last executing test programs: 4m13.198004881s ago: executing program 1 (id=414): unshare(0x22020400) mknod(&(0x7f0000000080)='./file0\x00', 0x284, 0xfffff801) syz_open_dev$admmidi(&(0x7f0000000000), 0xac, 0x210100) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) read$msr(0xffffffffffffffff, &(0x7f00000000c0)=""/91, 0x5b) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r1, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000400)=""/232, 0xe8}], 0x2, &(0x7f0000000280)=""/31, 0x1f}, 0x40000042) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x10200, 0x2) getdents64(r2, &(0x7f0000001540)=""/4096, 0x1000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x26, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/4083, 0x1000}}, 0xffffff8b) 4m12.052466824s ago: executing program 1 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x40050) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r3, 0x0, 0x0, 0x10162, 0x0) 4m10.556385816s ago: executing program 1 (id=421): r0 = syz_open_dev$rtc(&(0x7f00000003c0), 0x0, 0x101000) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=@target={'target ', {'PCI:', 'd', ':', '17', ':', '7', '.', '1b'}}, 0x15) ioctl$EVIOCGREP(r1, 0x80084522, &(0x7f0000001f40)=""/231) 4m9.998149097s ago: executing program 1 (id=427): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000010c0)=ANY=[@ANYRES32=r0], 0x20) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000012c0)={&(0x7f00000002c0), 0x10, &(0x7f0000000300)=[{&(0x7f0000001080)="11", 0x1}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x5000}) r4 = dup3(r1, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x12) recvmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1, &(0x7f0000000680)=""/237, 0xed}, 0x8}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000780)=""/207, 0xcf}], 0x2}}, {{&(0x7f00000005c0)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/104, 0x68}, {&(0x7f0000000980)=""/140, 0x8c}], 0x2, &(0x7f0000000880)=""/2, 0x2}, 0x9}, {{&(0x7f0000000a40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000ac0)=""/215, 0xd7}, {&(0x7f0000000bc0)=""/95, 0x5f}, {&(0x7f0000000c40)=""/149, 0x95}, {&(0x7f0000000d00)=""/68, 0x44}, {&(0x7f0000000d80)=""/108, 0x6c}], 0x5, &(0x7f0000000e80)=""/167, 0xa7}, 0x10001}], 0x4, 0x0, &(0x7f0000001040)) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') r7 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) io_setup(0x2, &(0x7f0000000180)=0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r11, 0x0}]) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) 4m8.614441447s ago: executing program 1 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r0, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) mount$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0xb14ae6196528dc6d, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES64=r0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x4000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x4eb7, 0x3caa, 0xf, &(0x7f00000000c0)={[0x6]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 4m6.874293365s ago: executing program 1 (id=437): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000060d001000000000000000000af9bd68a734b93cd2d02ebffc65e5f2dfeca1ab9115aa318900d2abf3c99a78b2a779833a1dea7bf9c7f93b20be1cc07e378a40ab4f50a0cbf18f1c17e8195c1d68896e9a2cd367f0be3a394326b9c926c924f662193d49c5b7f15995f8198f5445da47cf5aa52b16d934b1f2c89a30abad99d5a90c59683bbf97f2b2b45de72a8816161b82e"], 0x50) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0xf, 0x0, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x64, 0x0, 0x2, 0x0, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x2, 0x5, "1c1f8b"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x0, [0x7, 0x0, 0x8, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x15, 0x3, 0x1, [{@private=0xa010100, 0x8d}, {@private=0xa010100}]}, @ssrr={0x89, 0x1b, 0x6d, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @loopback, @loopback]}, @rr={0x7, 0xb, 0xf0, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1]}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x2, [0x4, 0x0, 0x6, 0x80000001, 0x8, 0x6fc7, 0x4]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x31, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r6, 0x0, 0x200000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000022000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x51}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4m5.818654084s ago: executing program 32 (id=437): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000060d001000000000000000000af9bd68a734b93cd2d02ebffc65e5f2dfeca1ab9115aa318900d2abf3c99a78b2a779833a1dea7bf9c7f93b20be1cc07e378a40ab4f50a0cbf18f1c17e8195c1d68896e9a2cd367f0be3a394326b9c926c924f662193d49c5b7f15995f8198f5445da47cf5aa52b16d934b1f2c89a30abad99d5a90c59683bbf97f2b2b45de72a8816161b82e"], 0x50) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0xf, 0x0, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x64, 0x0, 0x2, 0x0, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x2, 0x5, "1c1f8b"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x0, [0x7, 0x0, 0x8, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x15, 0x3, 0x1, [{@private=0xa010100, 0x8d}, {@private=0xa010100}]}, @ssrr={0x89, 0x1b, 0x6d, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @loopback, @loopback]}, @rr={0x7, 0xb, 0xf0, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1]}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x2, [0x4, 0x0, 0x6, 0x80000001, 0x8, 0x6fc7, 0x4]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x31, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r6, 0x0, 0x200000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000022000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x51}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 13.931280011s ago: executing program 0 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x2040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x1d0, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000021c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000004200000008004500001c00000000226111907810000000ffffffff00004e2000089078dccefdc61fef6596ccc82a2705eb0da3cdd3e36a25d9054eba140362a71f83897736bec44232df9453f499cfbf074f1dacb53f2d6d141498ecb517458b1a541d4c1bd9e90b697e3c6de7666d8281a71e1ca4f892946dafb5a8817a5397cb2341e00b82819a8a0fe4ff645ac3e768c4cdf72b2c0a3ab52254414f81ebb65eecf13b", @ANYRES64, @ANYBLOB="86a2ecb473bcf23cbb037e92b9a78f44a5b57880f579fdca898d003065f27989a538ea4d786ff516d8a91b8083fc327e12493b623a0c8c7a65a7a46dc40776dcb33ab27e5beee3ac077067b06a1379cd79bd30e2fb731f7693e1764fb8a04401d3ba28a3453308a7d5905cae9d11a5a1ef579f6606fc4f1ee0279c3912a96fefd22985dbf15da4124583f3733ee7e3283efd3745161129cef1e202cc94c169b4c435c772c49e15c14f1f", @ANYRES16=r0, @ANYBLOB="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"], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000440)=""/185, 0x94}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f6ff00"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x40) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) read(r4, &(0x7f00000001c0)=""/93, 0x5d) 11.831585505s ago: executing program 4 (id=1152): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000b80)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0x4}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000640)="9323be46aaf0135109c99e07a4f93ac93a2bf9f4f87241f44fa10d4dcdd5de824e4e52bd94fdc1d780cadb95638b6b", 0x2f}, {&(0x7f0000000680)="be67ec11d1b8009c9ecf1b54e480d81b68ed8df6f4c37098d02e0f0fa17d71800e439ccb472783d80f58c953050b713b79006c38edad32a62aa5e3e914f6f3995e8b72b14d6ba4b69dce27440eaccd2b5a8e80999868c7c5416a258d9cb895b0010720ce2e764ca73c19f4f4d74918fd96579072730b8576cfdab3b8c6ed76ada7835b4bccdc8cd3b54491a95c76", 0x8e}, {&(0x7f0000000740)="a63cd1a91fc5c334fe031832414e1cc053999e071a6bcded676dcd042aebd50d629d5eead6517d6e53a4f398bb267f374281bcca811df25a96b416e7d6da5ddd6ff8f419688115daad670c60a4d2bdbf7494ee006b6c23250627abaa0cd4ecbefb5d4764e1434dcd037095c25d810b2166f3db6d98b924fac318468ec886dbde240044b35a5b60e49c10b537fb650121d245d8a33b6f820498fd3e0766d8142c71e8664720b8d885b13dc7e38c5d89cf4ccb6518924dd4d759422a2e5432aa25ff2fba65e0bd6bef0b44217398b2540883d258a034450e06aff6335dfbe463bf96f4556d77958bcdf18d9e", 0xeb}, {&(0x7f0000000840)="0e58e69f024516d54b13a5a39e199f8fca5fec3b42140d6e65", 0x19}, {&(0x7f0000000880)="03f694df4248ad54eebae745c9d0cb48815b086de18272a483a04445701c7e8bd4cb202e422aca2710e4266ceefb8eca38127f9f1f8ba603c7c0a7960d7d5b9db15f337d9fedb00eaa341aec22fb0cd81cd5b3219fe4be342769288f3eadd72274f928f093e64bb64cbcbcb8b410a36bf8e8e88186f9a5f8912c0815cf02f6665edb787eab1a0c43b1cae7532ac8014381e5cb1e2448cbc35929ad050d8aa99137074291d10824e3295b96c1c62652861c4931daaf4664498d3c985c296a3be5ad47d5e3f01211110073657d5b3a0a6029a14cb41a42967ac61c10cc163d16be97b1cf7bf2a65c613b7df04fa4e3974492aa", 0xf2}, {&(0x7f0000000980)="0fc51e8db078bc00f0f78eb7940d38ee55d29e88adb8c30c34b0fe00afc4c03ad0c847ed5682ad8633f558e43af0b86ee9a241d2faeceb81891173621de41dc599ba3c9b1c699d3cc9af469126882c46a2e6f1d0a44c7b4b510f05f927691868452981b8c9fade2120fe250a5d23d0e2f37d5c3b41d5f57ca61ba4269fe4fdfef683a9a0220e392608b59603b40e67b8c87b", 0x92}, {&(0x7f0000000a40)="49fa7066b60d4e35b6d65b1b12015c1a4bfd2d", 0x13}, {&(0x7f0000000a80)="a425b788de98dcbac4c495d02b", 0xd}], 0x8, &(0x7f0000000b40)="43db2e4fcd656c480a9fe48fca96e8497aca3cfc163a3fb625f5bc56ec82817376ceb0c1151256c55bcec662f84bc09824064dd5ec886e1d028c93d1", 0x3c, 0x44046}, 0x24000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000050016000000000008001700", @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.07882199s ago: executing program 3 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f000049a000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x400, &(0x7f0000001400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=0x0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@host}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="75737271756f74615f696e6f64655f686172646c696d69743d656b363765372c73697a653d670c34316535677025002c687567653d6e657665722c6e6f737761702c6f626a5f757365723d2c3d007072616973652c646f6e745f6d6561737572652c00e91d12a04926cbcdbfcb40a642b57674e6f3fc38b607cb49e6cfa90fe3dd9348dc57837be220"]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8000, 0x184, 0x9}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r8, 0x101, 0x0) getdents64(r8, &(0x7f00000000c0)=""/32, 0x20) getdents64(r8, 0xfffffffffffffffe, 0x29) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, r6, &(0x7f00000000c0)={0x284801, 0x133, 0x23}, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x23456, {0x0, r7}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.364696883s ago: executing program 4 (id=1154): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.682825362s ago: executing program 0 (id=1158): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x29ec, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x3, 0x1dc}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x39, 0x0, 0x20000000) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2000, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r4) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x11, 0x1, 0x0, 0xfffffffc, 0x0}) 8.636435006s ago: executing program 2 (id=1159): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 8.447129156s ago: executing program 3 (id=1160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000040)="925a95e24550e0758674a95586dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x38}}, 0x4) 8.362034599s ago: executing program 2 (id=1161): getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x20000000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3e, 0x0, 0x3, 0x40, 0x198, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x0, 0x7fffffffffffffff, 0x20000, 0x4000000007, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="7bf0ae37", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001c00)="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", 0x401}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="af4aa80b5572324a8e65cb772c3b38fbd748752fda047de79de7f2f94ca03abb7b82d193dea34b951c21838a10d1411054b87e1e0d852bd3439ed29142", 0x3d}, {&(0x7f00000000c0)="53b8f3988d1b05aae2e5211750d921daef4bf30a392b9362d78e24c2c02fc69b99c0deefd1c42006ad0d96bde1db4b75db8c2246bbe32cbc14c915c12b1faf5ce886f1c62f4ea61ffb44746d8396e27bd822072e59c67fd96f98585753f2fbeac1f6e0449dac77f7b76c67dce19c6aa06d6b31adaf0dcad134a583281f55eac0bb32737d0040d7fcbf8734b1555d2cb4787e493b4d9dfed7fd8b18412ba5ed", 0x9f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="cd8e30d42616ffd8bf4497d0fe9697698634caede88aa0a0b188df76339b6ad8642fba74fab759ca0b4a6439b174a1cec08e7bf0a1e5508e39a107ee2390c0343db370c2b98b54457f57159b5773e4df0171eeea9633775b67ef5e85b2a87c495f738e51b8450974dd0fcad992151927bb6c2f0165e259c877c53b7e73afbefa049dfdea9af1929849b9435ce4051efdb64c909fd3f67745e898edc42a0f08fadd4627edfabfb05519e125db3826ae8c5093f612a8232b7b1c66ffe524c5894f0852402e11a193085c2785d4e2b1c420ba97d0697eee5d1b4a5ed8c56aa86aa1ee8b6060b6b65546e5d285442894649613b9ab34f51f", 0xf6}, {&(0x7f0000000600)="49844654ed9d66c410d1333b11c62bb29cea528a69cf20d3d4244368b1150d774899b78c84c46cf1ee5b2a1a8af2c26a4dd6e5e668f49988cd49c17338003ccddba7b57cef7d4cb5b2616de830a1e4c09139ee945844f72df59ae271f2783ee45f489a88543d604191b69b50686cf8af192d1098cd6fe8a490000111d29cc8d26c080379f222864d9604e521817c12788707516d86a97c9590675af5bfa3eed7d38fd117d94dbf568b647fd7ae733be3bb6cfff0e4d784c049565641e842675925e960705aefa61161c739638d9b4aad4f4dba0127554424f0d6396be2a5f71ed0ea45442c28eae6eabfd3c6a5", 0xed}, {&(0x7f0000000a80)="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", 0x93d}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @loopback}}}], 0x38}}], 0x4, 0x8004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 8.306399007s ago: executing program 0 (id=1162): socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000002f00)={0x2020}, 0x2020) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x204800, 0x40, 0x21}, 0x18) openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x8800, 0x1c2, 0x28}, 0x18) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.147689778s ago: executing program 3 (id=1163): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000060d001000000000000000000af9bd68a734b93cd2d02ebffc65e5f2dfeca1ab9115aa318900d2abf3c99a78b2a779833a1dea7bf9c7f93b20be1cc07e378a40ab4f50a0cbf18f1c17e8195c1d68896e9a2cd367f0be3a394326b9c926c924f662193d49c5b7f15995f8198f5445da47cf5aa52b16d934b1f2c89a30abad99d5a90c59683bbf97f2b2b45de72a8816161b82e"], 0x50) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0xf, 0x0, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x64, 0x0, 0x2, 0x0, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x2, 0x5, "1c1f8b"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x0, [0x7, 0x0, 0x8, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x15, 0x3, 0x1, [{@private=0xa010100, 0x8d}, {@private=0xa010100}]}, @ssrr={0x89, 0x1b, 0x6d, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @loopback, @loopback]}, @rr={0x7, 0xb, 0xf0, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1]}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x2, [0x4, 0x0, 0x6, 0x80000001, 0x8, 0x6fc7, 0x4]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x31, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r7, 0x0, 0x200000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000022000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x51}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.459567831s ago: executing program 2 (id=1164): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40010, r0, 0x834d9000) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x50}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'macvlan0\x00', {'veth0_to_batadv\x00'}, 0x8}) 6.220449914s ago: executing program 3 (id=1165): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x1) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000002600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000200)) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40a1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x48, r8, 0x1, 0x8, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x33}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x48}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8c, 0x7b}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x4000811) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000600)={0x0, 0xfffffffffffffe57, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)) 5.382498748s ago: executing program 4 (id=1166): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/102, 0x66}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000030803000000000000000000000000002c000480080004400000ebff080006400000000008000740000000000800054000000000080002400000000005000300210000000600024000000000"], 0x50}}, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000040), 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x27) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x49, &(0x7f00000007c0)=ANY=[]) 4.94728153s ago: executing program 3 (id=1168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x2040}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x1d0, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000021c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000004200000008004500001c00000000226111907810000000ffffffff00004e2000089078dccefdc61fef6596ccc82a2705eb0da3cdd3e36a25d9054eba140362a71f83897736bec44232df9453f499cfbf074f1dacb53f2d6d141498ecb517458b1a541d4c1bd9e90b697e3c6de7666d8281a71e1ca4f892946dafb5a8817a5397cb2341e00b82819a8a0fe4ff645ac3e768c4cdf72b2c0a3ab52254414f81ebb65eecf13b", @ANYRES64, @ANYBLOB="86a2ecb473bcf23cbb037e92b9a78f44a5b57880f579fdca898d003065f27989a538ea4d786ff516d8a91b8083fc327e12493b623a0c8c7a65a7a46dc40776dcb33ab27e5beee3ac077067b06a1379cd79bd30e2fb731f7693e1764fb8a04401d3ba28a3453308a7d5905cae9d11a5a1ef579f6606fc4f1ee0279c3912a96fefd22985dbf15da4124583f3733ee7e3283efd3745161129cef1e202cc94c169b4c435c772c49e15c14f1f", @ANYRES16=r0, @ANYBLOB="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"], 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000440)=""/185, 0x94}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f6ff00"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x40) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) read(r4, &(0x7f00000001c0)=""/93, 0x5d) 4.742456418s ago: executing program 2 (id=1169): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54204000880140002"], 0x50}, 0x1, 0x600}, 0x20000000) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x0, 0x50047) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='btrfs_set_extent_bit\x00', r5}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x60) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$kcm(0x29, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) chdir(&(0x7f0000000000)='./file0\x00') link(&(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='./bus\x00') 4.693046687s ago: executing program 4 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x71}, [@ldst={0x5, 0x3, 0x2, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00ffff000003040000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e20, 0x2, @private1, 0x1}, 0x1c) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendfile(r8, r8, 0x0, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd, 0x4, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r4, 0x50ed, 0x4, 0x0, 0x0, 0x51) timer_create(0x5, &(0x7f0000000080)={0x0, 0x27, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r10, 0x0, &(0x7f0000000240)={{r11, r12+10000000}, {r13, r14+60000000}}, 0x0) accept(r1, &(0x7f0000000340)=@vsock, &(0x7f0000000280)=0x80) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000000000058c5000000000000"], 0x14}, 0x1, 0xffffa888, 0x0, 0x4000000}, 0x40000) 4.381568108s ago: executing program 5 (id=1171): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 4.114535841s ago: executing program 5 (id=1172): r0 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x230) 4.064088195s ago: executing program 0 (id=1173): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) dup(r0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x0, 0x1, 0x11, 0x1, 0x0, 0xfffffffc, 0x0}) 3.984031096s ago: executing program 5 (id=1174): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c9c3f29, 0x0) r0 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x200003b9aca02}]}}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000200)="2227a019d5e7f8e7f37b8483f12eb9716ddff30653c2fcc91a7b93d9032615e616b9cce3b11b24eaacf7cd5730342f767c2264cea4847dd424cf02e86f062c640259dca922a664d47b586c99e65c4f1ef29c5911746568639e844f7ab079f91b7e24d3cf0f21", 0x66}], 0x1}}], 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) r11 = dup(r9) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_RUN(r12, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) close(r2) 3.71842868s ago: executing program 0 (id=1175): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000060d001000000000000000000af9bd68a734b93cd2d02ebffc65e5f2dfeca1ab9115aa318900d2abf3c99a78b2a779833a1dea7bf9c7f93b20be1cc07e378a40ab4f50a0cbf18f1c17e8195c1d68896e9a2cd367f0be3a394326b9c926c924f662193d49c5b7f15995f8198f5445da47cf5aa52b16d934b1f2c89a30abad99d5a90c59683bbf97f2b2b45de72a8816161b82e"], 0x50) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0xf, 0x0, {{0x24, 0x4, 0x3, 0x32, 0x90, 0x64, 0x0, 0x2, 0x0, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x2, 0x5, "1c1f8b"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0x0, [0x7, 0x0, 0x8, 0x8]}, @timestamp_prespec={0x44, 0x14, 0x15, 0x3, 0x1, [{@private=0xa010100, 0x8d}, {@private=0xa010100}]}, @ssrr={0x89, 0x1b, 0x6d, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0xc}, @remote, @loopback, @loopback]}, @rr={0x7, 0xb, 0xf0, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1]}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x2, [0x4, 0x0, 0x6, 0x80000001, 0x8, 0x6fc7, 0x4]}]}}}}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x31, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r7, 0x0, 0x200000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000022000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x51}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.717954643s ago: executing program 2 (id=1176): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.996224417s ago: executing program 3 (id=1177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40050) getpid() fchmod(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x3, 0x10162, 0x0) 2.231832411s ago: executing program 0 (id=1178): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) unshare(0x22020600) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x6, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth1_macvtap\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(0x3) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0xfffffffe, 0x3) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.086430637s ago: executing program 5 (id=1179): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40010, r0, 0x834d9000) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x50}}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'macvlan0\x00', {'veth0_to_batadv\x00'}, 0x8}) 1.700187267s ago: executing program 4 (id=1180): getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x20000000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3e, 0x0, 0x3, 0x40, 0x198, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x0, 0x7fffffffffffffff, 0x20000, 0x4000000007, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="7bf0ae37", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001c00)="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", 0x401}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="af4aa80b5572324a8e65cb772c3b38fbd748752fda047de79de7f2f94ca03abb7b82d193dea34b951c21838a10d1411054b87e1e0d852bd3439ed29142", 0x3d}, {&(0x7f00000000c0)="53b8f3988d1b05aae2e5211750d921daef4bf30a392b9362d78e24c2c02fc69b99c0deefd1c42006ad0d96bde1db4b75db8c2246bbe32cbc14c915c12b1faf5ce886f1c62f4ea61ffb44746d8396e27bd822072e59c67fd96f98585753f2fbeac1f6e0449dac77f7b76c67dce19c6aa06d6b31adaf0dcad134a583281f55eac0bb32737d0040d7fcbf8734b1555d2cb4787e493b4d9dfed7fd8b18412ba5ed", 0x9f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="cd8e30d42616ffd8bf4497d0fe9697698634caede88aa0a0b188df76339b6ad8642fba74fab759ca0b4a6439b174a1cec08e7bf0a1e5508e39a107ee2390c0343db370c2b98b54457f57159b5773e4df0171eeea9633775b67ef5e85b2a87c495f738e51b8450974dd0fcad992151927bb6c2f0165e259c877c53b7e73afbefa049dfdea9af1929849b9435ce4051efdb64c909fd3f67745e898edc42a0f08fadd4627edfabfb05519e125db3826ae8c5093f612a8232b7b1c66ffe524c5894f0852402e11a193085c2785d4e2b1c420ba97d0697eee5d1b4a5ed8c56aa86aa1ee8b6060b6b65546e5d285442894649613b9ab34f51f", 0xf6}, {&(0x7f0000000600)="49844654ed9d66c410d1333b11c62bb29cea528a69cf20d3d4244368b1150d774899b78c84c46cf1ee5b2a1a8af2c26a4dd6e5e668f49988cd49c17338003ccddba7b57cef7d4cb5b2616de830a1e4c09139ee945844f72df59ae271f2783ee45f489a88543d604191b69b50686cf8af192d1098cd6fe8a490000111d29cc8d26c080379f222864d9604e521817c12788707516d86a97c9590675af5bfa3eed7d38fd117d94dbf568b647fd7ae733be3bb6cfff0e4d784c049565641e842675925e960705aefa61161c739638d9b4aad4f4dba0127554424f0d6396be2a5f71ed0ea45442c28eae6eabfd3c6a5", 0xed}, {&(0x7f0000000a80)="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", 0x93d}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @loopback}}}], 0x38}}], 0x4, 0x8004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 399.941717ms ago: executing program 2 (id=1181): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0xa, 0x5, {0x5, 0xf, '\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 156.88469ms ago: executing program 5 (id=1182): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 17.841096ms ago: executing program 5 (id=1183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001340)={'filter\x00', 0x1002, 0x4, 0x3c8, 0xe8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2eb}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x1023, 0x100) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0xf9, 0xcd, 0x5a, 0x20, 0x7c0, 0x1503, 0xb8b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x7, 0x10, 0x40, 0x5, [{{0x9, 0x4, 0xb4, 0x9, 0x1, 0x5c, 0x31, 0xae, 0x8, [], [{{0x9, 0x5, 0x6, 0x1, 0x10, 0x1, 0x63, 0x3}}]}}, {{0x9, 0x4, 0x39, 0x8, 0x2, 0x65, 0xb0, 0xb4, 0xe, [], [{{0x9, 0x5, 0x6, 0x2, 0x8, 0x8, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x3, 0x6, 0x0, [@generic={0x7, 0x5, "a9dfba6edc"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) r6 = gettid() ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x64000844) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = eventfd2(0x0, 0x0) readv(r8, &(0x7f0000001700)=[{&(0x7f0000000200)=""/13, 0xd}], 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, 0x200, {0x2, 0x7f, 0x180, 0x10, 0x14b8, 0x2025, 0xfffc, 0xffff, 0x3, 0x3, 0xfffd, 0x9, 0x200008, 0x1, "12d56163d7287bd287881d942450c7153243937ca9a58f1c02000000476b1500"}}) 0s ago: executing program 4 (id=1184): syz_open_procfs$namespace(0x0, &(0x7f0000000940)='ns/uts\x00') r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/25, 0x19}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000004a00ff0000000000200000000a"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000a900"/20, @ANYRES32=r4, @ANYBLOB="000000000000000034002b8008000800", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000c"], 0x5c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @bcast, @default, @bcast, @default, @remote, @netrom, @default]}, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/uts\x00') kernel console output (not intermixed with test programs): =0 ip=0x7f370b385d29 code=0x7ffc0000 [ 229.489666][ T29] audit: type=1326 audit(1736118859.897:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7992 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f370b385d29 code=0x7ffc0000 [ 229.569670][ T29] audit: type=1326 audit(1736118859.897:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7992 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370b385d29 code=0x7ffc0000 [ 229.639653][ T29] audit: type=1326 audit(1736118859.897:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7992 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370b385d29 code=0x7ffc0000 [ 229.699712][ T29] audit: type=1326 audit(1736118860.007:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7992 comm="syz.0.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f370b385d29 code=0x7ffc0000 [ 229.902868][ T8038] ax25_connect(): syz.4.537 uses autobind, please contact jreuter@yaina.de [ 230.181838][ T5899] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 230.420763][ T5899] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.499111][ T5899] usb 6-1: config 0 has no interface number 0 [ 230.537323][ T5899] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.633498][ T5899] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.741054][ T46] usb 1-1: USB disconnect, device number 19 [ 230.760017][ T5899] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 230.810090][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.863649][ T5899] usb 6-1: config 0 descriptor?? [ 231.605726][ T5899] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 231.668207][ T5899] hid_prodikeys: hid-prodikeys: failed to find output report [ 231.668207][ T5899] [ 231.679913][ T5919] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.837939][ T5899] usb 6-1: USB disconnect, device number 5 [ 231.849777][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 231.857071][ T5919] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.941623][ T8066] gfs2: not a GFS2 filesystem [ 231.955887][ T8066] No such timeout policy "syz0" [ 231.975324][ T8066] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 232.543245][ T5919] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 232.646782][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.646815][ T5919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 232.646854][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.646878][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 232.646914][ T5919] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.667881][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.700251][ T5919] usb 5-1: config 0 descriptor?? [ 233.791160][ T5919] usb 5-1: USB disconnect, device number 18 [ 234.272145][ T8098] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 234.318403][ T8098] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 234.369411][ T8103] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 234.390192][ T8104] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 234.586918][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 235.902998][ T8120] loop9: detected capacity change from 0 to 7 [ 235.977892][ T8120] Dev loop9: unable to read RDB block 7 [ 236.080075][ T8120] loop9: unable to read partition table [ 236.085853][ T8120] loop9: partition table beyond EOD, truncated [ 236.096904][ T8120] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 237.870084][ T5817] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 238.043741][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.073978][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.084248][ T5919] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 238.109010][ T5817] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 238.124156][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.151923][ T5817] usb 1-1: config 0 descriptor?? [ 238.251179][ T5919] usb 6-1: Invalid ep0 maxpacket: 64 [ 238.406048][ T8215] trusted_key: encrypted_key: insufficient parameters specified [ 238.539897][ T5899] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.596577][ T5919] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 238.740104][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.741991][ T5817] uclogic 0003:5543:0522.0007: item fetching failed at offset 2/5 [ 238.783820][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.784694][ T5817] uclogic 0003:5543:0522.0007: parse failed [ 238.829635][ T5817] uclogic 0003:5543:0522.0007: probe with driver uclogic failed with error -22 [ 238.868641][ T5899] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 238.900857][ T46] usb 1-1: USB disconnect, device number 20 [ 238.919759][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.940562][ T5919] usb 6-1: Invalid ep0 maxpacket: 64 [ 238.953739][ T5899] usb 5-1: config 0 descriptor?? [ 238.957518][ T5919] usb usb6-port1: attempt power cycle [ 239.320420][ T5919] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 239.361551][ T5919] usb 6-1: Invalid ep0 maxpacket: 64 [ 239.387019][ T5899] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 239.499752][ T5899] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 239.499781][ T5919] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 239.564076][ T5919] usb 6-1: Invalid ep0 maxpacket: 64 [ 239.570436][ T5919] usb usb6-port1: unable to enumerate USB device [ 239.573008][ T5899] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 239.711121][ T5899] usb 5-1: USB disconnect, device number 19 [ 239.894424][ T5899] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 240.017109][ T8262] CUSE: unknown device info "" [ 240.022445][ T8262] CUSE: zero length info key specified [ 240.124548][ T5817] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 240.364631][ T5817] usb 1-1: device descriptor read/64, error -71 [ 240.380139][ T8269] syz.2.579 (8269): drop_caches: 0 [ 240.815823][ T8277] binder: 8276:8277 ioctl c00c6211 0 returned -14 [ 240.847181][ T5817] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 240.962473][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.581'. [ 240.979958][ T5817] usb 1-1: device descriptor read/64, error -71 [ 241.091170][ T5817] usb usb1-port1: attempt power cycle [ 241.439965][ T5817] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 241.448524][ T8294] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 241.492078][ T5817] usb 1-1: device descriptor read/8, error -71 [ 241.545532][ T8292] kvm: emulating exchange as write [ 241.730028][ T5817] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.773800][ T5817] usb 1-1: device descriptor read/8, error -71 [ 241.920589][ T5817] usb usb1-port1: unable to enumerate USB device [ 242.980631][ T5817] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 243.084719][ T8328] pim6reg: entered allmulticast mode [ 243.149780][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 243.162160][ T5817] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.172178][ T5817] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.184584][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.229842][ T5817] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.239062][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.279687][ T5817] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.289605][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 243.322342][ T5817] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.341283][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.344641][ T8340] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 243.372692][ T5817] usb 6-1: config 0 descriptor?? [ 243.905798][ T5899] usb 6-1: USB disconnect, device number 10 [ 244.634011][ T8369] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 244.655395][ T8369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.604'. [ 245.506185][ T8386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.610'. [ 245.881468][ T8394] IPVS: length: 60 != 8 [ 247.110253][ T5919] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 247.299793][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 247.316460][ T5919] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.332325][ T5919] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.361907][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.395193][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.420487][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.449381][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.481755][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 247.521105][ T5919] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.555465][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.661861][ T5919] usb 4-1: config 0 descriptor?? [ 248.618440][ T5872] usb 4-1: USB disconnect, device number 33 [ 249.234280][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 249.234303][ T29] audit: type=1326 audit(1736118880.797:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb385d29 code=0x7ffc0000 [ 249.375578][ T29] audit: type=1326 audit(1736118880.797:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb385d29 code=0x7ffc0000 [ 249.421994][ T29] audit: type=1326 audit(1736118880.797:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fc2eb385d29 