last executing test programs: 9m39.953684123s ago: executing program 2 (id=1160): mq_open(&(0x7f0000000480)='!se\xecinu|wk1\x1f\x06\x00\x00\x009\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm\a\x00\x00\x00QZ#\xd2{\x84\xbf\x06\x00\x00\x01w\"\xf8\x94n\xacl\x92\xe3\xf6\x99\xb6C\xb0-&(ep\xe9\xd1\x14\xf1\nx\n\xcai\x18d\x9d\x04\x1b3\x06\xf4\xa72V\xd1To\xc1\xdf\x7f\x1d\xc5\xea0<\xb0\xcf1\x8a\xc7\x12G\x02\xdb{QAf\v\rfqn2o\"\xec\xfe\xca\xe5jh\xf8\x06#k\x1a\xe0\x7f\xda\xda\vN\x96s$\xf2\x9d\xae\x83\x10t\xb1\"\xcf&`\x87\xef\"6', 0x1, 0x70, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x6, "2063569a"}, 0x6}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x29}, 0x94) 9m34.727857112s ago: executing program 2 (id=1170): socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m34.3155137s ago: executing program 2 (id=1171): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000100)) 9m33.067828884s ago: executing program 2 (id=1178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) 9m30.797958724s ago: executing program 2 (id=1184): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m30.055107756s ago: executing program 2 (id=1186): syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905840274"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 9m13.725063909s ago: executing program 32 (id=1186): syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905840274"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 7m29.943882525s ago: executing program 0 (id=1462): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 7m29.695908616s ago: executing program 0 (id=1464): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a300000000009"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) 7m29.386640609s ago: executing program 0 (id=1466): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x5, [0x6, 0x267, 0x7, 0x3, 0x9]}, 0x12) 7m29.116129521s ago: executing program 0 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 7m29.062400264s ago: executing program 0 (id=1469): r0 = socket(0x1d, 0x2, 0x6) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a000000020000", 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x5, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa) r6 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001880), 0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001980)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x0, 0x14, @multicast}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x0, 0x1d, 0xb}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000014}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) 7m28.508258718s ago: executing program 0 (id=1473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 7m27.643651245s ago: executing program 33 (id=1473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 7m11.942775191s ago: executing program 5 (id=1474): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a300000000009"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) 6m56.367559142s ago: executing program 34 (id=1474): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a300000000009"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) 27.206195553s ago: executing program 6 (id=2651): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.705077822s ago: executing program 6 (id=2655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="2400238005000f00090000000800070000"], 0x4c}}, 0x80) 24.195873014s ago: executing program 6 (id=2656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_mempolicy(0x3, &(0x7f0000000180)=0x4, 0x9) 23.944783435s ago: executing program 6 (id=2657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125499, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3047c4a, 0x0) 23.661886657s ago: executing program 6 (id=2658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @msi={0xc, 0xc0000000, 0x6, 0x6}}]}) 23.059301773s ago: executing program 6 (id=2661): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x400c044) 22.002456629s ago: executing program 35 (id=2661): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x400c044) 17.775642414s ago: executing program 1 (id=2671): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 17.490584386s ago: executing program 1 (id=2672): socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(0x0, &(0x7f0000000140)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = dup(r5) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 11.863779392s ago: executing program 1 (id=2676): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000180), 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x800000) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) setpriority(0x1, r2, 0x8) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x200000a, 0x1000, 0x0, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0x7, 0x15b, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x400, 0x2000040, 0x10000002, 0x7, 0x0, 0x2, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x78a, 0xbfff8007, 0x200000e, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x1, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0x9, 0x7, 0x8, 0x1, 0x8, 0xfffffffd, 0xffff, 0x6, 0x8, 0x0, 0x4, 0xef, 0xff, 0x4, 0xffffffff, 0xf8a, 0x58a0, 0x1, 0x9, 0x895, 0x6, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x12, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0xe, 0x5, 0x8, 0x2, 0xee, 0x4, 0x1ff, 0x7, 0x2, 0x7, 0x6, 0xff]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 9.238015567s ago: executing program 1 (id=2681): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000800)={0x3000000000000000, 0x40e, 0x6, 0x3}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x578410eb) pipe(&(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000080)) 6.309904985s ago: executing program 3 (id=2687): r0 = socket(0x1d, 0x2, 0x6) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x5}, 0x8, 0xfffffffffffffffa) r6 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001880), 0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001980)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x0, 0x14, @multicast}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x0, 0x1d, 0xb}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000014}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) 4.555876831s ago: executing program 3 (id=2688): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4.255517375s ago: executing program 1 (id=2689): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r1, &(0x7f0000005140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="b20f5bb28c75b4ec3a6df7ed10224550e72bd8e71ca230803753f99a12d628c40532c0ede975c930647407708eb781ce3c2f162fbe8f97cc52f4b125283b2312aa555c8bd0001a", 0x47}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="6c7532da0ab7782e239d6c515bbe7a65829fe42293e2b0e95bf1e409e1cd076a5a9bc608a9129a6c55d66ebb3d0e791210825e0487077d055c8250b5b7d68893495ea03d36a83a8660632a67f351dd90e1b2cecd677caf073d076ba9b38cc384a4935f9aa1df797dd84651283a2f0638e2dc935354508d8ac157a6351521ed2be3d05a09f9f76a071200f373d32af958a8761b67530510b4da85c3647ce20ae4fbd651d721714a14853b038ab9785f0c2ffbe041c16e3ae1c3d200beaa92d9727bf4d1b53ee183dd8e3b6067", 0xcc}, {&(0x7f0000000380)="5f1474249647b77de3fbb34295154b79cf9cabf13256044f547116d418c8fcaddee1578dc0a9f9d0e07385cc1a1d71cef2430539d7ddc87c53415be7544ff2811f07e160f918a3ff2a3d7f4ff9c710abb5d37a8df544d832981533d800ac124d3ebe5436d9dfd2d6a09e16c45830073fdd8717f3edbb08d5ba3473b20f444fa3da87fb83c97959bae5dcbdeefb670ee3428cca4eea384d51e8cc0ed75d9544a598b62bb8fbd900b2c47354d649", 0xad}, {&(0x7f0000000680)="35ac55355815f385373e6f85c9f9fd73ffb1588b8b53868654a4747eb30e204b47d6ad12701f53d10a84a2cd34f17923c19a1f730d68d36b7fab41006d908c5eacd3def126b84e456f713ff8f328ff0f40b4d316f73bbb36e2d40f8e500010aeecefe515cc5aba77625ba3f873c7ae6f639afca70cc3d687c729f3532ee40ddaab300f79e32174dae26e135af3aa88e445bef4f565d03137b244f3a7f5c5341e7231b1beb61c111ee6e07eac064314be33be05ae5c9ff1", 0xb7}, {&(0x7f0000000780)="e837acd9b018b92a9dae00347d34620d746c089be1101357584003b70b59bd6093f8e2ba8f253da08190bc5d5195c2338e0de7b7cfdc7204ebb02dfaa47b79eccf5b0f11ef4c80c1b4fdc854fab914ece15144c6fd6a3b9d96c441896631467646d907c718750d14162af3100edc10eea6c249e3c783627bfa6856620a4c68d16a6f51e71e087556d2936a3aebd4c87d0deb0d022d7e0ca7431909a711503a515b559db46ed1048683fa5f3990aa3346540fc5eda55af71b729432e65547066d9af41a9a2314c151bde45ade", 0xcc}, {&(0x7f0000000940)="60ee46ea", 0x4}, {&(0x7f0000000880)="b6ce3d8c7c3e20845d0035f7394c0c0afba8b1b99e48b6405f5b3b8041e7246b3317e15d23f1b0b3ee31801cc55dd242d659659746df706631baff804de0b1b1c5cb77db6c546a561334e4140a1e5f39401b9736c71baaf815c6354e2d556c9f6a8c445c18b7e11b0f1bee73e9a4a5ca4480e82e3df7498eb3c73db7281ee94de2c4674db4f40df593149ea6c4989c46496991cc7196bfbf4639fb7e17774ce16e0a8715dc4b", 0xa6}], 