb 6-1: config 0 interface 110 has no altsetting 0 [ 317.107920][ T8404] pcl812 [ 317.111544][ T8404] pcl812pg [ 317.115666][ T8404] acl8112pg [ 317.118966][ T8404] acl8112dg [ 317.122198][ T8404] acl8112hg [ 317.126306][ T8404] a821pgl [ 317.130311][ T8404] a821pglnda [ 317.150553][ T8404] a821pgh [ 317.162800][ T5965] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 317.212158][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.220445][ T8404] a822pgl [ 317.256955][ T8404] a822pgh [ 317.337726][ T8404] a823pgl [ 317.340907][ T5965] usb 6-1: Product: syz [ 317.345353][ T8404] a823pgh [ 317.348430][ T8404] pcl813 [ 317.376343][ T5965] usb 6-1: Manufacturer: syz [ 317.411106][ T8404] pcl813b [ 317.414402][ T5965] usb 6-1: SerialNumber: syz [ 317.427114][ T8404] acl8113 [ 317.496687][ T8404] iso813 [ 317.499727][ T8404] acl8216 [ 317.506841][ T8404] a826pg [ 317.509856][ T8404] comedi: valid board names for pcl730 driver are: [ 317.522660][ T8404] pcl730 [ 317.525684][ T8404] iso730 [ 317.528699][ T8404] acl7130 [ 317.544153][ T5965] usb 6-1: config 0 descriptor?? [ 317.562625][ T8404] pcm3730 [ 317.571697][ T8404] pcl725 [ 317.619769][ T8404] p8r8dio [ 317.665255][ T8404] acl7225b [ 317.683139][ T8404] p16r16dio [ 317.686582][ T8404] pcl733 [ 317.699861][ T8404] pcl734 [ 317.707167][ T8404] opmm-1616-xt [ 317.721934][ T8404] pearl-mm-p [ 317.743838][ T8404] ir104-pbf [ 317.792756][ T8404] comedi: valid board names for pcl726 driver are: [ 317.817281][ T8404] pcl726 [ 317.820346][ T8404] pcl727 [ 317.850828][ T8404] pcl728 [ 317.901366][ T8404] acl6126 [ 317.934200][ T8404] acl6128 [ 317.952244][ T8404] comedi: valid board names for pcl724 driver are: [ 318.453555][ T8404] pcl724 [ 318.456648][ T8404] pcl722 [ 318.459613][ T8404] pcl731 [ 318.527339][ T8404] acl7122 [ 318.530464][ T8404] acl7124 [ 318.574381][ T8404] pet48dio [ 318.577603][ T8404] pcmio48 [ 318.580674][ T8404] onyx-mm-dio [ 318.685367][ T8404] comedi: valid board names for pcl711 driver are: [ 318.705582][ T8404] pcl711 [ 318.708599][ T8404] pcl711b [ 318.799743][ T8404] acl8112hg [ 318.916035][ T8404] acl8112dg [ 319.022678][ T8404] comedi: valid board names for amplc_pc263 driver are: [ 319.092938][ T8404] pc263 [ 319.138994][ T8404] comedi: valid board names for amplc_pc236 driver are: [ 319.276980][ T8404] pc36at [ 319.293718][ T8404] comedi: valid board names for amplc_dio200 driver are: [ 319.305160][ T5965] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -71 [ 319.330860][ T8404] pc212e [ 319.347981][ T8404] pc214e [ 319.360055][ T8404] pc215e [ 319.367475][ T5965] usb 6-1: USB disconnect, device number 3 [ 319.392896][ T8404] pc218e [ 319.454257][ T8404] pc272e [ 319.457295][ T8404] comedi: valid board names for comedi_parport driver are: [ 319.538451][ T8404] comedi_parport [ 319.542190][ T8404] comedi: valid board names for comedi_test driver are: [ 319.630355][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 319.639591][ T8404] comedi_test [ 319.639609][ T8404] comedi: valid board names for comedi_bond driver are: [ 319.639623][ T8404] comedi_bond [ 319.705511][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.797459][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.157842][ T8508] binder: BINDER_SET_CONTEXT_MGR already set [ 321.171113][ T8508] binder: 8506:8508 ioctl 4018620d 200000000040 returned -16 [ 321.194748][ T8508] binder: 8506:8508 ioctl c0306201 200000000240 returned -11 [ 321.937283][ T8540] fuse: Bad value for 'fd' [ 322.142828][ T5965] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 322.395548][ T5965] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.414624][ T5965] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 322.471961][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.481593][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.501765][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.524189][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 322.536062][ T5965] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 322.550399][ T5965] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.576523][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.612196][ T5965] usb 5-1: Product: syz [ 322.624533][ T5965] usb 5-1: Manufacturer: syz [ 322.664065][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 322.669354][ T5965] cdc_wdm 5-1:1.0: skipping garbage [ 322.691051][ T5965] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 322.789584][ T5965] cdc_wdm 5-1:1.0: Unknown control protocol [ 322.842711][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 322.870529][ T5918] usb 5-1: USB disconnect, device number 19 [ 323.005685][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 323.013010][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.023172][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 323.032284][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.068225][ T10] usb 6-1: config 0 descriptor?? [ 323.551189][ T10] kone 0003:1E7D:2CED.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 323.923092][ T10] usb 6-1: USB disconnect, device number 4 [ 324.128640][ T8571] fido_id[8571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 324.609821][ T8585] fuse: Bad value for 'fd' [ 326.579162][ T8620] fuse: Bad value for 'fd' [ 331.792719][ T5918] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 331.977496][ T5918] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 331.999375][ T5918] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 332.037434][ T5918] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 332.096391][ T5918] usb 5-1: config 0 has no interface number 0 [ 332.132675][ T5918] usb 5-1: config 0 has no interface number 1 [ 332.151645][ T5918] usb 5-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 332.209354][ T5918] usb 5-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 332.421198][ T5918] usb 5-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 332.776372][ T5918] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 332.831687][ T5918] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 332.924399][ T5918] usb 5-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 332.979233][ T5918] usb 5-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53 [ 333.027188][ T5918] usb 5-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 333.127963][ T5918] usb 5-1: config 0 interface 66 has no altsetting 0 [ 333.145419][ T5918] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 333.168946][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.229538][ T5918] usb 5-1: Product: syz [ 333.283368][ T5918] usb 5-1: Manufacturer: syz [ 333.308495][ T5918] usb 5-1: SerialNumber: syz [ 333.381925][ T5918] usb 5-1: config 0 descriptor?? [ 333.417392][ T5918] ljca 5-1:0.84: bulk endpoints not found [ 333.784363][ T5918] ljca 5-1:0.66: probe with driver ljca failed with error -71 [ 333.840474][ T5918] usb 5-1: USB disconnect, device number 20 [ 334.032838][ T5965] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 334.055311][ T8737] fuse: Bad value for 'fd' [ 334.989743][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 335.037607][ T5965] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.233800][ T5965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.314224][ T5965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.382742][ T5965] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.662716][ T5965] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.683151][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.578069][ T8761] netlink: 104 bytes leftover after parsing attributes in process `syz.5.764'. [ 336.762487][ T5965] usb 1-1: usb_control_msg returned -71 [ 336.784660][ T5965] usbtmc 1-1:16.0: can't read capabilities [ 336.799877][ T5965] usb 1-1: USB disconnect, device number 12 [ 336.892919][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 337.062720][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 337.080997][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 337.128884][ T10] usb 4-1: config 0 has no interface number 0 [ 337.164786][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 338.106511][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.123071][ T10] usb 4-1: Product: syz [ 338.128695][ T10] usb 4-1: Manufacturer: syz [ 338.144496][ T10] usb 4-1: SerialNumber: syz [ 338.414038][ T10] usb 4-1: config 0 descriptor?? [ 338.453021][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 338.683591][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 338.751169][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 339.746013][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 339.755082][ T10] usb 4-1: USB disconnect, device number 9 [ 339.814343][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 339.839532][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 340.006252][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.049657][ T10] quatech2 4-1:0.51: device disconnected [ 340.087143][ T8807] geneve2: entered promiscuous mode [ 343.205842][ T10] kernel read not supported for file /snd/controlC0 (pid: 10 comm: kworker/0:1) [ 344.992935][ T30] audit: type=1326 audit(1755884204.014:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8870 comm="syz.5.798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94ad8ebe9 code=0x0 [ 348.025618][ T8915] ubi7: attaching mtd0 [ 348.050438][ T8915] ubi7: scanning is finished [ 348.078127][ T8915] ubi7: empty MTD device detected [ 349.175901][ T30] audit: type=1326 audit(1755884208.194:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8923 comm="syz.5.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94ad8ebe9 code=0x0 [ 349.698159][ T8915] ubi7 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt7d", error -4 [ 352.747073][ T30] audit: type=1800 audit(1755884211.754:36): pid=8935 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.813" name="/" dev="9p" ino=2 res=0 errno=0 [ 353.126154][ T8971] nfs: Unknown parameter '' [ 357.192938][ T30] audit: type=1326 audit(1755884216.194:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9005 comm="syz.4.826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f786b18ebe9 code=0x0 [ 358.893050][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 359.054710][ T10] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 359.092286][ T10] usb 4-1: config 0 has no interface number 0 [ 359.118732][ T10] usb 4-1: config 0 interface 110 has no altsetting 0 [ 359.165674][ T10] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 359.201257][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.235858][ T10] usb 4-1: Product: syz [ 359.266014][ T10] usb 4-1: Manufacturer: syz [ 359.287687][ T10] usb 4-1: SerialNumber: syz [ 359.660524][ T10] usb 4-1: config 0 descriptor?? [ 359.888506][ T10] cdc_subset 4-1:0.110: probe with driver cdc_subset failed with error -22 [ 360.361664][ T5965] usb 4-1: USB disconnect, device number 10 [ 360.719606][ T9061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.663892][ T30] audit: type=1326 audit(1755884220.684:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9074 comm="syz.4.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f786b18ebe9 code=0x0 [ 361.753431][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 361.815677][ T9019] svc: failed to register nfsdv3 RPC service (errno 512). [ 362.144691][ T9079] siw: device registration error -23 [ 362.362876][ T9019] svc: failed to register nfsaclv3 RPC service (errno 512). [ 364.214138][ T9115] input: syz0 as /devices/virtual/input/input8 [ 364.567165][ T30] audit: type=1326 audit(1755884223.584:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9123 comm="syz.0.853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f2118ebe9 code=0x0 [ 365.799792][ T9141] 9pnet_fd: Insufficient options for proto=fd [ 367.864282][ T30] audit: type=1326 audit(1755884226.874:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9180 comm="syz.1.869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564fd8ebe9 code=0x0 [ 367.933413][ T9183] 9pnet_fd: Insufficient options for proto=fd [ 367.962951][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 368.138393][ T10] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 368.156331][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.181539][ T10] usb 4-1: Product: syz [ 368.187935][ T10] usb 4-1: Manufacturer: syz [ 368.193316][ T10] usb 4-1: SerialNumber: syz [ 368.216068][ T10] usb 4-1: config 0 descriptor?? [ 