code=0x7ffc0000 [ 249.444531][ T29] audit: type=1326 audit(1736118880.797:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb385d29 code=0x7ffc0000 [ 249.478156][ T8421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.489041][ T5919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 249.538736][ T29] audit: type=1326 audit(1736118880.797:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8423 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2eb385d29 code=0x7ffc0000 [ 249.570337][ T8437] overlayfs: failed to resolve './bus': -2 [ 250.254365][ T8421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.441462][ T8451] netlink: 168 bytes leftover after parsing attributes in process `syz.2.628'. [ 250.454841][ T8451] openvswitch: netlink: Flow key attr not present in new flow. [ 250.462172][ T8421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.897806][ T8421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.909930][ T973] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 251.111662][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 251.150863][ T973] usb 6-1: config 0 interface 0 has no altsetting 0 [ 251.220850][ T973] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 251.229123][ T8421] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.250281][ T8421] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.268262][ T8421] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.285465][ T8421] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.309732][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.317808][ T973] usb 6-1: Product: syz [ 251.333786][ T973] usb 6-1: Manufacturer: syz [ 251.339528][ T973] usb 6-1: SerialNumber: syz [ 251.358009][ T973] usb 6-1: config 0 descriptor?? [ 251.515642][ T8471] kvm: pic: non byte write [ 251.586968][ T8473] veth3: entered allmulticast mode [ 251.630425][ T5872] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 251.768296][ T973] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 251.790821][ T8477] omfs: Invalid superblock (0) [ 251.801558][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 251.815388][ T5872] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 251.836520][ T5872] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 251.855887][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.866532][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 251.875842][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.886058][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.904781][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 251.927610][ T5872] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 251.944556][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.966140][ T5872] usb 4-1: config 0 descriptor?? [ 252.172659][ T8462] netlink: 'syz.5.632': attribute type 10 has an invalid length. [ 252.185272][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.5.632'. [ 252.210862][ T8462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.247773][ T973] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 252.285810][ T973] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 252.348047][ T5872] usb 4-1: USB disconnect, device number 34 [ 252.580990][ T973] usb 6-1: USB disconnect, device number 11 [ 253.142831][ T5872] kernel read not supported for file /usbmon9 (pid: 5872 comm: kworker/0:5) [ 253.142863][ T8500] lo speed is unknown, defaulting to 1000 [ 253.239934][ T5919] usb 5-1: device descriptor read/64, error -71 [ 253.490244][ T5919] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 253.690927][ T973] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 253.724626][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.748732][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.796112][ T5919] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 253.872454][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.890126][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 253.944467][ T5919] usb 5-1: config 0 descriptor?? [ 253.947212][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 253.959895][ T973] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 253.968397][ T973] usb 6-1: can't read configurations, error -22 [ 254.119944][ T973] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 254.230577][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.261875][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.299758][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 254.331530][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.372209][ T973] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 254.403815][ T973] usb 6-1: can't read configurations, error -22 [ 254.463045][ T973] usb usb6-port1: attempt power cycle [ 254.719401][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 254.739767][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.748974][ T5919] usb 5-1: USB disconnect, device number 21 [ 254.849780][ T973] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 254.880368][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 254.894130][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.916695][ T973] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 254.930344][ T973] usb 6-1: can't read configurations, error -22 [ 255.079790][ T973] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.090020][ T5900] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 255.100359][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 255.108819][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.143986][ T973] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 255.164205][ T973] usb 6-1: can't read configurations, error -22 [ 255.178103][ T973] usb usb6-port1: unable to enumerate USB device [ 255.250495][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 255.282085][ T5900] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 255.282116][ T5900] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 255.282136][ T5900] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 255.282171][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.282192][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.282214][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 255.282234][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.282288][ T5900] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 255.282311][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.285483][ T5900] usb 4-1: config 0 descriptor?? [ 255.829002][ T973] usb 4-1: USB disconnect, device number 35 [ 255.998022][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.005091][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.304872][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 256.508175][ T8552] tipc: Started in network mode [ 256.523675][ T8552] tipc: Node identity d6822416012f, cluster identity 4711 [ 256.540151][ T8552] tipc: Enabled bearer , priority 0 [ 256.549765][ T5871] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 256.558128][ T8552] syzkaller0: entered promiscuous mode [ 256.568862][ T29] audit: type=1400 audit(1736118888.137:213): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8553 comm="syz.5.662" saddr=172.30.0.6 daddr=172.20.20.170 netif=wpan0 [ 256.599678][ T8552] syzkaller0: entered allmulticast mode [ 256.627808][ T8552] tipc: Resetting bearer [ 256.651630][ T8551] tipc: Resetting bearer [ 256.719707][ T8551] tipc: Disabling bearer [ 256.727984][ T5871] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.759758][ T5871] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.779188][ T5871] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.809004][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.835154][ T8550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.865382][ T5871] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.125430][ T46] usb 1-1: USB disconnect, device number 25 [ 257.197759][ T8573] lo speed is unknown, defaulting to 1000 [ 257.219843][ T5871] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 257.250486][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.258963][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.347227][ T29] audit: type=1326 audit(1736118888.917:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.0.660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370b385d29 code=0x0 [ 257.390507][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 257.416880][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.425772][ T5871] usb 4-1: config 1 interface 0 altsetting 49 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 257.437509][ T5871] usb 4-1: config 1 interface 0 has no altsetting 0 [ 257.451828][ T5871] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.40 [ 257.467112][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=5 [ 257.499908][ T973] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 257.564656][ T5871] usb 4-1: Product: syz [ 257.570888][ T5871] usb 4-1: Manufacturer: syz [ 257.575673][ T5871] usb 4-1: SerialNumber: syz [ 258.009228][ T5871] usbhid 4-1:1.0: can't add hid device: -22 [ 258.015929][ T5871] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 258.033508][ T5871] usb 4-1: USB disconnect, device number 36 [ 258.380649][ T973] usb 6-1: device descriptor read/64, error -71 [ 258.649911][ T973] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 258.670711][ T8590] syz.3.672 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 258.810419][ T5871] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 258.900078][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.955641][ T973] usb 6-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 258.965041][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.987980][ T973] usb 6-1: config 0 descriptor?? [ 259.005180][ T973] usb 6-1: unsupported MDLM descriptors [ 259.029828][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 259.070963][ T5871] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 259.079464][ T5871] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 259.104326][ T5871] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 259.115789][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 259.161464][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 259.182224][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.192218][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.205413][ T5871] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 259.215409][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.232225][ T5871] usb 5-1: config 0 descriptor?? [ 259.256880][ T8581] No control pipe specified [ 259.350903][ T8594] sctp: [Deprecated]: syz.5.668 (pid 8594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.350903][ T8594] Use struct sctp_sack_info instead [ 259.374809][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.668'. [ 259.386390][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.400015][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.688070][ T5817] usb 6-1: USB disconnect, device number 17 [ 259.837121][ T8604] syz.3.674 uses obsolete (PF_INET,SOCK_PACKET) [ 260.411865][ T5900] usb 5-1: USB disconnect, device number 22 [ 260.460100][ T5871] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 260.639864][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 260.646038][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.646085][ T5871] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 260.646110][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.648074][ T5871] usb 1-1: config 0 descriptor?? [ 260.718306][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.677'. [ 260.839995][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 261.108091][ T5871] hid-alps 0003:044E:121E.000A: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.0-1/input0 [ 261.399761][ T5871] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 261.571048][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 261.584169][ T5871] usb 5-1: config 0 has an invalid interface number: 231 but max is 1 [ 261.592784][ T5871] usb 5-1: config 0 has no interface number 1 [ 261.598973][ T5871] usb 5-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 261.610490][ T5871] usb 5-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 261.624311][ T5871] usb 5-1: config 0 interface 231 has no altsetting 0 [ 261.636804][ T5871] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 261.647566][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.655853][ T5871] usb 5-1: Product: syz [ 261.660655][ T5871] usb 5-1: Manufacturer: syz [ 261.665357][ T5871] usb 5-1: SerialNumber: syz [ 261.672098][ T5871] usb 5-1: config 0 descriptor?? [ 261.799701][ T5817] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 261.890760][ T5871] usb 5-1: Could not set interface, error -71 [ 261.899481][ T5871] usb 5-1: USB disconnect, device number 23 [ 261.971237][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 261.982490][ T5817] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.001080][ T5817] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 262.019696][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.043984][ T5817] usb 6-1: config 0 descriptor?? [ 262.268134][ T5831] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 262.268231][ T5831] Bluetooth: hci0: unknown advertising packet type: 0x09 [ 262.279693][ T5831] Bluetooth: hci0: unknown advertising packet type: 0x21 [ 262.287120][ T5831] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 262.294952][ T5831] Bluetooth: hci0: Malformed LE Event: 0x02 [ 262.367691][ T5817] usbhid 6-1:0.0: can't add hid device: -71 [ 262.423400][ T5817] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 262.436584][ T5817] usb 6-1: USB disconnect, device number 18 [ 262.445490][ T5871] usb 1-1: USB disconnect, device number 26 [ 262.576929][ T8656] Cannot find add_set index 0 as target [ 263.699707][ T8678] IPv4: Oversized IP packet from 172.20.20.10 [ 263.708068][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 263.728429][ T8678] IPv4: Oversized IP packet from 172.20.20.10 [ 263.736625][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 263.879740][ T5871] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 264.679664][ T5871] usb 5-1: device descriptor read/64, error -71 [ 264.819891][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 264.939985][ T5871] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 265.022713][ T5899] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 265.031472][ T5899] usb 1-1: config 0 has no interface number 0 [ 265.038589][ T5899] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.049766][ T5899] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 265.069747][ T5871] usb 5-1: device descriptor read/64, error -71 [ 265.079703][ T5899] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 265.101384][ T5899] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 265.116269][ T5899] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.135605][ T5899] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 265.144797][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 265.152999][ T5899] usb 1-1: Product: syz [ 265.154857][ T5899] usb 1-1: config 0 descriptor?? [ 265.181269][ T5899] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 265.187667][ T5899] gspca_mr97310a: reg write [21] error -22 [ 265.194155][ T973] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 265.202473][ T5871] usb usb5-port1: attempt power cycle [ 265.209412][ T5899] mr97310a 1-1:0.57: probe with driver mr97310a failed with error -22 [ 265.227341][ T29] audit: type=1800 audit(1736118896.797:215): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.704" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 265.331859][ T973] usb 4-1: device descriptor read/64, error -71 [ 265.384316][ T5899] usb 1-1: USB disconnect, device number 27 [ 265.542621][ T5871] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 265.569684][ T973] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 265.578126][ T5871] usb 5-1: device descriptor read/8, error -71 [ 265.651749][ T5872] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 265.709708][ T973] usb 4-1: device descriptor read/64, error -71 [ 265.819737][ T5871] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 265.819890][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 265.829706][ T973] usb usb4-port1: attempt power cycle [ 265.835128][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 265.847701][ T5872] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.850225][ T5871] usb 5-1: device descriptor read/8, error -71 [ 265.856888][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.872318][ T5872] usb 6-1: config 0 descriptor?? [ 265.879223][ T5872] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 265.970449][ T5871] usb usb5-port1: unable to enumerate USB device [ 266.133045][ T5871] usb 6-1: USB disconnect, device number 19 [ 266.190218][ T973] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 266.215922][ T973] usb 4-1: device descriptor read/8, error -71 [ 266.390081][ T8728] UHID_CREATE from different security context by process 461 (syz.0.715), this is not allowed. [ 266.459735][ T973] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 266.491928][ T973] usb 4-1: device descriptor read/8, error -71 [ 266.604981][ T973] usb usb4-port1: unable to enumerate USB device [ 266.860201][ T8731] netlink: 'syz.5.716': attribute type 10 has an invalid length. [ 266.984046][ T8735] kvm: pic: non byte write [ 267.249876][ T5872] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 267.397055][ T8739] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 267.406379][ T8739] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 267.419846][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 267.429262][ T5872] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 267.438095][ T5872] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 267.446961][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 267.456045][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 267.466467][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 267.476381][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.502751][ T5872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 267.515789][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.529416][ T5872] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 267.538866][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.548356][ T5872] usb 