0x8, &(0x7f0000000940)}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000a40)="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", 0x1000}], 0x1, &(0x7f0000001a80)}}, {{&(0x7f0000002c40)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002c80)="230a452855b72aeb049561579a789eaf2363ae0337885284fca661626b3662b9e01d0c47bec8fb69c63383931024b7847a38b64b01fce38e2159ce89ed7fd3d18321fda254e6a3b0f734f6b2cf66647be0df876de39d4307728fc582645b08d9d5965ce082cc88d10a4b64c0cab3f59433cc01bfa3ca0f8ea5fe4d9c6c3e7b7ba51bfefa1b6753d23e2be993658c640dc7b14a9d1d8ecebba7c28121153ed9a566b73de0e04b0982f16fce253d327acbeac7006c8c044b3366c18cda511f22c9128e9c0ea49bea5771f5edec5bc68694", 0xd0}], 0x1}}, {{&(0x7f0000002dc0)={0xa, 0x4e20, 0x400, @loopback}, 0x1c, &(0x7f00000050c0)=[{&(0x7f0000002e00)="b56d1c08838ea57d0a568f11e4a5c3dfd16bd77374936f481df728e8e89b2bdca33925a417cc71374763bdc52f62356a04c6d3c5773fca23a8be71937130f40e7321baeb18f0e36e626f440b19d6b5ff4efc1ecf2794b479fd785f22eaa2718d922edf30d837cb57180c8f968e076785c378ede0aec3bc91b4fea133f607bc0959bf3c97ad53e913ecc2db8496ee895d77239a7fb93ec0a2e4417113df1e80409da1b14fb4e260971e3211d090852e178be88942c5c96b639c361447ab3f6f431688627ec6f7243f4714d0390f66e25618d6339a7ed8165a1786c2", 0xdb}, {&(0x7f0000002f00)="2892d5dacd25de130827b49500d70612703019492a0ae7c671b3b9b7605e3d94a6c319eb386933635eb95c0077dd1c229426ccecf518bb08dec17fa32d204d90a862dc9a380e95d1c9aafe98feb9c7e1e7f54d96b9118031300e649ebb0c4f234621827c107230feaf56fd667ddf0524", 0x70}, {&(0x7f0000002f80)="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", 0xffc}, {&(0x7f0000003f80)="e45a1a39a96edc306fa107cc81d66233e8d2d1daef901a3e0874306de95ef856ef82a79c19fc8d7bbb5c59a1380014894401d8e24288c2c8a09b7b281ea3578cc31f69db2458b95d4955f3cbb36e31d708ab682c0131573209c9ecd69fea5a74aebe470d408c616c87a174f034f6c1a8e3af2135840ed979e3205661aba43d777f4d7ba64e64f96e9a88049263cefa904e60db26fd33d76deb0ccfd50a023ac10653f17dee90b51267ecb7da9f0c6c50550063f4199647f83ba788d30397278faf422e34d19814188ae7fc5101fda2523a9c9cfccaac0f985a5906de191540a0e31ef9cba1a27bc87b203f67bfcd88ccb6a8947bf3f72b0972bb6b781ccff61525ae66b7df2988670d321d2f23ae50342e9af51560b86ad51543fdbc0c0cfae48f3ee15d75a7ca6091c3133d7db188844ff8be88a00da75a8c1bec22495f40c2f37beda9fed9ae097b336ab07dd9470028566fca00c7733ae6859186e67f687f57740a145eabc1d15dde5c5679a2771f05e6bf168a167862dd0ff5aeb4a2425c63c4c8f4aade6a81df270d64cbe4f3de835c5d78ccad4d9b84b5f876d17ea42ef3193c331adac057bd54662d67eb8c3a0bdc212bbcb4029a16edd5c2dee88d22f85d2863ccd2ec367b6d2bd583406c8c917617287a67378efc29082ce6096780ec3d7232ea20532ed4d9552b4b82f941035d3784839bf0ed87593d408efbd337ad7a5efa28d88e955672a7cadac41b653173a4a92fb488ac42ddc9d67ac9d090632afc3a911fd39e4deee46b0f94a7a1a10edb3c6f3f809b666fab2ac12f85fcb5d2a6aab586e90e59ae11d96dd8260bb666f5e2216b2fadedf396ada1a2ee2c5b43901838ddf8e3dced51135d49b35051294efaa479e9ca458d4c46b572f967a2ad82d812189233bf36b02eaec92c875e3ba60b7c6da60b1c5a502b082371b7fded3782d0860a96f07881abe50356add95c453e65710cc921a92a0518c1603af853ea61b71d21893b8bdd0ab9a09071d11a92ad71a64bd056d1ced67ac0b7ebda0c1d668c74d6d21701bb6cfbe09ab6e1c8646f66c18e3e3aa3af5f2e8644ff95f5da261539ae57d93f34dc4dfb4c2837116f77916fd1c93cdf45ab620154cba85fa8764244cc12943f2ecad41c1c0a2d0027c6e6a1b82ef854ccfd804f358ac09bd97cdfea08fbbca6d76bf74afc3ba5494e9aa2e18f5bcac4262ea864ed4cb91d1ed40ba9d33ddf0b22b95cf1d71dc65159f0d1a2b20d26daa95d1f572e428f3386c4a16ed97b8d59cbc9f73df7485f603622e6b9721e4fab59f98def8c1f024be5a4e52b76223e870bce045024990d6db7384a43c1f01b82fe672b4d82ad21e470a4e927436aa87e00a4a88fe06621b86975782f80fe98313992acfbfdf3359a0e3d8bdb272bf863369abb6d9f3b473784e913da105b880f778deba00f8dcf1efc7e4a27194b93a0d1164bbac04fdcb62097db18d3c545ae0112c4db1d448660743b4a7ea54d3768b4c9ebce8de542bf8722dd7ad3c83c9d6b15d43b9d08489f3311e73acf8c074e7f18807a9139e7f8205d18cfd78f55f9e66566ca82a9b6034476723076e5ce718f01f3c4c91ebf5dc64d889456161aa9e19c832c823a48c38bea0fa44000fb0b45b9f2c6f9d0506b6ff503210a3fea39838cf97d3aac1b060aeca9d0c8cbcd6184c7d2b3fa4285f72d071015d86316d435ad71f37d80dd9d85ef1642269dde6d955cb1de9ed4d770de151dd3f188f8f4c4b517a1f68214a3907c8d0a633f34495fe85bd9835b2fdca58baa32e64486498f3ebe2c259d287fba556f1e7001d309bb5c91424de9e9145c61f056f13bf5bea6e9d7abf5b9a3c618d8b5fca20f5023b8bab2544cee5e190de5e2954efb1e063e2f89a3b967f25f261497b34ceac9f70967f66ef17ed1ac0f99d375790a30b7aeae9ec479262ec21e3697c727b1cf89d63461b2f3b9bb257bd5e644fab3c5131df102478f717e67d3099254a7ea554974b6b9a037af3b6f89728bc8d23954c808c6092851b96b2ae84fe00b1dc6e6c1a47ad7f5b8dff669a0adcd382c9290f48f2d2bbf00b45fa4cb39b1e452b86e388e919f481143d2368d5791c9504d7788cab4b3df202e075d357f83f64f7fe1c3bebcf30eea56e24ac577360029b2ea8e43ecd7e7f885a715808bb6205425cb9218938fe3c6320adfb80499300e8c83d271e6aa13ef6fcd5ab8468833c19ab9f5634f79b81216710d3c900735fb3a418ab565b6af4882896d5698c109c1475f55a1fa9c28de019f77483aeea80ed4fa4185f50705fcc19dcd2b59c1ecc10daa01cdf9695f1456dc4f59fa4e6b8c6d60d09c9a0f7ef77a192f61c5548c91321b79dd08c0902cd131068ab183651de387c15f48f156a87f4f6e8071ac5a55da87d4e188409a6138b18b87011fb89b72bfcc270a45599f6fe33be013dd431efa041ff582f2f4dec01126f254cd07fa6d6250d512bd218359075d219dfcd2c94b58bd41bd7bacaf7099775338a18d3639b86450b8392ebb055ded376f48fecbf6146f5515a0d22a7e7dd51c91a08f846bfa003f89870c63a3d090cfce46c0ceedfa182e22c548e8c7dfab6fd51a79bcb98f7eab7bf06f3a26ba0289c99b6b753084a173113f3a0b775e2ff800cba84e4891ee936026c2c6068059ccb8585fa9e2ddb69e163754eee6d5f92e1bafb227b6cc51eba5a55e18b71df5270ff7f07adc90198b4fef5b6d56932614435ba287b03959a866ac79f81f30581b2264cf50e7db912855b7e3d57a2c5e0853e62664859135827f4dbac090fbd0c21fc846696afc950088bd38125a945e11c757d8f6e30e2110f8ca81665d27e52f84a875f24fb7d6068fb2f4d1bec890d0ac66ce0c1d1461834ae6cc661b9a82c73344be541cfb5cdf27adf10db26ffd9b04a874915beba39d80d5a1868923490ecd75f347f2a48891dfd1984f36da5ee76197960d4675c4cde201e576ef24152af3cc69f99d7d4e3a9f8adac61d71807abfc9c41e60bec78e4bf937c0b28cdfbaae211fcd19daa9822343edf4d0e6385e65e967ec2cb54e9d482a27c3bb408e40b74f714de1ac2fa0645db8758ac459862f44f22bbc67467f42ff38def6c3e9bfd64d1deae705db54458f8a7b989679920aca73a34b296087305bb3a4724757b7c940a7330f875f2febde61109ddf55ca108a54b4ca3b98300f07b4b22c89f5246553e90a115deb2ad089f6539864b297b2eac6587a11161ff8e55b74202c48017d07bba993f2f5eac4e5470417a72283e6ece03113e9236724814c60f0ed50107848c66e957be0268f75b36198b0159ddcd57060aa43799a4f0154f25794fbfce33460e26603b782488fb0561067784dcb8102a2b102cd0673cd45e0230ba8efc2bd95bb32d013dc2e1d23b63d87a9715b3ea68ac71a1a32092fa791c560b607a426b754e645e370629012eea367b0645a300b2adc5f57ab91d497de2f8d4e22219aba22af5ddb58be7c0aaf3d25bbea8a7e9b657bd5993b7b075591fbf26231ea6a73558101c777be8449997a6c7673677c675eff617204d54af7182d920764c201053144e3c7e7206b740b46539e398008db9a446b0652d64a821683f07fd4fb823bad330c3a6bd6dcbbd5a07e349ce8a36c403ac97475377ea5d800e869414c2d564b2da9eaac255d94a7f54fff1768513faa7cb78bd9f011dc11887ddf9a4651c8bf18804a084c44d213bae764a862b2407ef6c787026814f5cbf0932eac928ad51f9e0ee2f5b365dbf84f21a6ac97364ff1a6d56d94b1d0a4add9879676e74e86992e50acf903a27fdd6b2348179e3b34fecaab12c67248070213b891a331c32aa9a72a9af7356b9ab54faf070dece6b81ae177eb2651f63cbc3c1ce06a0caa4bb5402457bc7f68fc26773450c81a5256a00ad09e0fa1e54805d909ad2dc2d8c9490a2f02d6618dbf82dd861936a9b42dc1998b620ae7584a6bce2f1274869df3c29f1fbf4ce161c61aacfd83899f6f2686d694936ac689802d1df836fedc90d77bc79af96054988f42b855b37acca1e12086c6d9f9b3da10c031eb73646a525c500868e25c62e76474753b1592850caa42d12e9f42eea7b8f24003e9e2af1d5bd370ecb14be7b0190d721316149872bbe908c276067600c6cce69f321ff45ea5e46c86fcfd0965313c5def24734c57af30dca8ebfbfa5895d672671f2c4bff1d9a01812e5b55239e18698b065d253466dbac75300dc47b4bbec0f89ec9cb81a1eaeaf4531a4474ac7a44e58e3ba8b23513cf5a5661eb27f9c1872d3bf5eed2a63de6ee4100a0b3d4ec6c896d075ece03a6a862da93abf96cef0f2ba93ad063d7dd1e74e32187f10887908a1a9df222036e98395a3b5437f2c10d0f2e6ef313c5a7879e0c51ef1022fb9a936b9d7b44eed7dd3a9eceaa4bb1bdd5bfb9757bd1d226044eaefa6528e55613cf24f46d46eca0bc0fbab9a7e4fde865f5101114c0bade4e0b99751ea97d597174a0d1851b5d969de561e9ca8c8819f5dc546342eebde992f26e9c640aa8bb1be5b69a703409219cf860ed0ee676baba3c896bc51417c7b026b1373fcd6b4fbdd60f81de8c7d14628883966f4bef8eab973799e8fa5305ea8e6ae472a0739bdf66a436001a7347c0588905eae8218601da5c758a2f4b64647c545a046b0564e5cf45da3023d071e8f9b5b348a8b5e7a5fe2d9ecb8877abd0425910ff45afbc9e16389521897db954099b3517c4ae44a470f426473ed74393eff6daa3515d6af65ed749c04ab3d07826adad373816fc0447c12e76448df806df10005c6acd8e43eef5622aa8926cb167599552af93b4862643ab9260088cbf7c5b9b1a6dffa9e5e87faf803a469172e27560ff9fd79a51a7737c625d9725309645b68159cf416ea8562104230f44af6cec217674cbd9a78f4a21edcc8511897f55c2d4725becf5cfcf0e786f56e8f55069a0dff8bfab53a7b8be9f3a60ee0114d46a47895861a1c2acd00ba3e45cc76094e1e5396c593a11859994a5ffdfcebc55936a1b257f76264ea9cc395f280d4f774fb2994177cb05fc91d94ebed2f217540ad6e7c11f73ac5c52d23264232001501e8b4b046fb43de00417c27368ada823e0a9c43ff22a32ab9dd97c52a79ee951e2019c13e5973254c61c67879abeb9274e610c248386724f1ffc79ea365be173bbfac859ddb9ed29c6c60285b0e09588e0865a36233ea0c336cd95cfa0c61ab7b0d30d2f0db9145773c245e2ce2f7e336470229b722dbd45eec15034755fcf65ef013216a501281dd1f2d74913935d6652495ccbdfa8cc83b767d96d41204338fca7d25ac0e105e0e3cf334ea5f38fc688495c523120f3793edafcd1fdd362fd9ef7d0a24d3ef625eebfc88d774e35fcf9ec8df5873ff1acf6cd9dc79bd82ea96379e1d5dfbcff9213bde301104fbe87b71c1ee9ff4edb87db1d5762205b75adc456c5756cb7aa45444d26374eb28be5c3beffe6e4d65973e11f8a0a33c037ad0dc9cb4b41cd87a736cc25e1b623f244564d0601f8b4dd0c84e9edd87093746c6ff717f4ca81b4111ba87324bb79b4f27301a985f8f3f2824a4f44bbdab97cca9fa5359fda9433c70a75a5d96290bcf45b013177266b905d17bd76155af4dd2c6b9c871e9fbaeeebbb334e493b5570cfc259cfc15a94f78b477a8443fb7aecf3b901dc105105ec7716186f662cbe7cdf536aa67c3fa960b5601d16c4c18768efc52721f6a4d89470db9c7122029419187ff7c71111f694172a12ce0d3ce33b56736db8669c17", 