369.752754][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 369.803549][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 369.839491][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 369.856917][ T10] asix 4-1:0.0: probe with driver asix failed with error -71 [ 369.872789][ T10] usb 4-1: USB disconnect, device number 11 [ 369.956542][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 370.023573][ T43] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 370.031747][ T43] usb 5-1: config 0 has no interface number 0 [ 370.083049][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 370.092429][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.105584][ T43] usb 5-1: Product: syz [ 370.119395][ T43] usb 5-1: Manufacturer: syz [ 370.126407][ T43] usb 5-1: SerialNumber: syz [ 370.178951][ T43] usb 5-1: config 0 descriptor?? [ 370.249452][ T43] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 370.493446][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 370.597126][ T43] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 370.663189][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 370.730008][ T9213] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.869114][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 370.878859][ T43] usb 5-1: USB disconnect, device number 21 [ 370.973450][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 371.120279][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 371.205367][ T43] quatech2 5-1:0.51: device disconnected [ 371.286132][ T9213] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.491660][ T9213] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.548533][ T9213] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.339026][ T9213] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.505037][ T9213] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.627683][ T9213] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.731692][ T9213] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.873466][ T9261] futex_wake_op: syz.4.897 tries to shift op by 36; fix this program [ 375.083071][ T30] audit: type=1800 audit(1755884233.954:41): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.897" name="bus" dev="overlay" ino=1147 res=0 errno=0 [ 377.723225][ T30] audit: type=1800 audit(1755884236.624:42): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.910" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 378.248477][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.913'. [ 383.951993][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.964820][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.043573][ T9450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.889483][ T9488] netlink: 120 bytes leftover after parsing attributes in process `syz.0.971'. [ 389.952421][ T9488] netlink: 120 bytes leftover after parsing attributes in process `syz.0.971'. [ 393.197720][ T9541] netlink: 14 bytes leftover after parsing attributes in process `syz.4.987'. [ 393.348799][ T9544] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 393.385896][ T1139] Bluetooth: hci3: Frame reassembly failed (-84) [ 393.737990][ T9541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.948597][ T9541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.041647][ T9541] bond0 (unregistering): Released all slaves [ 395.412820][ T5843] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 397.873324][ T9587] svc: failed to register nfsdv3 RPC service (errno 111). [ 398.269320][ T9597] mkiss: ax0: crc mode is auto. [ 398.799490][ T9587] svc: failed to register nfsaclv3 RPC service (errno 111). [ 405.550051][ T9678] siw: device registration error -23 [ 406.164668][ T9682] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[9682] [ 406.676317][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1040'. [ 409.132696][ T5833] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 409.370189][ T5833] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 409.390040][ T5833] usb 2-1: config 0 has no interface number 0 [ 409.420649][ T5833] usb 2-1: config 0 interface 110 has no altsetting 0 [ 409.463977][ T5833] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 