5-1: config 0 descriptor?? [ 267.873175][ T5872] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 267.885757][ T5872] usb 5-1: USB disconnect, device number 28 [ 267.894495][ T5872] usblp0: removed [ 268.865472][ T8761] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.725'. [ 268.872781][ T8762] trusted_key: syz.5.724 sent an empty control message without MSG_MORE. [ 268.883129][ T8761] openvswitch: netlink: Flow key attribute not present in set flow. [ 269.403861][ T5900] hid-generic 089C:0003:0002.000B: item fetching failed at offset 5/7 [ 269.418930][ T5900] hid-generic 089C:0003:0002.000B: probe with driver hid-generic failed with error -22 [ 269.467047][ T8763] [U] [ 269.891183][ T8774] netlink: 92 bytes leftover after parsing attributes in process `syz.0.730'. [ 270.239304][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.735'. [ 270.417018][ T5872] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 270.490222][ T8795] ubi0: attaching mtd0 [ 270.494615][ T8795] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 270.513690][ T8795] x_tables: ip_tables: osf match: only valid for protocol 6 [ 270.791125][ T5900] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 270.951482][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 270.962438][ T5900] usb 6-1: config 2 has an invalid interface number: 15 but max is 0 [ 270.970624][ T5900] usb 6-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 271.085846][ T5900] usb 6-1: config 2 has no interface number 0 [ 271.100172][ T5900] usb 6-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 271.110519][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.120823][ T5872] usb 5-1: config 8 has an invalid interface number: 97 but max is 0 [ 271.129043][ T5872] usb 5-1: config 8 has no interface number 0 [ 271.136120][ T5900] usb 6-1: Product: syz [ 271.140570][ T5872] usb 5-1: config 8 interface 97 altsetting 4 has an endpoint descriptor with address 0x93, changing to 0x83 [ 271.165770][ T5900] usb 6-1: Manufacturer: syz [ 271.181687][ T5900] usb 6-1: SerialNumber: syz [ 271.191486][ T5872] usb 5-1: config 8 interface 97 altsetting 4 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 271.204002][ T5872] usb 5-1: config 8 interface 97 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 271.221795][ T5872] usb 5-1: config 8 interface 97 has no altsetting 0 [ 271.241031][ T5872] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=5d.c5 [ 271.250411][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.260086][ T5872] usb 5-1: Product: syz [ 271.265040][ T5872] usb 5-1: Manufacturer: syz [ 271.271398][ T5872] usb 5-1: SerialNumber: syz [ 271.290064][ T8780] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 271.544305][ T29] audit: type=1326 audit(1736118902.988:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.575600][ T29] audit: type=1326 audit(1736118902.988:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.597267][ T29] audit: type=1326 audit(1736118903.016:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.619149][ T29] audit: type=1326 audit(1736118903.016:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.642002][ T29] audit: type=1326 audit(1736118903.016:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f43d01b85e5 code=0x7ffc0000 [ 271.676432][ T29] audit: type=1326 audit(1736118903.016:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.697996][ T29] audit: type=1326 audit(1736118903.016:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.719776][ T29] audit: type=1326 audit(1736118903.016:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.741512][ T29] audit: type=1326 audit(1736118903.016:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 271.764349][ T29] audit: type=1326 audit(1736118903.016:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8773 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0185d29 code=0x7ffc0000 [ 272.233674][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.243912][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.247974][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.248232][ T5831] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 273.256996][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.601197][ T5817] usb 6-1: USB disconnect, device number 20 [ 273.651945][ T8819] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 273.667281][ T8819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.182383][ T8825] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 274.189297][ T8825] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.203116][ T8825] vhci_hcd vhci_hcd.0: Device attached [ 274.214052][ T8826] vhci_hcd: connection closed [ 274.217380][ T12] vhci_hcd: stop threads [ 274.229823][ T8831] binder: BINDER_SET_CONTEXT_MGR already set [ 274.235424][ T12] vhci_hcd: release socket [ 274.237804][ T8831] binder: 8828:8831 ioctl 4018620d 20000040 returned -16 [ 274.240661][ T12] vhci_hcd: disconnect device [ 274.320846][ T5899] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 274.481965][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 274.542971][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.553231][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.637995][ T8841] @: renamed from vlan0 (while UP) [ 274.650586][ T5899] usb 6-1: New USB device found, idVendor=1d07, idProduct=0101, bcdDevice= 0.40 [ 274.659698][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.667780][ T5899] usb 6-1: Product: syz [ 274.672066][ T5899] usb 6-1: Manufacturer: syz [ 274.676949][ T5899] usb 6-1: SerialNumber: syz [ 274.822882][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'. [ 275.356622][ T8821] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.121892][ T5899] usb 6-1: cannot find UAC_HEADER [ 276.144674][ T5899] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 276.176725][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 276.189677][ T5899] usb 6-1: USB disconnect, device number 21 [ 276.515873][ T8866] ubi0: attaching mtd0 [ 276.520075][ T8866] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 276.534027][ T8866] x_tables: ip_tables: osf match: only valid for protocol 6 [ 276.692771][ T5869] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.820879][ T973] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 276.874356][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 276.904772][ T5869] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 276.980408][ T5869] usb 4-1: config 0 has no interface number 0 [ 277.028373][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 277.095722][ T5869] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 277.130283][ T973] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 277.208122][ T973] usb 1-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 277.218749][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.251775][ T973] usb 1-1: config 2 has no interface number 0 [ 277.260494][ T5869] usb 4-1: config 0 descriptor?? [ 277.295699][ T973] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 277.323149][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.356968][ T973] usb 1-1: Product: syz [ 277.361190][ T973] usb 1-1: Manufacturer: syz [ 277.378014][ T973] usb 1-1: SerialNumber: syz [ 277.488724][ T973] usb 4-1: USB disconnect, device number 41 [ 277.558815][ T5831] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 277.568752][ T5831] Bluetooth: hci4: Injecting HCI hardware error event [ 277.578747][ T54] Bluetooth: hci4: hardware error 0x00 [ 278.330093][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.760'. [ 278.911178][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 278.920570][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.763'. [ 279.076707][ T5919] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 279.454098][ T973] usb 1-1: USB disconnect, device number 28 [ 279.570891][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 279.606945][ T5919] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.615522][ T5919] usb 4-1: config 179 has no interface number 0 [ 279.622009][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 279.639590][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 279.650970][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.664876][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 279.676388][ T5919] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.689733][ T5919] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 279.698876][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.713294][ T8893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 279.771358][ T54] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 279.803809][ T8904] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 279.811420][ T8904] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 279.953518][ T8907] evm: overlay not supported [ 280.463198][ T8909] netlink: 'syz.5.762': attribute type 15 has an invalid length. [ 280.608290][ T973] usb 4-1: USB disconnect, device number 42 [ 280.608307][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 280.623413][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 283.183747][ T2338] pvrusb2: request_firmware fatal error with code=-110 [ 283.190688][ T2338] pvrusb2: Failure uploading firmware1 [ 283.311340][ T2338] pvrusb2: Device initialization was not successful. [ 283.318140][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 283.328261][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 283.338069][ T8] pvrusb2: Device being rendered inoperable [ 283.796671][ T8] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 284.732093][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 284.745226][ T8] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 284.753906][ T8] usb 3-1: config 0 has no interface number 0 [ 284.760067][ T8] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 284.784163][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 284.793536][ T5900] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 284.807389][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.780'. [ 284.809890][ T8] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 284.825815][ T8] usb 3-1: Product: syz [ 284.843491][ T8] usb 3-1: SerialNumber: syz [ 285.041698][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 285.047712][ T8] usb 3-1: config 0 descriptor?? [ 285.079709][ T5900] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 285.111426][ T8] usb 3-1: can't set config #0, error -71 [ 285.118597][ T5900] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 285.317865][ T5900] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 285.329960][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.348403][ T5900] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.359982][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.378742][ T5900] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.382469][ T8969] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 285.387943][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.440285][ T8] usb 3-1: USB disconnect, device number 15 [ 285.573114][ T5900] usb 4-1: config 0 descriptor?? [ 285.636967][ T8972] xt_l2tp: v2 sid > 0xffff: 262144 [ 285.892776][ T5900] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 285.907797][ T5900] usb 4-1: USB disconnect, device number 43 [ 285.907955][ T973] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 285.932063][ T5900] usblp0: removed [ 285.950585][ T5919] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 286.075720][ T8983] team_slave_0: entered promiscuous mode [ 286.081877][ T8983] team_slave_1: entered promiscuous mode [ 286.088601][ T8983] macvlan2: entered allmulticast mode [ 286.095320][ T8983] team0: entered allmulticast mode [ 286.100631][ T8983] team_slave_0: entered allmulticast mode [ 286.106998][ T8983] team_slave_1: entered allmulticast mode [ 286.124733][ T8983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.218247][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 286.235334][ T8983] team0: left allmulticast mode [ 286.240504][ T8983] team_slave_0: left allmulticast mode [ 286.246184][ T8983] team_slave_1: left allmulticast mode [ 286.252080][ T8983] team_slave_0: left promiscuous mode [ 286.257558][ T8983] team_slave_1: left promiscuous mode [ 286.272533][ T973] usb 6-1: config 0 has an invalid interface number: 100 but max is 0 [ 286.306053][ T973] usb 6-1: config 0 has no interface number 0 [ 286.314127][ T973] usb 6-1: config 0 interface 100 altsetting 247 endpoint 0x6 has invalid wMaxPacketSize 0 [ 286.364292][ T973] usb 6-1: config 0 interface 100 has no altsetting 0 [ 286.391171][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.564304][ T973] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.b2 [ 286.581269][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.589331][ T973] usb 6-1: Product: syz [ 286.593602][ T973] usb 6-1: Manufacturer: syz [ 286.598220][ T973] usb 6-1: SerialNumber: syz [ 286.604637][ T973] usb 6-1: config 0 descriptor?? [ 286.623455][ T5919] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 286.677166][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.720952][ T5919] usb 1-1: Product: syz [ 286.732175][ T5919] usb 1-1: Manufacturer: syz [ 286.736862][ T5919] usb 1-1: SerialNumber: syz [ 286.761364][ T5919] usb 1-1: config 0 descriptor?? [ 286.777373][ T5919] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 286.783583][ T5919] usb 1-1: selecting invalid altsetting 1 [ 286.974983][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 286.989182][ T8972] netlink: 72 bytes leftover after parsing attributes in process `syz.5.784'. [ 286.999913][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'. [ 287.026372][ T5919] gspca_stk014: init reg: 0x00 [ 287.837809][ T5919] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 287.900785][ T973] usbtest 6-1:0.100: couldn't get endpoints, -22 [ 287.910304][ T973] usbtest 6-1:0.100: probe with driver usbtest failed with error -22 [ 287.940223][ T973] usb 6-1: USB disconnect, device number 22 [ 288.500693][ T8998] x_tables: duplicate underflow at hook 2 [ 288.600312][ T973] usb 1-1: USB disconnect, device number 29 [ 290.066585][ T5899] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 290.230358][ T5899] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 290.238685][ T5899] usb 3-1: config 0 has no interface number 0 [ 290.245179][ T5899] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 290.326306][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 290.367339][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 290.383392][ T5899] usb 3-1: Product: syz [ 290.387714][ T5899] usb 3-1: SerialNumber: syz [ 290.413876][ T5899] usb 3-1: config 0 descriptor?? [ 290.581017][ T9028] sctp: [Deprecated]: syz.4.800 (pid 9028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.581017][ T9028] Use struct sctp_sack_info instead [ 290.694574][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 290.703842][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 290.804083][ T5919] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 290.840678][ T9038] binder: 9024:9038 ioctl c0306201 0 returned -14 [ 291.646416][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.663779][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.760818][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 291.872866][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.881958][ T5899] usb 3-1: invalid MIDI in EP 0 [ 291.933011][ T5919] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.944421][ T5919] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.954491][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 291.961201][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 291.970356][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.981855][ T5817] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 291.993034][ T5919] usb 4-1: config 0 descriptor?? [ 292.010716][ T5899] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 292.033051][ T5899] usb 3-1: USB disconnect, device number 16 [ 292.179289][ T5817] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 292.219111][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.270370][ T5817] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.291205][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.299338][ T5817] usb 1-1: SerialNumber: syz [ 292.318931][ T9037] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 292.903429][ T5919] wacom 0003:056A:4001.000C: unknown main item tag 0x0 [ 292.933968][ T5919] wacom 0003:056A:4001.000C: hidraw0: USB HID v0.00 Device [HID 056a:4001] on usb-dummy_hcd.3-1/input0 [ 292.952712][ T5919] usb 4-1: USB disconnect, device number 44 [ 292.965031][ T5817] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 293.005678][ T5817] usb 1-1: USB disconnect, device number 30 [ 293.893375][ T9081] Bluetooth: MGMT ver 1.23 [ 294.466282][ T9086] mmap: syz.5.813 (9086): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 294.620362][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 294.709868][ T9096] geneve1: entered promiscuous mode [ 294.813018][ T9096] geneve1: left promiscuous mode [ 294.964522][ T973] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 295.410800][ T5919] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 295.620498][ T5919] usb 4-1: device descriptor read/64, error -71 [ 295.968953][ T973] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 295.977524][ T973] usb 1-1: config 0 has no interface number 0 [ 295.983854][ T973] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 296.017018][ T973] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 296.032312][ T973] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 296.040378][ T973] usb 1-1: Product: syz [ 296.085968][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.094531][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.102440][ T973] usb 1-1: SerialNumber: syz [ 296.110002][ T973] usb 1-1: config 0 descriptor?? [ 296.180289][ T9105] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 296.192227][ T5919] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 296.375883][ T5919] usb 4-1: device descriptor read/64, error -71 [ 296.519276][ T5919] usb usb4-port1: attempt power cycle [ 296.919133][ T5919] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 296.974303][ T5919] usb 4-1: device descriptor read/8, error -71 [ 297.090244][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 