0x1000}, {&(0x7f0000004f80)="c352af511b2df17ed6d4cdcbaf8b0e0a8314cbf760b85f66b0dcc93ca6069926167d4563352fe0f54dae27172f637b50e83182feaf466ccafc2a5921f65cf208861e6ad8f016ca1828ee4bc1671c30746f2c4eee059b41f6f08e7ecdfdb06ee5d2a8bfca87e87f4257b8366776de06e44d0c9745bccad37dbf06183936d4f69a0dc3ac6982dd5c7464e428c90d40d0a187c74c774ce29ef6f714", 0x9a}, {&(0x7f0000005040)="c0577a7f4510d4131b2c8d77c10aa512090ee7351d85a41dc82cca8bb3ac7a47bdbd52490034249103cd7a1438004ef2c82345abe7102c47762cb26099b4355300d377a600e4f440bbcd60e7c29324611e82312cd1e781d2", 0x58}], 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000290000004300000002000000100000003ebc0910073d0000000094c30000004cce522e986c89dea107e61412"], 0x20}}], 0x4, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv(r7, &(0x7f0000000200)=[{0x0}], 0x1) 4.237293265s ago: executing program 4 (id=2690): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r1, r1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) llistxattr(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.213730296s ago: executing program 3 (id=2691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil, 0x2) 4.125153579s ago: executing program 7 (id=2662): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x18}, 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0), 0x0, 0x80) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f000001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0x1, 0x78b82f90}, 0x50) 3.183790311s ago: executing program 4 (id=2692): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x68, 0x23b) 3.043944107s ago: executing program 7 (id=2693): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2.851669876s ago: executing program 4 (id=2694): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r5}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.681130862s ago: executing program 7 (id=2695): r0 = socket(0x1d, 0x2, 0x6) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x5}, 0x8, 0xfffffffffffffffa) r6 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f0000001880), 0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001980)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x0, 0x14, @multicast}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x0, 0x1d, 0xb}]}}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000014}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) 705.682309ms ago: executing program 7 (id=2696): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 592.324494ms ago: executing program 3 (id=2697): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e80)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c2bd84640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb06153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c5084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) iopl(0x3) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x2) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x578410eb) pipe(&(0x7f0000000040)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000080)) 512.065917ms ago: executing program 4 (id=2698): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 199.483971ms ago: executing program 7 (id=2699): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x98, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4a99}, @IFLA_VFINFO_LIST={0x5c, 0x16, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x81, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x90f, 0x100000000}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @random="cb105c4caa33"}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xb, 0x15ef}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 198.605921ms ago: executing program 4 (id=2700): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getegid() fchown(r0, 0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) 11.848469ms ago: executing program 7 (id=2701): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r1, r1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) llistxattr(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 0s ago: executing program 1 (id=2702): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc1c4, 0x5, 0x4, 0xd311, 0x400, 0x9da, 0x92eb, 0x9fbd, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x280, 0x7f, 0xfff, 0xe2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4090) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): int descriptors, different from the interface descriptor's value: 17 [ 770.361623][T10625] usb 5-1: config 250 interface 228 has no altsetting 0 [ 770.379928][T10625] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 770.398748][T10625] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 770.434244][T10625] usb 5-1: Product: syz [ 770.467174][T10625] usb 5-1: SerialNumber: syz [ 770.498679][T10625] hub 5-1:250.228: bad descriptor, ignoring hub [ 770.510301][T10625] hub: probe of 5-1:250.228 failed with error -5 [ 770.718647][T10625] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 771.044203][T10625] usb 5-1: USB disconnect, device number 6 [ 771.076615][T10625] usblp0: removed [ 771.483810][ T788] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 771.736968][ T788] usb 7-1: config 0 has no interfaces? [ 771.757777][T13069] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 771.773733][ T788] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 771.795505][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.833683][ T788] usb 7-1: config 0 descriptor?? [ 772.838363][ T788] usb 7-1: USB disconnect, device number 6 [ 775.403966][ T5103] Bluetooth: hci4: command 0x0406 tx timeout [ 776.653686][T12489] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 776.860417][T12489] usb 4-1: config 0 has no interfaces? [ 776.886291][T12489] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 776.913849][T12489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.949764][T12489] usb 4-1: config 0 descriptor?? [ 777.210757][T12489] usb 4-1: USB disconnect, device number 12 [ 780.373881][T12489] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 780.587250][T12489] usb 5-1: config 0 has no interfaces? [ 780.593033][T12489] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 780.605362][T12489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.616791][T12489] usb 5-1: config 0 descriptor?? [ 781.018987][T10625] usb 5-1: USB disconnect, device number 7 [ 783.678005][T12489] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 783.867163][T12489] usb 4-1: config 0 has no interfaces? [ 783.873072][T12489] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 783.882858][T12489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.893181][T12489] usb 4-1: config 0 descriptor?? [ 784.104522][T12489] usb 4-1: USB disconnect, device number 13 [ 784.123656][ T7227] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 784.273889][ T7227] usb 7-1: device descriptor read/64, error -71 [ 784.543930][ T7227] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 784.713615][ T7227] usb 7-1: device descriptor read/64, error -71 [ 785.432959][ T7227] usb usb7-port1: attempt power cycle [ 785.855369][ T7227] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 785.899910][T13270] loop4: detected capacity change from 0 to 524287999 [ 785.907817][ T7227] usb 7-1: device descriptor read/8, error -71 [ 785.939658][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 785.953251][ C0] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 785.959851][ C1] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 2 [ 785.966010][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 785.983155][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 785.999256][ C0] I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 786.019434][ C1] I/O error, dev loop4, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 786.029471][ C1] Buffer I/O error on dev loop4, logical block 65535968, async page read [ 786.214112][ T7227] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 786.263611][ T7227] usb 7-1: device descriptor read/8, error -71 [ 786.387627][ T7227] usb usb7-port1: unable to enumerate USB device [ 786.443668][T12489] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 786.935913][T12489] usb 5-1: config 0 has no interfaces? [ 786.941704][T12489] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 787.389187][T12489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.400110][T12489] usb 5-1: config 0 descriptor?? [ 787.612027][T10625] usb 5-1: USB disconnect, device number 8 [ 788.723030][T10030] Bluetooth: unknown link type 128 [ 790.148770][T10625] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 790.343913][T10625] usb 2-1: device descriptor read/64, error -71 [ 790.763662][T10030] Bluetooth: hci4: command 0x0406 tx timeout [ 791.123713][T10625] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 791.293763][T10625] usb 2-1: device descriptor read/64, error -71 [ 792.633614][T10625] usb usb2-port1: attempt power cycle [ 793.803914][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 794.124719][ T788] usb 5-1: config 0 has no interfaces? [ 794.828838][ T788] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 794.843794][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.858103][ T788] usb 5-1: config 0 descriptor?? [ 795.100207][ T7227] usb 5-1: USB disconnect, device number 9 [ 795.573636][T10625] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 796.493633][T10625] usb 2-1: device descriptor read/64, error -71 [ 796.764711][T10625] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 796.934944][T10625] usb 2-1: device descriptor read/64, error -71 [ 797.090434][T10625] usb usb2-port1: attempt power cycle [ 797.544863][T10625] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 797.658297][T10625] usb 2-1: device descriptor read/8, error -71 [ 797.973706][T10625] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 798.028604][T10625] usb 2-1: device descriptor read/8, error -71 [ 798.144036][T10625] usb usb2-port1: unable to enumerate USB device [ 798.421598][T13425] netdevsim netdevsim1 : renamed from netdevsim0 [ 798.453586][ T788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 798.666092][ T788] usb 5-1: config 0 has no interfaces? [ 798.683591][ T788] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 798.693012][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.705659][ T788] usb 5-1: config 0 descriptor?? [ 799.029825][T10625] usb 5-1: USB disconnect, device number 10 [ 800.083731][T10625] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 800.273592][T10625] usb 5-1: device descriptor read/64, error -71 [ 800.584587][T10625] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 800.845056][T10625] usb 5-1: device descriptor read/64, error -71 [ 801.018974][T10625] usb usb5-port1: attempt power cycle [ 801.523629][ T7227] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 801.523628][T10625] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 801.576750][T10625] usb 5-1: device descriptor read/8, error -71 [ 801.716934][ T7227] usb 7-1: config 0 has no interfaces? [ 801.723291][ T7227] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 801.738201][ T7227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.760649][ T7227] usb 7-1: config 0 descriptor?? [ 801.863665][T10625] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 801.905361][T10625] usb 5-1: device descriptor read/8, error -71 [ 801.986354][ T7227] usb 7-1: USB disconnect, device number 11 [ 802.035439][T10625] usb usb5-port1: unable to enumerate USB device [ 804.563946][ T5857] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 804.693983][T10625] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 804.765581][ T5857] usb 7-1: config 0 has no interfaces? [ 804.783684][ T5857] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 804.793300][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.824827][ T5857] usb 7-1: config 0 descriptor?? [ 804.873767][T10625] usb 4-1: device descriptor read/64, error -71 [ 805.011296][T13551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 805.107360][ T7227] usb 7-1: USB disconnect, device number 12 [ 805.737174][T10625] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 805.906782][T10625] usb 4-1: device descriptor read/64, error -71 [ 806.035089][T10625] usb usb4-port1: attempt power cycle [ 806.443594][T10625] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 806.479692][T10625] usb 4-1: device descriptor read/8, error -71 [ 806.753639][T10625] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 806.785290][T10625] usb 4-1: device descriptor read/8, error -71 [ 806.933967][T10625] usb usb4-port1: unable to enumerate USB device [ 807.448265][T10625] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 807.675795][T10625] usb 7-1: config 0 has no interfaces? [ 807.685203][T10625] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 807.698536][T10625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.711329][T10625] usb 7-1: config 0 descriptor?? [ 807.936917][T10625] usb 7-1: USB disconnect, device number 13 [ 809.170345][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.177061][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.253874][T10625] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 809.423603][T10625] usb 7-1: device descriptor read/64, error -71 [ 810.233619][T10625] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 810.395695][T10625] usb 7-1: device descriptor read/64, error -71 [ 810.475878][ T5857] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 810.517257][T10625] usb usb7-port1: attempt power cycle [ 810.678206][ T5857] usb 5-1: config 0 has no interfaces? [ 810.684170][ T5857] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 810.693348][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.704523][ T5857] usb 5-1: config 0 descriptor?? [ 810.919610][ T5857] usb 5-1: USB disconnect, device number 15 [ 810.927342][T10625] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 810.975453][T10625] usb 7-1: device descriptor read/8, error -71 [ 811.276389][T10625] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 811.371664][T10625] usb 7-1: device descriptor read/8, error -71 [ 811.594483][T10625] usb usb7-port1: unable to enumerate USB device [ 814.653957][T10625] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 814.743967][T10630] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 814.853600][T10625] usb 5-1: Using ep0 maxpacket: 8 [ 814.861997][T10625] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 814.874604][T10625] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 814.890768][T10625] usb 5-1: config 250 has no interfaces? [ 814.904040][T10625] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 814.935341][T10625] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 814.957709][T10625] usb 5-1: Product: syz [ 814.969159][T10625] usb 5-1: SerialNumber: syz [ 814.974876][T10630] usb 4-1: config 0 has no interfaces? [ 814.986449][T10630] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 815.006617][T10630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.053889][T10630] usb 4-1: config 0 descriptor?? [ 815.973399][T12489] usb 4-1: USB disconnect, device number 18 [ 818.047416][T12489] usb 5-1: USB disconnect, device number 16 [ 819.703923][T12489] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 819.713690][ T7227] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 819.975250][ T7227] usb 4-1: Using ep0 maxpacket: 8 [ 819.985645][T12489] usb 2-1: config 0 has no interfaces? [ 819.993859][T12489] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 820.006244][T12489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.014870][ T7227] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 820.024424][ T7227] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 820.040807][T12489] usb 2-1: config 0 descriptor?? [ 820.057367][ T7227] usb 4-1: config 250 has no interfaces? [ 820.065724][ T7227] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 820.075682][ T7227] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 820.103597][ T7227] usb 4-1: Product: syz [ 820.108138][ T7227] usb 4-1: SerialNumber: syz [ 820.262914][ T7227] usb 2-1: USB disconnect, device number 17 [ 825.717432][T10625] usb 4-1: USB disconnect, device number 19 [ 826.423613][T10625] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 828.117943][T10625] usb 4-1: config 0 has no interfaces? [ 828.741927][T10625] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 828.756570][T10625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.788506][T10625] usb 4-1: config 0 descriptor?? [ 829.047118][T12489] usb 4-1: USB disconnect, device number 20 [ 829.273835][ T7227] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 829.493764][ T7227] usb 2-1: Using ep0 maxpacket: 8 [ 829.501746][ T7227] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 829.510634][ T7227] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 829.528595][ T7227] usb 2-1: config 250 has no interfaces? [ 829.537658][ T7227] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 829.547337][ T7227] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 829.555831][ T7227] usb 2-1: Product: syz [ 829.560717][ T7227] usb 2-1: SerialNumber: syz [ 831.009388][T13802] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 832.056959][ T7227] usb 2-1: USB disconnect, device number 18 [ 832.453602][T12489] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 832.635723][T12489] usb 5-1: config 0 has no interfaces? [ 832.641856][T12489] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 832.663523][T12489] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.685098][T12489] usb 5-1: config 0 descriptor?? [ 832.896864][T12489] usb 5-1: USB disconnect, device number 17 [ 833.908083][T10625] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 834.093804][T10625] usb 2-1: Using ep0 maxpacket: 8 [ 834.106548][T10625] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 834.135043][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 834.153616][T13848] netlink: 'syz.4.2082': attribute type 5 has an invalid length. [ 834.163433][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2082'. [ 834.163617][T10625] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 834.188381][T10625] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 834.199410][T10625] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 834.208700][T10625] usb 2-1: config 250 has no interface number 0 [ 834.215296][T10625] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 834.236330][T13848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 834.236521][T10625] usb 2-1: config 250 interface 228 has no altsetting 0 [ 834.252427][T13848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 834.261576][T10625] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 834.303711][T10625] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 834.312155][T10625] usb 2-1: Product: syz [ 834.326509][T10625] usb 2-1: SerialNumber: syz [ 834.336564][T13848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 834.358656][T10625] hub 2-1:250.228: bad descriptor, ignoring hub [ 834.363901][T13848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 834.374183][T13848] geneve3: entered promiscuous mode [ 834.390270][T13848] geneve3: entered allmulticast mode [ 834.393808][T10625] hub: probe of 2-1:250.228 failed with error -5 [ 836.124105][T10030] Bluetooth: hci0: command 0x0406 tx timeout [ 836.601304][T13867] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 836.633609][T13867] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 836.687804][T13867] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 836.741600][T13867] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 836.888021][T10625] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 836.931980][T10625] usb 2-1: device reset changed ep0 maxpacket size! [ 836.964539][T10625] usb 2-1: USB disconnect, device number 19 [ 837.403763][T10625] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 837.605777][T10625] usb 2-1: config 0 has no interfaces? [ 837.619881][T10625] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 837.650052][T10625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.661763][T10625] usb 2-1: config 0 descriptor?? [ 837.887354][T12489] usb 2-1: USB disconnect, device number 20 [ 838.603913][T12489] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 838.947676][T12489] usb 5-1: Using ep0 maxpacket: 8 [ 838.961920][T12489] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 838.973838][T12489] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 838.982533][T12489] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 838.993530][T12489] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 839.002720][T12489] usb 5-1: config 250 has no interface number 0 [ 839.009788][T12489] usb 5-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 839.082211][T13906] kvm: user requested TSC rate below hardware speed [ 839.783566][T10625] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 839.965781][T10625] usb 2-1: config 0 has no interfaces? [ 839.971859][T10625] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 839.987062][T10625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.001882][T10625] usb 2-1: config 0 descriptor?? [ 840.228084][T10625] usb 2-1: USB disconnect, device number 21 [ 840.723662][T12489] usb 5-1: config 250 interface 228 has no altsetting 0 [ 840.742499][T12489] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 840.762868][T12489] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 840.894427][T12489] usb 5-1: Product: syz [ 840.898940][T12489] usb 5-1: SerialNumber: syz [ 840.905315][T13904] 9pnet_virtio: no channels available for device syz [ 840.920829][T12489] hub 5-1:250.228: bad descriptor, ignoring hub [ 840.935863][T12489] hub: probe of 5-1:250.228 failed with error -5 [ 842.868907][ T788] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 842.884226][ T788] usb 5-1: device reset changed ep0 maxpacket size! [ 842.891793][ T788] usb 5-1: USB disconnect, device number 18 [ 843.210924][T13939] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 843.264779][ T788] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 843.500842][ T788] usb 5-1: config 0 has no interfaces? [ 843.511019][ T788] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 843.551752][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.576323][ T788] usb 5-1: config 0 descriptor?? [ 843.795559][ T788] usb 5-1: USB disconnect, device number 19 [ 844.105034][T13959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2120'. [ 844.116351][T13959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2120'. [ 844.493797][ T788] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 844.684264][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 844.691893][ T788] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 844.700866][ T788] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 844.711107][ T788] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 844.721612][ T788] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 844.731016][ T788] usb 2-1: config 250 has no interface number 0 [ 844.737463][ T788] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 844.751416][ T788] usb 2-1: config 250 interface 228 has no altsetting 0 [ 844.762801][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 844.772315][ T788] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 844.780705][ T788] usb 2-1: Product: syz [ 844.784949][ T788] usb 2-1: SerialNumber: syz [ 844.794809][ T788] hub 2-1:250.228: bad descriptor, ignoring hub [ 844.801254][ T788] hub: probe of 2-1:250.228 failed with error -5 [ 844.963818][T12489] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 845.113715][T12489] usb 5-1: device descriptor read/64, error -71 [ 845.453818][T12489] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 845.723859][T12489] usb 5-1: device descriptor read/64, error -71 [ 845.889754][T13981] nvme_fabrics: missing parameter 'transport=%s' [ 845.902047][T13981] nvme_fabrics: missing parameter 'nqn=%s' [ 845.909065][T12489] usb usb5-port1: attempt power cycle [ 846.326895][T12489] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 846.364365][T12489] usb 5-1: device descriptor read/8, error -71 [ 846.427677][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 846.451221][T13991] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 846.644327][T12489] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 846.764227][T12489] usb 5-1: device descriptor read/8, error -71 [ 846.884784][T12489] usb usb5-port1: unable to enumerate USB device [ 847.393648][T12489] usb 2-1: USB disconnect, device number 22 [ 847.793635][T12489] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 847.986820][T12489] usb 2-1: config 0 has no interfaces? [ 847.994352][T12489] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 848.008953][T12489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.022832][T12489] usb 2-1: config 0 descriptor?? [ 848.242031][ T788] usb 2-1: USB disconnect, device number 23 [ 848.443192][T14023] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 848.465255][T14023] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 848.475566][T14023] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 848.487695][T14023] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 848.496399][T14023] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 