409.494402][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.530134][ T5833] usb 2-1: Product: syz [ 409.555110][ T5833] usb 2-1: Manufacturer: syz [ 409.575419][ T5833] usb 2-1: SerialNumber: syz [ 409.645075][ T5833] usb 2-1: config 0 descriptor?? [ 409.802934][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 412.260882][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1060'. [ 412.289910][ T5833] cdc_subset 2-1:0.110: probe with driver cdc_subset failed with error -71 [ 412.378423][ T5833] usb 2-1: USB disconnect, device number 14 [ 412.707391][ T9779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1066'. [ 412.757291][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 415.675049][ T9823] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1078'. [ 416.147258][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 416.157187][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'. [ 417.253593][ T5833] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 417.476110][ T5833] usb 1-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 417.528591][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.615165][ T5833] usb 1-1: config 0 descriptor?? [ 418.740461][ T5833] lenovo 0003:17EF:6049.0008: hidraw0: USB HID v1.01 Device [HID 17ef:6049] on usb-dummy_hcd.0-1/input0 [ 418.890200][ T5833] usb 1-1: USB disconnect, device number 13 [ 419.021637][ T9858] fido_id[9858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 419.896282][ T9868] siw: device registration error -23 [ 425.311954][ T9920] netlink: 'syz.5.1107': attribute type 10 has an invalid length. [ 425.465775][ T9920] team0: Port device netdevsim0 added [ 425.508063][ T6156] [ 425.510499][ T6156] ====================================================== [ 425.517578][ T6156] WARNING: possible circular locking dependency detected [ 425.524644][ T6156] 6.16.0-syzkaller #0 Not tainted [ 425.529709][ T6156] ------------------------------------------------------ [ 425.536762][ T6156] kworker/u8:10/6156 is trying to acquire lock: [ 425.543120][ T6156] ffff888027698e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_device_event+0x544/0xa20 [ 425.553131][ T6156] [ 425.553131][ T6156] but task is already holding lock: [ 425.560513][ T6156] ffff888056054d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0 [ 425.571170][ T6156] [ 425.571170][ T6156] which lock already depends on the new lock. [ 425.571170][ T6156] [ 425.581588][ T6156] [ 425.581588][ T6156] the existing dependency chain (in reverse order) is: [ 425.590704][ T6156] [ 425.590704][ T6156] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 425.599264][ T6156] lock_acquire+0x120/0x360 [ 425.604322][ T6156] __mutex_lock+0x182/0xe80 [ 425.609367][ T6156] dev_set_mtu+0x10e/0x260 [ 425.614324][ T6156] team_add_slave+0x8b8/0x2840 [ 425.619644][ T6156] do_set_master+0x530/0x6d0 [ 425.624783][ T6156] do_setlink+0xcf0/0x41c0 [ 425.629743][ T6156] rtnl_newlink+0x160b/0x1c70 [ 425.634981][ T6156] rtnetlink_rcv_msg+0x7cc/0xb70 [ 425.640459][ T6156] netlink_rcv_skb+0x205/0x470 [ 425.645938][ T6156] netlink_unicast+0x75c/0x8e0 [ 425.651254][ T6156] netlink_sendmsg+0x805/0xb30 [ 425.656568][ T6156] __sock_sendmsg+0x21c/0x270 [ 425.661781][ T6156] ____sys_sendmsg+0x505/0x830 [ 425.667095][ T6156] ___sys_sendmsg+0x21f/0x2a0 [ 425.672315][ T6156] __x64_sys_sendmsg+0x19b/0x260 [ 425.677810][ T6156] do_syscall_64+0xfa/0x3b0 [ 425.682853][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.689286][ T6156] [ 425.689286][ T6156] -> #0 (team->team_lock_key#6){+.+.