297.743471][ T5919] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 297.930814][ T973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.963560][ T973] usb 1-1: invalid MIDI in EP 0 [ 298.061418][ T973] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 298.073667][ T973] usb 1-1: USB disconnect, device number 31 [ 298.085118][ T5919] usb 4-1: device descriptor read/8, error -71 [ 298.202718][ T5919] usb usb4-port1: unable to enumerate USB device [ 299.433501][ T9138] dccp_invalid_packet: P.Data Offset(0) too small [ 299.565855][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 299.576219][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'. [ 300.970988][ T46] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 301.120580][ T46] usb 6-1: device descriptor read/64, error -71 [ 301.442673][ T46] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 301.559001][ T5899] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 301.836747][ T46] usb 6-1: device descriptor read/64, error -71 [ 301.860815][ T5899] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 301.869418][ T5899] usb 3-1: config 0 has no interface number 0 [ 301.875544][ T5899] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 301.905909][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.933646][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 301.948379][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 301.956933][ T46] usb usb6-port1: attempt power cycle [ 301.965059][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.974954][ T5899] usb 3-1: Product: syz [ 301.979281][ T5899] usb 3-1: SerialNumber: syz [ 302.183224][ T5899] usb 3-1: config 0 descriptor?? [ 302.478392][ T46] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 303.108777][ C1] hrtimer: interrupt took 45465 ns [ 303.225972][ T46] usb 6-1: device descriptor read/8, error -71 [ 303.517050][ T9176] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 303.525363][ T9176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 303.535441][ T9176] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 303.543474][ T9176] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 303.558400][ T46] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 303.611507][ T973] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 304.135720][ T46] usb 6-1: device descriptor read/8, error -71 [ 304.214296][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.221728][ T5899] usb 3-1: invalid MIDI in EP 0 [ 304.253099][ T46] usb usb6-port1: unable to enumerate USB device [ 304.260549][ T973] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.342055][ T5899] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 304.371065][ T973] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 304.403662][ T5899] usb 3-1: USB disconnect, device number 18 [ 304.409751][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.430476][ T9180] tmpfs: Unknown parameter 'grpquota®okw' [ 304.439109][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.447720][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.844'. [ 304.463800][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 304.498163][ T973] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 304.518438][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.545938][ T973] usb 1-1: config 0 descriptor?? [ 304.707329][ T46] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 304.834880][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 304.844169][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 305.302551][ T46] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.378961][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.991297][ T46] usb 6-1: config 0 descriptor?? [ 305.994032][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.015530][ T973] hid-u2fzero 0003:20A0:4287.000D: hidraw0: USB HID vff.fd Device [HID 20a0:4287] on usb-dummy_hcd.0-1/input0 [ 306.026809][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.046326][ T46] cp210x 6-1:0.0: cp210x converter detected [ 306.086481][ T973] hid-u2fzero 0003:20A0:4287.000D: NitroKey U2F LED initialised [ 306.140949][ T973] hid-u2fzero 0003:20A0:4287.000D: NitroKey U2F RNG initialised [ 306.242237][ T973] usb 1-1: USB disconnect, device number 32 [ 306.299001][ T5908] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 306.365706][ T9203] warning: `syz.2.848' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 306.392170][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.402308][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.476489][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 306.499580][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.511344][ T5908] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 306.529788][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.541319][ T46] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 306.551158][ T5908] usb 4-1: Product: syz [ 306.555510][ T5908] usb 4-1: Manufacturer: syz [ 306.560301][ T5908] usb 4-1: SerialNumber: syz [ 306.577430][ T5908] usb 4-1: config 0 descriptor?? [ 306.765081][ T46] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 306.779721][ T46] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 306.803931][ T5908] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 306.809267][ T46] usb 6-1: cp210x converter now attached to ttyUSB0 [ 306.823387][ T5908] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 306.852113][ T5908] usb 4-1: USB disconnect, device number 49 [ 307.088994][ T46] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 307.132591][ T5908] usb 6-1: USB disconnect, device number 27 [ 307.151419][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.179781][ T5908] cp210x 6-1:0.0: device disconnected [ 307.418987][ T46] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.428373][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.438344][ T46] usb 1-1: config 0 descriptor?? [ 307.446733][ T46] cp210x 1-1:0.0: cp210x converter detected [ 307.541499][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.551586][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.172088][ T9211] netlink: 'syz.0.851': attribute type 4 has an invalid length. [ 308.432097][ T9225] sctp: [Deprecated]: syz.5.854 (pid 9225) Use of int in max_burst socket option deprecated. [ 308.432097][ T9225] Use struct sctp_assoc_value instead [ 308.449880][ T46] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 308.461106][ T46] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 308.473839][ T46] usb 1-1: cp210x converter now attached to ttyUSB0 [ 308.490822][ T46] usb 1-1: USB disconnect, device number 33 [ 308.516722][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 308.537696][ T46] cp210x 1-1:0.0: device disconnected [ 308.550396][ T5817] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 308.742937][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 308.776499][ T5817] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 308.806979][ T5817] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 308.840208][ T5817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 308.867392][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.908880][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.950153][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 309.017615][ T5817] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 309.048383][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.074893][ T5817] usb 4-1: config 0 descriptor?? [ 309.610126][ T5817] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 309.935800][ T5817] usb 4-1: USB disconnect, device number 50 [ 309.956008][ T5817] usblp0: removed [ 311.373830][ T9237] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.383417][ T9237] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.392179][ T9237] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.401109][ T9237] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.303043][ T9241] xt_NFQUEUE: number of total queues is 0 [ 312.885405][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.858'. [ 313.706697][ T9243] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 313.713361][ T9243] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 313.721078][ T9243] vhci_hcd vhci_hcd.0: Device attached [ 314.411054][ T5871] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 314.473414][ T973] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 314.656070][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 314.743750][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.001071][ T9246] vhci_hcd: connection reset by peer [ 315.027713][ T5914] vhci_hcd: stop threads [ 315.039603][ T5914] vhci_hcd: release socket [ 315.044351][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.071288][ T5914] vhci_hcd: disconnect device [ 315.080367][ T973] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 315.110867][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.128781][ T973] usb 4-1: config 0 descriptor?? [ 315.136075][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.317982][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 315.340267][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.355984][ T46] usb 3-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.370468][ T46] usb 3-1: config 1 interface 0 has no altsetting 0 [ 315.430571][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.486956][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.537243][ T46] usb 3-1: Product: syz [ 315.590197][ T973] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 315.591804][ T9273] syz.4.869: attempt to access beyond end of device [ 315.591804][ T9273] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 315.597748][ T973] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 315.621621][ T46] usb 3-1: Manufacturer: syz [ 315.636875][ T46] usb 3-1: SerialNumber: syz [ 315.709280][ T973] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 315.716887][ T973] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 315.725156][ T973] appleir 0003:05AC:8241.000E: unknown main item tag 0x0 [ 315.753502][ T973] appleir 0003:05AC:8241.000E: No inputs registered, leaving [ 315.894045][ T973] appleir 0003:05AC:8241.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 315.966987][ T9261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.976628][ T9261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.015296][ T46] usb 3-1: bad CDC descriptors [ 316.300838][ T46] usb 3-1: USB disconnect, device number 19 [ 316.397289][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.406405][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.134611][ T9262] batadv_slave_0: entered promiscuous mode [ 317.144829][ T9262] batadv_slave_0: left promiscuous mode [ 317.167965][ T973] usb 4-1: reset high-speed USB device number 51 using dummy_hcd [ 317.487909][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 317.583970][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 317.583992][ T29] audit: type=1800 audit(1736118947.045:233): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.873" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 318.898900][ T5908] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 319.092233][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 319.120982][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 319.149464][ T5908] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 319.176268][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.191263][ T5908] usb 1-1: Product: syz [ 319.205240][ T5908] usb 1-1: Manufacturer: syz [ 319.221533][ T5908] usb 1-1: SerialNumber: syz [ 319.239842][ T5908] usb 1-1: config 0 descriptor?? [ 319.258440][ T5908] gs_usb 1-1:0.0: Required endpoints not found [ 320.534955][ T5871] vhci_hcd: vhci_device speed not set [ 320.675809][ T9321] block device autoloading is deprecated and will be removed. [ 320.868949][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.875622][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.593364][ T9320] netlink: 252 bytes leftover after parsing attributes in process `syz.5.879'. [ 321.602379][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.5.879'. [ 321.622904][ T973] usb 1-1: USB disconnect, device number 34 [ 321.629185][ T5899] usb 4-1: USB disconnect, device number 51 [ 322.727092][ T9337] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 323.028570][ T9338] can: request_module (can-proto-3) failed. [ 324.856927][ T5871] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 324.886850][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 324.896723][ T9364] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 324.904813][ T9364] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 324.913523][ T9364] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 324.921582][ T9364] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 325.036999][ T5871] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 325.058109][ T5871] usb 6-1: config 0 has no interface number 0 [ 325.064493][ T5871] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 325.085498][ T5871] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 325.094816][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 325.103147][ T5871] usb 6-1: Product: syz [ 325.107343][ T5871] usb 6-1: SerialNumber: syz [ 325.121751][ T5871] usb 6-1: config 0 descriptor?? [ 325.149430][ T973] IPVS: starting estimator thread 0... [ 325.162670][ T9367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.171656][ T9367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.186070][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.194747][ T5908] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 325.202852][ T5908] usb 3-1: can't read configurations, error -71 [ 325.269681][ T9374] IPVS: using max 22 ests per chain, 52800 per kthread [ 326.250796][ T29] audit: type=1326 audit(1736118955.155:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9381 comm="syz.0.902" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f370b385d29 code=0x0 [ 326.579736][ T5871] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.590462][ T5871] usb 6-1: invalid MIDI in EP 0 [ 327.913596][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.922383][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.272925][ T5871] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 328.315398][ T5871] usb 6-1: USB disconnect, device number 28 [ 328.392782][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 328.614992][ T9404] hfs: can't find a HFS filesystem on dev nullb0 [ 328.822756][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 328.851834][ T5908] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 328.981325][ T9407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.993583][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.004592][ T9407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.012786][ T5908] usb 3-1: config 0 has no interface number 0 [ 329.019069][ T5908] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 329.033647][ T5908] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 329.047718][ T5908] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 329.058789][ T5908] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 329.068952][ T5908] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 329.082243][ T5908] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 329.111131][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.123304][ T5908] usb 3-1: config 0 descriptor?? [ 329.130685][ T9399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.138043][ T9399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.147329][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.258248][ T5919] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 329.397117][ T5919] usb 6-1: device descriptor read/64, error -71 [ 329.789862][ T5919] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 329.846195][ T5908] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 330.004649][ T9429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.013768][ T9429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.516661][ T5871] usb 3-1: USB disconnect, device number 22 [ 330.688336][ T5919] usb 6-1: device descriptor read/64, error -71 [ 330.778822][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.797507][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.808455][ T5919] usb usb6-port1: attempt power cycle [ 330.829109][ T5908] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 330.849240][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.875004][ T5908] usb 1-1: config 0 descriptor?? [ 331.104930][ T29] audit: type=1326 audit(1736118959.701:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9419 comm="syz.0.912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f370b385d29 code=0x0 [ 331.193293][ T5919] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 331.226170][ T5919] usb 6-1: device descriptor read/8, error -71 [ 331.290523][ T5871] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 331.469675][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.481556][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.499017][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 331.514089][ T5919] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 331.523487][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 331.550884][ T5871] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.562733][ T5919] usb 6-1: device descriptor read/8, error -71 [ 331.567279][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.583330][ T5871] usb 3-1: config 0 descriptor?? [ 331.699261][ T5919] usb usb6-port1: unable to enumerate USB device [ 332.026399][ T5871] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 332.037366][ T5871] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 332.055122][ T5871] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 332.335839][ T9443] sp0: Synchronizing with TNC [ 332.552190][ T5919] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 333.059974][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 333.143321][ T5919] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 333.152661][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.169443][ T5919] usb 6-1: config 0 descriptor?? [ 333.188966][ T5919] as10x_usb: device has been detected [ 333.195320][ T5908] usbhid 1-1:0.0: can't add hid device: -71 [ 333.205754][ T5919] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 