848.505020][T14023] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 848.522368][T14023] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 848.532833][T14023] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 848.541553][T14023] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 848.551539][T14023] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 849.003745][T12489] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 849.213739][T12489] usb 7-1: Using ep0 maxpacket: 8 [ 849.255414][T12489] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 849.275172][T12489] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 849.294450][T12489] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 849.328461][T12489] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 849.354024][T12489] usb 7-1: config 250 has no interface number 0 [ 849.363999][T12489] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 849.381083][T12489] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 849.393878][T12489] usb 7-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 849.413686][T12489] usb 7-1: config 250 interface 228 has no altsetting 0 [ 849.425043][T12489] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 849.434650][T12489] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 849.443090][T12489] usb 7-1: Product: syz [ 849.448903][T12489] usb 7-1: SerialNumber: syz [ 849.462913][T12489] hub 7-1:250.228: bad descriptor, ignoring hub [ 849.469954][T12489] hub: probe of 7-1:250.228 failed with error -5 [ 849.553985][T12830] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 849.743889][T12830] usb 5-1: Using ep0 maxpacket: 8 [ 849.751548][T12830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.764205][T12830] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 849.773350][T12830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.785126][T12830] usb 5-1: config 0 descriptor?? [ 850.021621][T12830] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 850.539985][T10625] usb 5-1: USB disconnect, device number 24 [ 851.383707][T12830] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 851.588507][T12830] usb 5-1: config 0 has no interfaces? [ 851.608142][T12830] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 851.625986][T12830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.654561][T12830] usb 5-1: config 0 descriptor?? [ 851.881119][T12830] usb 5-1: USB disconnect, device number 25 [ 851.884080][ T788] usb 7-1: USB disconnect, device number 18 [ 852.765619][T14103] 9pnet_virtio: no channels available for device syz [ 853.584016][ T788] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 853.774137][ T788] usb 7-1: Using ep0 maxpacket: 8 [ 853.781453][ T788] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 853.791776][ T788] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 853.800761][ T788] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 853.811404][ T788] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 853.830784][ T788] usb 7-1: config 250 has no interface number 0 [ 853.841004][ T788] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 853.871068][ T788] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 853.893716][T12830] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 853.922866][ T788] usb 7-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 853.944141][ T788] usb 7-1: config 250 interface 228 has no altsetting 0 [ 853.959764][ T788] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 853.969814][ T788] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 853.978563][ T788] usb 7-1: Product: syz [ 853.982777][ T788] usb 7-1: SerialNumber: syz [ 854.001079][ T788] hub 7-1:250.228: bad descriptor, ignoring hub [ 854.013552][ T788] hub: probe of 7-1:250.228 failed with error -5 [ 854.106373][T12830] usb 4-1: config 0 has no interfaces? [ 854.115188][T12830] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 854.145097][T12830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.178498][T12830] usb 4-1: config 0 descriptor?? [ 854.406090][T12830] usb 4-1: USB disconnect, device number 21 [ 856.544949][ T788] usb 7-1: USB disconnect, device number 19 [ 859.499793][T10625] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 859.505852][T14195] 9pnet_virtio: no channels available for device syz [ 859.713586][T10625] usb 5-1: Using ep0 maxpacket: 8 [ 859.728767][T10625] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 859.737856][T10625] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 859.750133][T10625] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 859.766556][T10625] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 859.775973][T10625] usb 5-1: config 250 has no interface number 0 [ 859.782451][T10625] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 859.794331][T10625] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 859.805010][T10625] usb 5-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 859.829106][T10625] usb 5-1: config 250 interface 228 has no altsetting 0 [ 859.845955][T10625] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 859.863916][T10625] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 859.892662][T10625] usb 5-1: Product: syz [ 859.903038][T10625] usb 5-1: SerialNumber: syz [ 859.921461][T10625] hub 5-1:250.228: bad descriptor, ignoring hub [ 859.934698][T10625] hub: probe of 5-1:250.228 failed with error -5 [ 863.714013][T10625] usb 5-1: USB disconnect, device number 26 [ 864.689251][T14228] kvm: Disabled LAPIC found during irq injection [ 864.805986][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 865.129008][T14233] 9pnet_virtio: no channels available for device syz [ 867.743713][T10625] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 867.850084][T14264] ALSA: mixer_oss: invalid OSS volume '' [ 868.000093][T10625] usb 2-1: Using ep0 maxpacket: 8 [ 868.012160][T14269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 868.018765][T14269] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 868.034842][T14269] vhci_hcd vhci_hcd.0: Device attached [ 868.114265][T10625] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 868.131524][T10625] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 868.160563][T10625] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 868.182951][T10625] usb 2-1: config 250 has no interface number 0 [ 868.195242][T10625] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 868.232462][T10625] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 868.234019][ T7227] vhci_hcd: vhci_device speed not set [ 868.276091][T10625] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 868.307102][T10625] usb 2-1: config 250 interface 228 has no altsetting 0 [ 868.323808][ T7227] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 868.338678][T10625] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 868.456900][T14270] vhci_hcd: connection reset by peer [ 868.468194][T10625] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 868.478915][ T11] vhci_hcd: stop threads [ 868.499681][ T11] vhci_hcd: release socket [ 868.512689][T10625] usb 2-1: Product: syz [ 868.533677][T10625] usb 2-1: SerialNumber: syz [ 868.550565][ T11] vhci_hcd: disconnect device [ 868.570305][T10625] hub 2-1:250.228: bad descriptor, ignoring hub [ 868.617077][T10625] hub: probe of 2-1:250.228 failed with error -5 [ 869.135607][T14278] netlink: 'syz.6.2214': attribute type 10 has an invalid length. [ 869.143602][T14278] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2214'. [ 869.160053][T14278] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 869.170978][T14278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.892303][T14283] program syz.3.