}-{4:4}: [ 425.697488][ T6156] validate_chain+0xb9b/0x2140 [ 425.702798][ T6156] __lock_acquire+0xab9/0xd20 [ 425.708010][ T6156] lock_acquire+0x120/0x360 [ 425.713050][ T6156] __mutex_lock+0x182/0xe80 [ 425.718090][ T6156] team_device_event+0x544/0xa20 [ 425.723563][ T6156] notifier_call_chain+0x1b3/0x3e0 [ 425.729212][ T6156] netif_state_change+0x284/0x3a0 [ 425.734776][ T6156] linkwatch_do_dev+0x117/0x170 [ 425.740164][ T6156] __linkwatch_run_queue+0x56d/0x7e0 [ 425.745982][ T6156] linkwatch_event+0x4c/0x60 [ 425.751122][ T6156] process_scheduled_works+0xade/0x17b0 [ 425.757207][ T6156] worker_thread+0x8a0/0xda0 [ 425.762339][ T6156] kthread+0x70e/0x8a0 [ 425.766946][ T6156] ret_from_fork+0x3fc/0x770 [ 425.772070][ T6156] ret_from_fork_asm+0x1a/0x30 [ 425.777382][ T6156] [ 425.777382][ T6156] other info that might help us debug this: [ 425.777382][ T6156] [ 425.787627][ T6156] Possible unsafe locking scenario: [ 425.787627][ T6156] [ 425.795105][ T6156] CPU0 CPU1 [ 425.800479][ T6156] ---- ---- [ 425.805945][ T6156] lock(&dev_instance_lock_key#20); [ 425.811352][ T6156] lock(team->team_lock_key#6); [ 425.818937][ T6156] lock(&dev_instance_lock_key#20); [ 425.826768][ T6156] lock(team->team_lock_key#6); [ 425.831733][ T6156] [ 425.831733][ T6156] *** DEADLOCK *** [ 425.831733][ T6156] [ 425.839893][ T6156] 4 locks held by kworker/u8:10/6156: [ 425.845278][ T6156] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 425.856967][ T6156] #1: ffffc9000b4c7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 425.867955][ T6156] #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 425.876956][ T6156] #3: ffff888056054d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x4a0/0x7e0 [ 425.888043][ T6156] [ 425.888043][ T6156] stack backtrace: [ 425.893967][ T6156] CPU: 0 UID: 0 PID: 6156 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 425.893988][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.894000][ T6156] Workqueue: events_unbound linkwatch_event [ 425.894028][ T6156] Call Trace: [ 425.894038][ T6156] [ 425.894047][ T6156] dump_stack_lvl+0x189/0x250 [ 425.894070][ T6156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.894088][ T6156] ? __pfx__printk+0x10/0x10 [ 425.894110][ T6156] ? print_lock_name+0xde/0x100 [ 425.894132][ T6156] print_circular_bug+0x2ee/0x310 [ 425.894155][ T6156] check_noncircular+0x134/0x160 [ 425.894177][ T6156] validate_chain+0xb9b/0x2140 [ 425.894206][ T6156] __lock_acquire+0xab9/0xd20 [ 425.894224][ T6156] ? team_device_event+0x544/0xa20 [ 425.894245][ T6156] lock_acquire+0x120/0x360 [ 425.894260][ T6156] ? team_device_event+0x544/0xa20 [ 425.894282][ T6156] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 425.894313][ T6156] __mutex_lock+0x182/0xe80 [ 425.894331][ T6156] ? team_device_event+0x544/0xa20 [ 425.894350][ T6156] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 425.894374][ T6156] ? team_device_event+0x544/0xa20 [ 425.894390][ T6156] ? __pfx___mutex_lock+0x10/0x10 [ 425.894411][ T6156] ? fib_sync_down_dev+0x66/0x7b0 [ 425.894439][ T6156] team_device_event+0x544/0xa20 [ 425.894456][ T6156] notifier_call_chain+0x1b3/0x3e0 [ 425.894478][ T6156] netif_state_change+0x284/0x3a0 [ 425.894502][ T6156] ? __pfx_netif_state_change+0x10/0x10 [ 425.894522][ T6156] ? dev_deactivate+0x129/0x1b0 [ 425.894548][ T6156] ? nsim_get_iflink+0x20/0x280 [ 425.894573][ T6156] ? rfc2863_policy+0x1c6/0x3e0 [ 425.894589][ T6156] linkwatch_do_dev+0x117/0x170 [ 425.894605][ T6156] __linkwatch_run_queue+0x56d/0x7e0 [ 425.894624][ T6156] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 425.894642][ T6156] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.894656][ T6156] ? process_scheduled_works+0x9ef/0x17b0 [ 425.894674][ T6156] ? process_scheduled_works+0x9ef/0x17b0 [ 425.894692][ T6156] linkwatch_event+0x4c/0x60 [ 425.894707][ T6156] process_scheduled_works+0xade/0x17b0 [ 425.894736][ T6156] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.894760][ T6156] worker_thread+0x8a0/0xda0 [ 425.894779][ T6156] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.894810][ T6156] ? __kthread_parkme+0x7b/0x200 [ 425.894832][ T6156] kthread+0x70e/0x8a0 [ 425.894854][ T6156] ? __pfx_worker_thread+0x10/0x10 [ 425.894872][ T6156] ? __pfx_kthread+0x10/0x10 [ 425.894894][ T6156] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.894909][ T6156] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.894925][ T6156] ? __pfx_kthread+0x10/0x10 [ 425.894946][ T6156] ret_from_fork+0x3fc/0x770 [ 425.894964][ T6156] ? __pfx_ret_from_fork+0x10/0x10 [ 425.894981][ T6156] ? __switch_to_asm+0x39/0x70 [ 425.895002][ T6156] ? __switch_to_asm+0x33/0x70 [ 425.895021][ T6156] ? __pfx_kthread+0x10/0x10 [ 425.895043][ T6156] ret_from_fork_asm+0x1a/0x30 [ 425.895083][ T6156]