333.213959][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 333.229945][ T5908] usb 1-1: USB disconnect, device number 35 [ 333.434208][ T5919] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 333.460275][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 333.470150][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 333.561030][ T9441] can0: slcan on ptm0. [ 333.616677][ T5919] as10x_usb: error during firmware upload part1 [ 333.639210][ T5919] Registered device nBox DVB-T Dongle [ 333.729705][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.744663][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.746769][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.764404][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.791410][ T9461] can0 (unregistered): slcan off ptm0. [ 333.799873][ T5919] usb 6-1: USB disconnect, device number 33 [ 333.819150][ T5919] Unregistered device nBox DVB-T Dongle [ 333.820182][ T5919] as10x_usb: device has been disconnected [ 333.951453][ T5871] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 334.147362][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 334.158002][ T5871] usb 1-1: New USB device found, idVendor=05da, idProduct=00b6, bcdDevice=cd.b7 [ 334.167198][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.175225][ T5871] usb 1-1: Product: syz [ 334.179476][ T5871] usb 1-1: Manufacturer: syz [ 334.184066][ T5871] usb 1-1: SerialNumber: syz [ 334.190874][ T5871] usb 1-1: config 0 descriptor?? [ 334.199280][ T5871] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 334.763956][ T5869] usb 1-1: USB disconnect, device number 36 [ 336.492208][ T9498] x_tables: duplicate underflow at hook 2 [ 337.019637][ T5900] usb 3-1: USB disconnect, device number 23 [ 337.277539][ T5900] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 337.853638][ T9504] ISOFS: Unable to identify CD-ROM format. [ 338.236837][ T5900] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 338.248086][ T5900] usb 3-1: config 0 has no interface number 0 [ 338.263033][ T5900] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 338.277209][ T5900] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 338.321124][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 338.383302][ T5900] usb 3-1: Product: syz [ 338.393572][ T5900] usb 3-1: SerialNumber: syz [ 338.399810][ T5900] usb 3-1: config 0 descriptor?? [ 338.730983][ T5900] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.738558][ T5900] usb 3-1: invalid MIDI in EP 0 [ 338.778209][ T5900] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 338.854551][ T5900] usb 3-1: USB disconnect, device number 24 [ 339.512288][ T9525] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 339.521337][ T9525] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 339.531994][ T9525] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 339.540109][ T9525] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 341.476296][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.946'. [ 341.486499][ T9546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.946'. [ 341.937600][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.947'. [ 343.819632][ T5817] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 343.867551][ T9571] cgroup: release_agent respecified [ 343.889583][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'. [ 344.149663][ T5908] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 344.802391][ T5817] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 344.812869][ T5817] usb 4-1: config 0 has no interface number 0 [ 344.819019][ T5817] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 344.875149][ T5817] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 344.893428][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 344.900745][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 344.908896][ T5817] usb 4-1: Product: syz [ 344.930631][ T5908] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 344.939036][ T5908] usb 1-1: config 0 has no interface number 0 [ 344.946243][ T5908] usb 1-1: config 0 interface 2 has no altsetting 0 [ 344.952991][ T5817] usb 4-1: SerialNumber: syz [ 344.969132][ T5817] usb 4-1: config 0 descriptor?? [ 344.993920][ T5908] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 345.008566][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.017084][ T5908] usb 1-1: Product: syz [ 345.021618][ T5908] usb 1-1: Manufacturer: syz [ 345.026240][ T5908] usb 1-1: SerialNumber: syz [ 345.102526][ T5908] usb 1-1: config 0 descriptor?? [ 345.134833][ T5817] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.142494][ T5817] usb 4-1: invalid MIDI in EP 0 [ 346.076858][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.146965][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.292949][ T5817] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 346.304573][ T5817] usb 4-1: USB disconnect, device number 52 [ 347.165259][ T5817] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 347.740546][ T5908] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.762731][ T5908] usb 1-1: invalid MIDI in EP 0 [ 347.769849][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 347.781347][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.830181][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.914774][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.930675][ T5908] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 348.079033][ T9615] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.087288][ T9615] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 348.099550][ T9615] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 348.114434][ T9615] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 348.151856][ T5817] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 348.321759][ T5908] usb 1-1: USB disconnect, device number 37 [ 348.330186][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.343269][ T5817] usb 4-1: config 0 descriptor?? [ 349.167672][ T9604] kvm: kvm [9602]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 350.337268][ T5908] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 350.385405][ T5817] cmedia_hs100b 0003:0D8C:0014.0010: item 0 4 0 8 parsing failed [ 350.394104][ T5817] cmedia_hs100b 0003:0D8C:0014.0010: probe with driver cmedia_hs100b failed with error -22 [ 350.500386][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 350.517365][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 350.558512][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.624710][ T5908] usb 3-1: Product: syz [ 350.656203][ T5908] usb 3-1: Manufacturer: syz [ 350.664704][ T9639] binder: 9638:9639 ioctl c018620c 20000140 returned -1 [ 350.668911][ T5908] usb 3-1: SerialNumber: syz [ 350.679643][ T5817] usb 4-1: USB disconnect, device number 53 [ 351.024287][ T973] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 351.189442][ T973] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 351.271020][ T973] usb 1-1: config 0 has no interface number 0 [ 351.374159][ T973] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 351.474950][ T5908] usb 3-1: config 0 descriptor?? [ 351.484518][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 351.688964][ T973] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 351.698359][ T973] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 351.706526][ T973] usb 1-1: Product: syz [ 351.710798][ T973] usb 1-1: SerialNumber: syz [ 351.881918][ T973] usb 1-1: config 0 descriptor?? [ 352.730769][ T5908] gspca_sonixj: reg_w1 err -110 [ 352.736174][ T5908] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 354.249803][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 354.258877][ T9662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.976'. [ 354.442112][ T973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.453299][ T973] usb 1-1: invalid MIDI in EP 0 [ 354.876781][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 354.886024][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.975'. [ 355.109545][ T973] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 355.443716][ T973] usb 1-1: USB disconnect, device number 38 [ 355.586315][ T5908] usb 3-1: USB disconnect, device number 25 [ 355.729381][ T5899] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 355.888467][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 355.908217][ T5899] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 355.927297][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.945033][ T5899] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.956879][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 355.968716][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.016693][ T5899] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 356.024905][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.036627][ T5899] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.049313][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.061645][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.112900][ T5899] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 356.120402][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.131803][ T5899] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.143634][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 356.155089][ T5899] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.201262][ T5899] usb 6-1: string descriptor 0 read error: -22 [ 356.207655][ T5899] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 356.220587][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.257975][ T5899] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 356.693168][ T5817] usb 6-1: USB disconnect, device number 34 [ 356.872373][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.984'. [ 357.439029][ T5899] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 357.766060][ T5899] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 357.887625][ T5899] usb 3-1: config 0 has no interface number 0 [ 357.893794][ T5899] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 357.943101][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 357.965584][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 357.981807][ T5899] usb 3-1: Product: syz [ 358.015469][ T5899] usb 3-1: SerialNumber: syz [ 358.030058][ T5899] usb 3-1: config 0 descriptor?? [ 358.863535][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.990'. [ 358.887036][ T9710] netlink: 56 bytes leftover after parsing attributes in process `syz.5.990'. [ 358.908247][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.990'. [ 360.621115][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.667706][ T5899] usb 3-1: invalid MIDI in EP 0 [ 360.758801][ T9725] input: syz0 as /devices/virtual/input/input38 [ 361.129525][ T5899] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 361.159538][ T5899] usb 3-1: USB disconnect, device number 26 [ 361.468706][ T9737] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 361.478228][ T9737] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 361.491706][ T9737] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 361.499812][ T9737] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 362.526249][ T9750] lo speed is unknown, defaulting to 1000 [ 362.541007][ T9755] 9pnet: p9_errstr2errno: server reported unknown error @b骩 [ 363.617834][ T5869] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 363.793376][ T5869] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 363.825236][ T5869] usb 6-1: config 0 has no interface number 0 [ 363.912994][ T9772] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 363.965375][ T5869] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 364.023697][ T5869] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 364.026640][ T9772] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 364.064244][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 364.080923][ T5869] usb 6-1: Product: syz [ 364.090292][ T5869] usb 6-1: SerialNumber: syz [ 364.113821][ T5869] usb 6-1: config 0 descriptor?? [ 365.771938][ T29] audit: type=1326 audit(1736118992.122:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 365.829052][ T29] audit: type=1326 audit(1736118992.122:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 365.851780][ T29] audit: type=1326 audit(1736118992.187:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa494d7cce7 code=0x7ffc0000 [ 365.919629][ T29] audit: type=1326 audit(1736118992.187:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa494d21f29 code=0x7ffc0000 [ 366.370159][ T29] audit: type=1326 audit(1736118992.196:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 366.521976][ T29] audit: type=1326 audit(1736118992.196:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa494d7cce7 code=0x7ffc0000 [ 366.693614][ T29] audit: type=1326 audit(1736118992.196:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa494d21f29 code=0x7ffc0000 [ 366.853733][ T29] audit: type=1326 audit(1736118992.196:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 367.024333][ T29] audit: type=1326 audit(1736118992.196:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa494d7cce7 code=0x7ffc0000 [ 367.178818][ T29] audit: type=1326 audit(1736118992.196:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9797 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa494d21f29 code=0x7ffc0000 [ 367.371687][ T5869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.392946][ T5869] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 367.403814][ T5869] usb 6-1: USB disconnect, device number 35 [ 369.835874][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 369.847013][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 371.288837][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1019'. [ 371.903127][ T5899] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 372.089897][ T5899] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 372.426824][ T5899] usb 3-1: config 0 has no interface number 0 [ 372.450073][ T5899] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 372.479660][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 372.490640][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 372.499252][ T5899] usb 3-1: Product: syz [ 372.517447][ T5899] usb 3-1: SerialNumber: syz [ 372.535105][ T5899] usb 3-1: config 0 descriptor?? [ 372.794486][ T5908] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 372.946113][ T5908] usb 1-1: device descriptor read/64, error -71 [ 373.442449][ T5908] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 373.613995][ T5908] usb 1-1: device descriptor read/64, error -71 [ 373.816085][ T5908] usb usb1-port1: attempt power cycle [ 374.651878][ T5899] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.674653][ T5899] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 374.695906][ T5899] usb 3-1: USB disconnect, device number 27 [ 374.726186][ T5908] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 374.830268][ T5908] usb 1-1: device descriptor read/8, error -71 [ 374.855475][ T9876] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.863592][ T9876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 374.890465][ T9876] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 374.898986][ T9876] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 375.266590][ T5908] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 375.381802][ T9878] IPv6: sit1: Disabled Multicast RS [ 375.441338][ T5908] usb 1-1: device descriptor read/8, error -71 [ 375.570221][ T5908] usb usb1-port1: unable to enumerate USB device [ 375.888289][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 375.917275][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1034'. [ 375.959345][ T9889] batman_adv: batadv0: Adding interface: dummy0 [ 375.979182][ T9889] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.075724][ T9889] batman_adv: batadv0: Interface activated: dummy0 [ 376.116567][ T9890] batadv0: mtu less than device minimum [ 376.170908][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.184028][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.196472][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.209007][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.221468][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.233879][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.246382][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.259142][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.271662][ T9890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.486461][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1039'. [ 376.600912][ T9892] syz.0.1037 (9892): drop_caches: 2 [ 377.515548][ T9909] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 377.523922][ T9909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 377.536180][ T9909] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 377.544470][ T9909] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 379.931570][ T973] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 381.817959][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.827423][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.832285][ T9932] netlink: 'syz.3.1049': attribute type 10 has an invalid length. [ 381.843562][ T973] usb 1-1: device descriptor read/all, error -71 [ 381.865885][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.873234][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.904712][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.029865][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.037048][ T9932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.044551][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.051733][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.077869][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.090395][ T9932] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 382.102982][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.170437][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.192041][ T9937] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1049'. [ 383.729405][ T9950] netlink: 'syz.5.1054': attribute type 1 has an invalid length. [ 383.761569][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.764661][ T9957] binder: BINDER_SET_CONTEXT_MGR already set [ 383.770509][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.844442][ T9957] binder: 9951:9957 ioctl 4018620d 200001c0 returned -16 [ 