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.463571][T10625] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 870.613678][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.629331][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.753806][T10625] usb 4-1: Using ep0 maxpacket: 8 [ 870.772014][T10625] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.790440][T10625] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 870.812946][T10625] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.833261][T10625] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.851938][T10625] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 870.854059][T12830] usb 2-1: USB disconnect, device number 24 [ 870.861817][T10625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.107583][T10625] usb 4-1: GET_CAPABILITIES returned 0 [ 871.117562][T10625] usbtmc 4-1:16.0: can't read capabilities [ 871.318507][T14290] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 871.349483][T12830] usb 4-1: USB disconnect, device number 22 [ 872.241316][T14305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.287610][T14305] bond0: (slave rose0): Enslaving as an active interface with an up link [ 872.300025][T14310] netlink: 'syz.3.2223': attribute type 10 has an invalid length. [ 872.312672][T14310] team0: Device hsr_slave_0 failed to register rx_handler [ 873.113771][T10625] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 873.307974][T10625] usb 2-1: Using ep0 maxpacket: 8 [ 873.315873][T10625] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 873.333550][T10625] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 873.358041][T10625] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 873.380492][T10625] usb 2-1: config 250 has no interface number 0 [ 873.396990][T10625] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 873.432791][T10625] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 873.469052][T10625] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 873.494165][ T7227] vhci_hcd: vhci_device speed not set [ 873.503234][T10625] usb 2-1: config 250 interface 228 has no altsetting 0 [ 873.513612][ T5857] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 873.537165][T10625] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 873.556128][T10625] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 873.583827][T10625] usb 2-1: Product: syz [ 873.591404][T10625] usb 2-1: SerialNumber: syz [ 873.608801][T10625] hub 2-1:250.228: bad descriptor, ignoring hub [ 873.615807][T10625] hub: probe of 2-1:250.228 failed with error -5 [ 873.684862][ T5857] usb 4-1: device descriptor read/64, error -71 [ 874.019181][ T5857] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 874.033058][T14348] syz.4.2231: attempt to access beyond end of device [ 874.033058][T14348] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 874.944459][ T5857] usb 4-1: device descriptor read/64, error -71 [ 875.080346][ T5857] usb usb4-port1: attempt power cycle [ 875.523584][ T5857] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 875.587679][ T5857] usb 4-1: device descriptor read/8, error -71 [ 875.883637][ T5857] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 875.954906][ T5857] usb 4-1: device descriptor read/8, error -71 [ 876.094060][ T7227] usb 2-1: USB disconnect, device number 25 [ 876.094583][ T5857] usb usb4-port1: unable to enumerate USB device [ 876.305834][T14379] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 877.181932][T14393] batman_adv: batadv0: Adding interface: dummy0 [ 877.199566][T14393] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.225140][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.267356][T14393] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 879.168003][ T27] audit: type=1326 audit(1764120331.550:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.248043][ T27] audit: type=1326 audit(1764120331.550:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.323610][ T27] audit: type=1326 audit(1764120331.570:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.390273][ T27] audit: type=1326 audit(1764120331.570:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.513800][ T27] audit: type=1326 audit(1764120331.570:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.536006][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.584518][ T27] audit: type=1326 audit(1764120331.570:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.624098][ T27] audit: type=1326 audit(1764120331.570:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.692091][ T27] audit: type=1326 audit(1764120331.570:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.714734][ T5857] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 879.804155][ T27] audit: type=1326 audit(1764120331.570:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.826940][ T27] audit: type=1326 audit(1764120331.570:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14410 comm="syz.3.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2ea38f749 code=0x7ffc0000 [ 879.915070][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 879.989824][ T5857] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 880.013733][ T5857] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 880.040134][ T5857] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 880.053808][ T5857] usb 4-1: config 250 has no interface number 0 [ 880.065947][ T5857] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 880.098049][ T5857] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 880.132473][ T5857] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 880.184386][ T5857] usb 4-1: config 250 interface 228 has no altsetting 0 [ 880.212075][ T5857] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 880.237396][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 880.259282][ T5857] usb 4-1: Product: syz [ 880.272801][ T5857] usb 4-1: SerialNumber: syz [ 880.316079][ T5857] hub 4-1:250.228: bad descriptor, ignoring hub [ 880.374420][ T5857] hub: probe of 4-1:250.228 failed with error -5 [ 880.593704][ T7227] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 880.763696][ T7227] usb 7-1: device descriptor read/64, error -71 [ 881.043568][ T7227] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 881.204736][ T7227] usb 7-1: device descriptor read/64, error -71 [ 881.323379][T14435] Bluetooth: MGMT ver 1.22 [ 881.324719][ T7227] usb usb7-port1: attempt power cycle [ 881.743637][ T7227] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 881.778441][ T7227] usb 7-1: device descriptor read/8, error -71 [ 882.063655][ T7227] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 882.104292][ T7227] usb 7-1: device descriptor read/8, error -71 [ 882.323663][ T7227] usb usb7-port1: unable to enumerate USB device [ 883.779398][T14451] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 884.114115][ T5857] usb 4-1: USB disconnect, device number 27 [ 884.359763][T14470] netlink: 'syz.1.2258': attribute type 1 has an invalid length. [ 884.460545][T14473] netlink: 'syz.3.2260': attribute type 12 has an invalid length. [ 885.563574][T10625] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 885.763697][T10625] usb 5-1: Using ep0 maxpacket: 8 [ 885.784915][T10625] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 885.817680][T10625] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 885.849432][T10625] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 885.888810][T10625] usb 5-1: config 250 has no interface number 0 [ 885.918825][T10625] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 885.991169][T10625] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 886.026664][T10625] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 886.087731][T10625] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 886.163790][T10625] usb 5-1: config 250 interface 228 has no altsetting 0 [ 886.184279][T10625] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 886.213567][T10625] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 886.221992][T10625] usb 5-1: Product: syz [ 886.242553][T10625] usb 5-1: SerialNumber: syz [ 886.255755][T10625] hub 5-1:250.228: bad descriptor, ignoring hub [ 886.262062][T10625] hub: probe of 5-1:250.228 failed with error -5 [ 886.418465][T10030] Bluetooth: hci4: hcon ffff888058144000 sent 2 < count 255 [ 886.426111][T10030] Bluetooth: hci4: hcon ffff888058144000 sent 0 < count 4780 [ 887.043654][T10625] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 887.203573][T10625] usb 2-1: device descriptor read/64, error -71 [ 887.484748][T10625] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 887.663892][T10625] usb 2-1: device descriptor read/64, error -71 [ 887.793902][T10625] usb usb2-port1: attempt power cycle [ 888.213671][T10625] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 888.254820][T10625] usb 2-1: device descriptor read/8, error -71 [ 888.448449][ T7227] usb 5-1: USB disconnect, device number 27 [ 888.543741][T10625] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 888.604392][T10625] usb 2-1: device descriptor read/8, error -71 [ 888.753811][T10625] usb usb2-port1: unable to enumerate USB device [ 890.803639][T10625] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 890.993534][T10625] usb 4-1: Using ep0 maxpacket: 8 [ 891.040361][T10625] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 891.049162][T10625] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 891.058426][T10625] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 891.068168][T10625] usb 4-1: config 250 has no interface number 0 [ 891.074594][T10625] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 891.086841][T10625] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 891.098846][T10625] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 891.109797][T10625] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 891.133846][T10625] usb 4-1: config 250 interface 228 has no altsetting 0 [ 