386.007417][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.050434][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.424560][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.431233][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.475806][ T5817] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 388.735285][ T5817] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 388.751455][ T5899] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 388.751909][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.778327][ T5817] usb 6-1: Product: syz [ 388.783911][ T5817] usb 6-1: Manufacturer: syz [ 388.789763][ T5817] usb 6-1: SerialNumber: syz [ 389.136646][ T9990] nbd0: detected capacity change from 0 to 12 [ 389.141902][ T5817] usb 6-1: config 0 descriptor?? [ 389.144186][ T5899] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 389.190530][ T5817] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 036 [ 389.783142][ T5899] usb 3-1: config 0 has no interface number 0 [ 389.799055][ T9996] block nbd0: NBD_DISCONNECT [ 389.868891][ T9996] block nbd0: Send disconnect failed -89 [ 389.876802][ T5899] usb 3-1: string descriptor 0 read error: -71 [ 389.900060][ T5899] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 389.920711][ T5817] (null): failure setting delay to 10us [ 389.926730][ T5817] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 389.939471][ T5817] usb 6-1: USB disconnect, device number 36 [ 389.992017][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 390.204581][ T5899] usb 3-1: config 0 descriptor?? [ 390.216233][ T5899] usb 3-1: can't set config #0, error -71 [ 390.230851][ T5899] usb 3-1: USB disconnect, device number 28 [ 390.481445][ T9988] block nbd0: Disconnected due to user request. [ 390.492104][ T9988] block nbd0: shutting down sockets [ 390.710720][T10004] xt_bpf: check failed: parse error [ 391.694407][T10010] tmpfs: Bad value for 'size' [ 392.665685][ T5871] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 392.963433][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 392.984637][ T5871] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=9b.5e [ 393.002342][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.073504][ T5871] usb 3-1: Product: syz [ 393.096718][ T5871] usb 3-1: Manufacturer: syz [ 393.118055][ T5871] usb 3-1: SerialNumber: syz [ 393.172791][ T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 393.615569][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 393.798308][ T5871] usb 3-1: config 0 descriptor?? [ 393.815849][ T25] usb 6-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 393.830100][ T5871] kalmia 3-1:0.0: probe with driver kalmia failed with error -22 [ 393.847521][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.917518][ T25] usb 6-1: Product: syz [ 393.921743][ T25] usb 6-1: Manufacturer: syz [ 393.954456][ T25] usb 6-1: SerialNumber: syz [ 394.183311][ T25] usb 6-1: config 0 descriptor?? [ 394.485787][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 395.818824][ T25] gspca_sonixj: reg_w1 err -110 [ 395.839455][ T25] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 396.299886][ T973] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 396.474864][ T973] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 396.565756][ T973] usb 4-1: config 0 has no interface number 0 [ 396.666347][ T973] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 396.970834][ T5817] usb 3-1: USB disconnect, device number 29 [ 397.130403][ T973] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 397.138671][ T973] usb 4-1: Product: syz [ 397.143529][ T973] usb 4-1: SerialNumber: syz [ 397.766825][ T973] usb 4-1: config 0 descriptor?? [ 397.772729][ T25] usb 6-1: USB disconnect, device number 37 [ 397.885300][ T973] usb 4-1: can't set config #0, error -71 [ 397.892972][ T973] usb 4-1: USB disconnect, device number 54 [ 398.052362][ T5871] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 398.186434][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 398.223288][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 398.370923][ T5871] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.389043][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.402643][ T5871] usb 3-1: Product: syz [ 398.484932][T10063] ubi0: attaching mtd0 [ 398.489188][T10063] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 398.574200][T10063] x_tables: ip_tables: osf match: only valid for protocol 6 [ 398.971934][ T5871] usb 3-1: Manufacturer: syz [ 398.976597][ T5871] usb 3-1: SerialNumber: syz [ 398.986432][ T5871] usb 3-1: config 0 descriptor?? [ 399.036589][ T5817] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 399.215839][ T5871] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 399.230828][ T5871] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 399.317096][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 399.340085][ T5817] usb 4-1: config 2 has an invalid interface number: 15 but max is 0 [ 399.347101][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.356355][ T5817] usb 4-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 399.358188][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.366786][ T5817] usb 4-1: config 2 has no interface number 0 [ 399.384145][ T5817] usb 4-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 399.577452][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.592816][ T5817] usb 4-1: Product: syz [ 399.660660][ T5817] usb 4-1: Manufacturer: syz [ 399.665420][ T5817] usb 4-1: SerialNumber: syz [ 400.079270][ T5871] usb 3-1: USB disconnect, device number 30 [ 400.616345][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 401.932378][ T8] usb 4-1: USB disconnect, device number 55 [ 403.060672][T10092] fuse: Bad value for 'user_id' [ 403.065825][T10092] fuse: Bad value for 'user_id' [ 403.082527][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.985632][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.201631][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 404.201689][ T29] audit: type=1326 audit(1736119028.050:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.467989][ T29] audit: type=1326 audit(1736119028.060:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.679861][ T29] audit: type=1326 audit(1736119028.069:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.720367][T10106] fuse: Bad value for 'fd' [ 404.736497][ T29] audit: type=1326 audit(1736119028.069:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.801606][ T29] audit: type=1326 audit(1736119028.069:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.829183][ T29] audit: type=1326 audit(1736119028.106:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.920513][ T29] audit: type=1326 audit(1736119028.106:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 404.968704][ T29] audit: type=1326 audit(1736119028.116:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 405.265554][ T29] audit: type=1326 audit(1736119028.125:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 405.453122][ T29] audit: type=1326 audit(1736119028.125:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10090 comm="syz.3.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa494d85d29 code=0x7ffc0000 [ 405.738845][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 405.952911][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 406.372586][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 406.381847][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.389845][ T8] usb 3-1: Product: syz [ 406.426707][ T8] usb 3-1: Manufacturer: syz [ 406.434107][ T8] usb 3-1: SerialNumber: syz [ 406.445724][ T8] usb 3-1: config 0 descriptor?? [ 406.456955][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 407.126201][ T25] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 407.777033][ T8] gspca_sonixj: reg_w1 err -110 [ 407.782071][ T8] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 408.675172][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 408.685541][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 408.696085][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.832349][ T973] usb 3-1: USB disconnect, device number 31 [ 409.841189][T10123] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.860280][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 409.886654][ T5871] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 410.031827][ T25] usb 1-1: USB disconnect, device number 45 [ 410.047944][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 410.074787][ T5871] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 410.096916][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 410.110628][ T5871] usb 6-1: Product: syz [ 410.115142][ T5871] usb 6-1: Manufacturer: syz [ 410.119832][ T5871] usb 6-1: SerialNumber: syz [ 410.154881][ T5871] usb 6-1: config 0 descriptor?? [ 410.758130][T10145] netlink: 'syz.0.1105': attribute type 4 has an invalid length. [ 410.761202][T10130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.819791][T10152] can0: slcan on ttyS3. [ 410.837521][T10130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.900866][ T5919] usb 6-1: USB disconnect, device number 38 [ 411.036596][T10152] can0 (unregistered): slcan off ttyS3. [ 411.139977][T10152] Falling back ldisc for ttyS3. [ 411.793362][T10165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.808282][T10165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.357711][T10178] block nbd4: shutting down sockets [ 413.867759][T10190] delete_channel: no stack [ 414.611428][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.624379][T10200] kAFS: unparsable volume name [ 414.665119][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.817036][ T973] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 414.835986][T10205] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1116'. [ 414.880010][ T5871] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 415.039738][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 415.062821][T10209] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 415.852862][ T973] usb 6-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=e8.ef [ 415.873064][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.883270][ T973] usb 6-1: config 0 descriptor?? [ 415.890189][ T973] ums-datafab 6-1:0.0: USB Mass Storage device detected [ 415.921107][T10209] team0: Port device wlan1 added [ 415.975227][ T973] ums-sddr55 6-1:0.0: USB Mass Storage device detected [ 416.002024][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 416.019680][ T5871] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 416.035058][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.063886][ T5871] usb 1-1: Product: syz [ 416.079405][ T5871] usb 1-1: Manufacturer: syz [ 416.084883][ T5871] usb 1-1: SerialNumber: syz [ 416.107640][ T973] usb 6-1: USB disconnect, device number 39 [ 416.119647][ T5871] usb 1-1: config 0 descriptor?? [ 416.638416][ T5871] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 416.647111][ T5871] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 416.714488][T10232] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 416.716614][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 416.716630][ T29] audit: type=1804 audit(1736119039.780:359): pid=10230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1126" name="/newroot/234/file0/file1" dev="ramfs" ino=29246 res=1 errno=0 [ 416.772768][ T5871] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 416.784739][ T5871] usb 1-1: USB disconnect, device number 46 [ 417.169328][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 417.180419][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 417.349005][ T5919] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 417.402309][ T8] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 417.627104][ T5919] usb 6-1: Using ep0 maxpacket: 16 [ 417.651740][ T5919] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 417.661870][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 417.673399][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 417.694909][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 417.703887][ T8] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 417.713358][ T5919] usb 6-1: Product: syz [ 417.717612][ T5919] usb 6-1: Manufacturer: syz [ 417.722328][ T5919] usb 6-1: SerialNumber: syz [ 417.727708][ T8] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 417.737825][ T8] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 417.748441][ T8] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 417.762134][ T5919] usb 6-1: config 0 descriptor?? [ 417.772824][ T8] usb 3-1: config 129 has no interface number 0 [ 417.786151][ T8] usb 3-1: config 129 has no interface number 1 [ 417.839982][ T8] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 417.904629][ T5871] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 417.910142][ T8] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 417.957267][ T8] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 417.977317][ T8] usb 3-1: config 129 interface 135 has no altsetting 0 [ 417.990598][ T8] usb 3-1: config 129 interface 5 has no altsetting 0 [ 418.119240][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 418.214307][ T8] usb 3-1: string descriptor 0 read error: -22 [ 418.226372][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 418.236104][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.236889][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.339407][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.346094][ T5871] usb 1-1: config 0 has no interface number 0 [ 418.347869][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 418.396501][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.413761][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.424223][ T5871] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 418.433571][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.462985][ T5871] usb 1-1: config 0 descriptor?? [ 418.477062][ T973] usb 6-1: USB disconnect, device number 40 [ 418.563188][ T8] usb 3-1: USB disconnect, device number 32 [ 419.180011][T10261] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 419.187339][T10261] ALSA: mixer_oss: invalid OSS volume '' [ 419.210746][T10261] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 419.221621][ T5871] usbhid 1-1:0.1: can't add hid device: -71 [ 419.227752][ T5871] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 419.244096][ T5871] usb 1-1: USB disconnect, device number 47 [ 419.246452][T10261] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 419.300068][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 419.315438][T10261] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 419.339007][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 419.365985][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 419.393955][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 419.450725][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 419.486094][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 419.505405][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1137'. [ 420.101571][ T973] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 420.466768][ T973] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 420.912292][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.116380][ T973] usb 3-1: config 0 descriptor?? [ 422.689342][T10283] __nla_validate_parse: 58 callbacks suppressed [ 422.689358][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 422.704734][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'. [ 422.798558][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.807986][ T973] cp210x 3-1:0.0: cp210x converter detected [ 422.833388][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.276838][ T973] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 423.294135][ T973] cp210x 3-1:0.0: querying part number failed [ 423.321587][ T973] usb 3-1: cp210x converter now attached to ttyUSB0 [ 423.381084][T10298] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1147'. [ 423.386042][ T973] usb 3-1: USB disconnect, device number 33 [ 423.399837][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 423.408817][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1147'. [ 423.460398][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 423.497576][ T973] cp210x 3-1:0.0: device disconnected [ 423.655210][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 424.553971][T10314] veth1_to_team: entered promiscuous mode [ 425.527628][ T29] audit: type=1326 audit(1736119047.759:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10308 comm="syz.2.1150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2628f85d29 code=0x0 [ 425.615391][T10320] fuse: Bad value for 'fd' [ 426.923786][T10308] veth1_to_team: left promiscuous mode [ 427.706928][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.716045][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.247487][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 430.447394][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.580163][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 430.771582][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.195750][ T8] usb 1-1: config 0 descriptor?? [ 431.222416][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 431.288395][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.297659][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.643859][T10363] lo speed is unknown, defaulting to 1000 [ 431.707934][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 431.718174][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 431.730783][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 431.743463][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 431.755421][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 431.984539][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 432.026707][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 432.059119][T10370] overlayfs: failed to resolve './file1': -2 [ 432.075760][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 432.138795][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 432.189836][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 432.243891][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 432.263858][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 432.291488][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 432.314544][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 432.335466][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 432.377074][T10374] lo speed is unknown, defaulting to 1000 [ 432.403187][ T8] pwc: Registered as video103. [ 432.426568][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input49 [ 432.478320][ T8] usb 1-1: USB disconnect, device number 48 [ 433.311532][ T973] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 433.493666][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 433.548987][ T973] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 433.619823][ T973] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 433.707648][ T973] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 433.807479][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.926017][ T973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.985232][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 434.065747][ T973] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 434.304046][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.317910][ T973] usb 3-1: config 0 descriptor?? [ 434.499591][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 434.821491][ T973] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 434.842388][T10409] xt_hashlimit: size too large, truncated to 1048576 [ 434.881837][ T973] usb 3-1: USB disconnect, device number 34 [ 434.947421][ T973] usblp0: removed [ 436.677412][ T5919] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 436.918876][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.052033][ T30] INFO: task kworker/0:5:5872 blocked for more than 143 seconds. [ 437.060874][ T30] Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 437.083016][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.104861][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.140055][ T5919] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 437.155654][ T30] task:kworker/0:5 state:D stack:20016 pid:5872 tgid:5872 ppid:2 flags:0x00004000 [ 437.195091][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.209679][ T30] Workqueue: usb_hub_wq hub_event [ 437.220887][ T30] Call Trace: [ 437.236971][ T30] [ 437.243881][ T30] __schedule+0x17fb/0x4be0 [ 437.249312][ T30] ? __pfx___schedule+0x10/0x10 [ 437.254529][ T30] ? __pfx_lock_release+0x10/0x10 [ 437.260041][ T30] ? kthread_data+0x52/0xd0 [ 437.264855][ T30] ? wq_worker_sleeping+0x66/0x240 [ 437.270541][ T30] ? schedule+0x90/0x320 [ 437.275904][ T30] schedule+0x14b/0x320 [ 437.280627][ T30] schedule_timeout+0xb0/0x290 [ 437.286009][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 437.292083][ T30] ? wait_for_completion+0x2fe/0x620 [ 437.297864][ T30] wait_for_completion+0x355/0x620 [ 437.303248][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 437.309598][ T30] pn533_usb_send_frame+0x30b/0x5c0 [ 437.315327][ T30] ? __pfx_pn533_usb_send_frame+0x10/0x10 [ 437.321630][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 437.326879][ T30] ? skb_put+0x114/0x1f0 [ 437.330018][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 437.331460][ T30] ? pn533_std_tx_frame_finish+0x2d5/0x380 [ 437.346464][ T30] __pn533_send_async+0x491/0x680 [ 437.352239][ T30] pn533_finalize_setup+0x22e/0x830 [ 437.357932][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 437.359599][T10427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1184'. [ 437.363601][ T30] ? __pfx_pn533_finalize_setup+0x10/0x10 [ 437.363643][ T30] ? __pfx_alloc_workqueue+0x10/0x10 [ 437.363673][ T30] ? __raw_spin_lock_init+0x45/0x100 [ 437.363733][ T30] ? pn53x_common_init+0x975/0xab0 [ 437.395558][ T30] pn533_usb_probe+0xfcd/0x1380 [ 437.401017][ T30] ? __pfx_pn533_usb_probe+0x10/0x10 [ 437.406886][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 437.413242][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.417800][ T973] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 437.419856][ T30] ? pm_runtime_enable+0xa7/0x2d0 [ 437.433048][ T30] ? __pm_runtime_set_status+0x6c1/0xa10 [ 437.439339][ T30] usb_probe_interface+0x641/0xbb0 [ 437.445108][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 437.451174][ T30] really_probe+0x2b8/0xad0 [ 437.456165][ T30] __driver_probe_device+0x1a2/0x390 [ 437.461926][ T30] driver_probe_device+0x50/0x430 [ 437.467419][ T30] __device_attach_driver+0x2d6/0x530 [ 437.473439][ T30] bus_for_each_drv+0x24e/0x2e0 [ 437.478749][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 437.485351][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 437.491520][ T30] __device_attach+0x333/0x520 [ 437.497456][ T30] ? __pfx_lock_release+0x10/0x10 [ 437.503208][ T30] ? __pfx___device_attach+0x10/0x10 [ 437.509073][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 437.515140][ T30] bus_probe_device+0x189/0x260 [ 437.520202][ T30] device_add+0x856/0xbf0 [ 437.524958][ T30] usb_set_configuration+0x1976/0x1fb0 [ 437.531044][ T30] usb_generic_driver_probe+0x88/0x140 [ 437.536985][ T30] usb_probe_device+0x1b8/0x380 [ 437.542117][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 437.547902][ T30] really_probe+0x2b8/0xad0 [ 437.553069][ T30] __driver_probe_device+0x1a2/0x390 [ 437.558920][ T30] driver_probe_device+0x50/0x430 [ 437.564434][ T30] __device_attach_driver+0x2d6/0x530 [ 437.570721][ T30] bus_for_each_drv+0x24e/0x2e0 [ 437.576197][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 437.582596][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 437.588763][ T30] __device_attach+0x333/0x520 [ 437.593950][ T30] ? __pfx___device_attach+0x10/0x10 [ 437.596718][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 437.599557][ T30] bus_probe_device+0x189/0x260 [ 437.610348][ T30] device_add+0x856/0xbf0 [ 437.615330][ T30] usb_new_device+0x104a/0x19a0 [ 437.620555][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 437.621742][ T973] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.625893][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.639171][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 437.644948][ T30] hub_event+0x2d6d/0x5150 [ 437.650102][ T30] ? __pfx_hub_event+0x10/0x10 [ 437.655495][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 437.660806][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 437.667262][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 437.671294][ T973] usb 6-1: config 7 has an invalid interface number: 180 but max is 1 [ 437.673875][ T30] ? process_scheduled_works+0x976/0x1840 [ 437.688302][ T30] process_scheduled_works+0xa66/0x1840 [ 437.695258][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.701857][ T30] ? assign_work+0x364/0x3d0 [ 437.707062][ T30] worker_thread+0x870/0xd30 [ 437.712226][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 437.713163][ T973] usb 6-1: config 7 has an invalid interface number: 57 but max is 1 [ 437.718338][ T30] ? __kthread_parkme+0x169/0x1d0 [ 437.718370][ T30] ? __pfx_worker_thread+0x10/0x10 [ 437.739204][ T30] kthread+0x2f0/0x390 [ 437.743803][ T30] ? __pfx_worker_thread+0x10/0x10 [ 437.757035][ T30] ? __pfx_kthread+0x10/0x10 [ 437.762183][ T30] ret_from_fork+0x4b/0x80 [ 437.766981][ T30] ? __pfx_kthread+0x10/0x10 [ 437.772065][ T30] ret_from_fork_asm+0x1a/0x30 [ 437.777127][ T30] [ 437.781086][ T30] [ 437.781086][ T30] Showing all locks held in the system: [ 437.789107][ T30] 3 locks held by kworker/u8:1/12: [ 437.794725][ T30] 1 lock held by khungtaskd/30: [ 437.799999][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 437.811250][ T30] 4 locks held by kworker/u8:3/52: [ 437.816481][ T973] usb 6-1: config 7 has no interface number 0 [ 437.816600][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 437.853069][ T5919] usb 3-1: config 0 descriptor?? [ 437.861783][ T30] #1: ffffc90000bc7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 437.875873][ T30] #2: ffff88805fa90768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xd9/0x480 [ 437.882600][ T973] usb 6-1: config 7 has no interface number 1 [ 437.887213][ T30] #3: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 437.887290][ T30] 2 locks held by kworker/u8:4/64: [ 437.905085][ T973] usb 6-1: config 7 interface 57 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 437.909699][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 437.931052][ T30] #1: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 437.936987][ T973] usb 6-1: config 7 interface 57 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 437.940753][ T30] 3 locks held by kworker/1:2/973: [ 437.940801][ T30] 2 locks held by getty/5576: [ 437.940814][ T30] #0: ffff88814d4230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.973110][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 437.985237][ T30] 2 locks held by kworker/1:5/5871: [ 437.990957][ T30] #0: ffff8880b863e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 438.002490][ T30] #1: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 438.012644][ T30] 6 locks held by kworker/0:5/5872: [ 438.018546][ T30] #0: ffff88801e6bbd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 438.031097][ T30] #1: ffffc9000432fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 438.045127][ T30] #2: ffff888028893190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 438.054810][ T30] #3: ffff888140ad7190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 438.065245][ T30] #4: ffff888029a78160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 438.075524][ T30] #5: ffff888033621438 (&priv->cmd_lock){+.+.}-{4:4}, at: __pn533_send_async+0x270/0x680 [ 438.086319][ T30] 5 locks held by kworker/0:8/5919: [ 438.091975][ T30] 1 lock held by syz.3.1177/10399: [ 438.097757][ T30] [ 438.100323][ T30] ============================================= [ 438.100323][ T30] [ 438.108837][ T30] NMI backtrace for cpu 0 [ 438.113180][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 438.123673][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.133722][ T30] Call Trace: [ 438.136997][ T30] [ 438.139920][ T30] dump_stack_lvl+0x241/0x360 [ 438.144601][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.149799][ T30] ? __pfx__printk+0x10/0x10 [ 438.154402][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 438.159344][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 438.164800][ T30] ? _printk+0xd5/0x120 [ 438.168951][ T30] ? __pfx__printk+0x10/0x10 [ 438.173535][ T30] ? __wake_up_klogd+0xcc/0x110 [ 438.178388][ T30] ? __pfx__printk+0x10/0x10 [ 438.182975][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 438.187996][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 438.193999][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 438.200007][ T30] watchdog+0xff6/0x1040 [ 438.204257][ T30] ? watchdog+0x1ea/0x1040 [ 438.208675][ T30] ? __pfx_watchdog+0x10/0x10 [ 438.213346][ T30] kthread+0x2f0/0x390 [ 438.217409][ T30] ? __pfx_watchdog+0x10/0x10 [ 438.222082][ T30] ? __pfx_kthread+0x10/0x10 [ 438.226668][ T30] ret_from_fork+0x4b/0x80 [ 438.231082][ T30] ? __pfx_kthread+0x10/0x10 [ 438.235669][ T30] ret_from_fork_asm+0x1a/0x30 [ 438.240441][ T30] [ 438.243574][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.251184][ T30] Sending NMI from CPU 0 to CPUs 1: [ 438.254480][ T973] usb 6-1: config 7 interface 57 altsetting 8 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 438.256489][ C1] NMI backtrace for cpu 1 [ 438.256506][ C1] CPU: 1 UID: 0 PID: 973 Comm: kworker/1:2 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 438.256525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.256537][ C1] Workqueue: usb_hub_wq hub_event [ 438.256558][ C1] RIP: 0010:io_serial_in+0x76/0xb0 [ 438.256577][ C1] Code: 30 18 57 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 01 f5 ba fc 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 cc cc cc cc 89 e9 80 e1 07 38 c1 7c [ 438.256591][ C1] RSP: 0018:ffffc900039a6b58 EFLAGS: 00000006 [ 438.256606][ C1] RAX: 1ffffffff34d7c05 RBX: ffffffff9a6be580 RCX: 0000000000000000 [ 438.256618][ C1] RDX: 00000000000003f9 RSI: 00000000000fffff RDI: 0000000000100000 [ 438.256629][ C1] RBP: 0000000000000000 R08: ffffffff85485b96 R09: fffff52000734d4c [ 438.256640][ C1] R10: dffffc0000000000 R11: ffffffff85485b50 R12: dffffc0000000000 [ 438.256652][ C1] R13: 1ffff92000734d88 R14: 00000000000003f9 R15: dffffc0000000000 [ 438.256663][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 438.256677][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.256689][ C1] CR2: 00007f2629e44d58 CR3: 000000005c0ce000 CR4: 00000000003526f0 [ 438.256703][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.256713][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.256723][ C1] Call Trace: [ 438.256729][ C1] [ 438.256737][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 438.256757][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 438.256776][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 438.256792][ C1] ? nmi_handle+0x2a/0x5a0 [ 438.256816][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 438.256836][ C1] ? nmi_handle+0x14f/0x5a0 [ 438.256851][ C1] ? nmi_handle+0x2a/0x5a0 [ 438.256868][ C1] ? io_serial_in+0x76/0xb0 [ 438.256882][ C1] ? default_do_nmi+0x63/0x160 [ 438.256900][ C1] ? exc_nmi+0x123/0x1f0 [ 438.256915][ C1] ? end_repeat_nmi+0xf/0x53 [ 438.256934][ C1] ? __pfx_io_serial_in+0x10/0x10 [ 438.256948][ C1] ? io_serial_in+0x46/0xb0 [ 438.256965][ C1] ? io_serial_in+0x76/0xb0 [ 438.256979][ C1] ? io_serial_in+0x76/0xb0 [ 438.256995][ C1] ? io_serial_in+0x76/0xb0 [ 438.257010][ C1] [ 438.257016][ C1] [ 438.257022][ C1] serial8250_console_write+0x4de/0x1ed0 [ 438.257053][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 438.257070][ C1] ? __pfx_lock_release+0x10/0x10 [ 438.257086][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 438.257108][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 438.257128][ C1] ? console_flush_all+0x1a3/0xeb0 [ 438.257146][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 438.257165][ C1] console_flush_all+0x869/0xeb0 [ 438.257183][ C1] ? mark_lock+0x9a/0x360 [ 438.257202][ C1] ? console_flush_all+0x1a3/0xeb0 [ 438.257227][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 438.257252][ C1] ? this_cpu_in_panic+0x4f/0x80 [ 438.257268][ C1] ? is_printk_legacy_deferred+0x43/0x50 [ 438.257284][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 438.257306][ C1] console_unlock+0x14f/0x3b0 [ 438.257324][ C1] ? __pfx_console_unlock+0x10/0x10 [ 438.257342][ C1] ? vprintk_emit+0x4e0/0xa10 [ 438.257363][ C1] ? vprintk_emit+0x6f5/0xa10 [ 438.257383][ C1] ? vprintk_emit+0x530/0xa10 [ 438.257400][ C1] vprintk_emit+0x730/0xa10 [ 438.257419][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 438.257438][ C1] ? __pfx_snprintf+0x10/0x10 [ 438.257456][ C1] ? read_word_at_a_time+0xe/0x20 [ 438.257469][ C1] ? sized_strscpy+0x9a/0x2b0 [ 438.257486][ C1] dev_vprintk_emit+0x2ae/0x330 [ 438.257504][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 438.257525][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 438.257547][ C1] dev_printk_emit+0xdd/0x120 [ 438.257567][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 438.257586][ C1] ? __dev_printk+0x137/0x1a0 [ 438.257604][ C1] _dev_notice+0x122/0x170 [ 438.257623][ C1] ? __pfx__dev_notice+0x10/0x10 [ 438.257641][ C1] ? rcu_is_watching+0x15/0xb0 [ 438.257661][ C1] ? trace_kmalloc+0x1f/0xd0 [ 438.257675][ C1] ? usb_get_configuration+0x1b95/0x4dc0 [ 438.257697][ C1] usb_get_configuration+0x2474/0x4dc0 [ 438.257735][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 438.257752][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.257769][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.257784][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 438.257807][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.257825][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 438.257844][ C1] usb_new_device+0x14a/0x19a0 [ 438.257861][ C1] ? __mutex_unlock_slowpath+0x21e/0x790 [ 438.257883][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.257898][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 438.257915][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 438.257936][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 438.257953][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 438.257974][ C1] hub_event+0x2d6d/0x5150 [ 438.258013][ C1] ? __pfx_hub_event+0x10/0x10 [ 438.258030][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 438.258050][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 438.258068][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.258088][ C1] ? process_scheduled_works+0x976/0x1840 [ 438.258111][ C1] process_scheduled_works+0xa66/0x1840 [ 438.258144][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 438.258167][ C1] ? assign_work+0x364/0x3d0 [ 438.258189][ C1] worker_thread+0x870/0xd30 [ 438.258206][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 438.258226][ C1] ? __kthread_parkme+0x169/0x1d0 [ 438.258243][ C1] ? __pfx_worker_thread+0x10/0x10 [ 438.258259][ C1] kthread+0x2f0/0x390 [ 438.258275][ C1] ? __pfx_worker_thread+0x10/0x10 [ 438.258289][ C1] ? __pfx_kthread+0x10/0x10 [ 438.258305][ C1] ret_from_fork+0x4b/0x80 [ 438.258319][ C1] ? __pfx_kthread+0x10/0x10 [ 438.258334][ C1] ret_from_fork_asm+0x1a/0x30 [ 438.258359][ C1] [ 438.258500][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 438.258513][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 438.258538][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.258549][ T30] Call Trace: [ 438.258556][ T30] [ 438.258564][ T30] dump_stack_lvl+0x241/0x360 [ 438.258589][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.258612][ T30] ? __pfx__printk+0x10/0x10 [ 438.258638][ T30] ? vscnprintf+0x5d/0x90 [ 438.258660][ T30] panic+0x349/0x880 [ 438.258681][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 438.258703][ T30] ? __pfx_panic+0x10/0x10 [ 438.258721][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 438.258745][ T30] ? __irq_work_queue_local+0x137/0x410 [ 438.258765][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 438.258785][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 438.258805][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 438.258828][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 438.258850][ T30] watchdog+0x1035/0x1040 [ 438.258871][ T30] ? watchdog+0x1ea/0x1040 [ 438.258895][ T30] ? __pfx_watchdog+0x10/0x10 [ 438.258914][ T30] kthread+0x2f0/0x390 [ 438.258932][ T30] ? __pfx_watchdog+0x10/0x10 [ 438.258950][ T30] ? __pfx_kthread+0x10/0x10 [ 438.258969][ T30] ret_from_fork+0x4b/0x80 [ 438.258986][ T30] ? __pfx_kthread+0x10/0x10 [ 438.259005][ T30] ret_from_fork_asm+0x1a/0x30 [ 438.259040][ T30] [ 438.269993][ T30] Kernel Offset: disabled