891.155306][T10625] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 891.174605][T10625] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 891.200106][T10625] usb 4-1: Product: syz [ 891.207288][T10625] usb 4-1: SerialNumber: syz [ 891.236010][T10625] hub 4-1:250.228: bad descriptor, ignoring hub [ 891.252258][T10625] hub: probe of 4-1:250.228 failed with error -5 [ 891.990506][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 891.990522][ T27] audit: type=1326 audit(1764120344.370:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522258f749 code=0x7ffc0000 [ 892.215938][ T27] audit: type=1326 audit(1764120344.390:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.276791][ T27] audit: type=1326 audit(1764120344.390:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.441386][T14596] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0 [ 892.456670][ T27] audit: type=1326 audit(1764120344.390:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.601152][ T27] audit: type=1326 audit(1764120344.390:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.737223][ T27] audit: type=1326 audit(1764120344.390:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.815126][ T27] audit: type=1326 audit(1764120344.390:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.838828][ T27] audit: type=1326 audit(1764120344.390:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.887562][ T27] audit: type=1326 audit(1764120344.390:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 892.969220][ T27] audit: type=1326 audit(1764120344.390:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f522252b829 code=0x7ffc0000 [ 893.673968][ T7227] usb 4-1: USB disconnect, device number 28 [ 894.778235][T14623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 894.803914][T14623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 894.813791][T14623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 894.858617][T14623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 894.867098][T14623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 894.874694][T14623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 895.055248][T14625] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 895.675407][T14636] 9pnet_virtio: no channels available for device syz [ 896.391190][T14622] chnl_net:caif_netlink_parms(): no params data found [ 896.728622][T14622] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.750902][T14622] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.762883][T14622] bridge_slave_0: entered allmulticast mode [ 896.770912][T14622] bridge_slave_0: entered promiscuous mode [ 896.780854][T14622] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.788456][T14622] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.796005][T14622] bridge_slave_1: entered allmulticast mode [ 896.803191][T14622] bridge_slave_1: entered promiscuous mode [ 896.815331][T14650] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 896.882036][T14622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.894066][T14650] ieee802154 phy0 wpan0: encryption failed: -22 [ 896.908164][T14622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.924821][T10030] Bluetooth: hci1: command tx timeout [ 897.182794][T14622] team0: Port device team_slave_0 added [ 897.235141][T14622] team0: Port device team_slave_1 added [ 897.282324][T14622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.291984][T14622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.326867][T14622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.353705][T14622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.365366][T14622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.438779][T10625] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 897.454226][T14622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.596002][T14622] hsr_slave_0: entered promiscuous mode [ 897.618899][T14622] hsr_slave_1: entered promiscuous mode [ 897.633617][T10625] usb 5-1: Using ep0 maxpacket: 8 [ 897.658989][T10625] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 897.750515][T10625] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 897.853933][T10625] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 897.873670][T10625] usb 5-1: config 250 has no interface number 0 [ 897.890036][T10625] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 897.902198][T10625] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 897.917241][T10625] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.939190][T10625] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 898.010817][T10625] usb 5-1: config 250 interface 228 has no altsetting 0 [ 898.035592][T10625] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 898.063519][T10625] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 898.113581][T10625] usb 5-1: Product: syz [ 898.117839][T10625] usb 5-1: SerialNumber: syz [ 898.157172][T10625] hub 5-1:250.228: bad descriptor, ignoring hub [ 898.167473][T10625] hub: probe of 5-1:250.228 failed with error -5 [ 898.867178][T14622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 898.878946][T14622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 898.899163][T14622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 898.921480][T14622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 899.005322][T10030] Bluetooth: hci1: command tx timeout [ 899.105286][T14622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.132859][T14622] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.148168][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.155392][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.208697][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.216058][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.252854][T14622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.801863][T14622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.980899][T14622] veth0_vlan: entered promiscuous mode [ 899.993870][T14676] 9pnet_virtio: no channels available for device syz [ 900.038110][T14622] veth1_vlan: entered promiscuous mode [ 900.195540][T14622] veth0_macvtap: entered promiscuous mode [ 900.262746][T14622] veth1_macvtap: entered promiscuous mode [ 900.364750][T10630] usb 5-1: USB disconnect, device number 28 [ 900.406411][T14622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.699510][T14622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.414487][T10030] Bluetooth: hci1: command tx timeout [ 901.488108][T14622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.497290][T14622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.511207][T14622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.520155][T14622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.807459][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.833538][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.017127][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.034446][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.483748][T10030] Bluetooth: hci1: command tx timeout [ 903.858551][T14705] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 903.894125][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2313'. [ 904.213591][ T788] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 906.423556][ T7227] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 906.613699][ T7227] usb 5-1: Using ep0 maxpacket: 8 [ 906.621415][ T7227] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 906.634925][ T7227] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 906.655986][ T7227] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 906.665661][ T7227] usb 5-1: config 250 has no interface number 0 [ 906.672278][ T7227] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 906.688926][ T7227] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 906.701123][ T7227] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 906.712772][ T7227] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 906.724538][ T7227] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 906.741543][ T7227] usb 5-1: config 250 interface 228 has no altsetting 0 [ 906.756031][ T7227] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 906.765433][ T7227] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 906.785105][ T7227] usb 5-1: Product: syz [ 906.789523][ T7227] usb 5-1: SerialNumber: syz [ 906.802048][ T7227] hub 5-1:250.228: bad descriptor, ignoring hub [ 906.840019][ T7227] hub: probe of 5-1:250.228 failed with error -5 [ 907.018777][ T7227] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 907.104884][ T7227] usb 5-1: USB disconnect, device number 29 [ 907.167052][ T7227] usblp0: removed [ 908.643822][ T7227] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 908.663819][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 908.813617][ T7227] usb 5-1: device descriptor read/64, error -32 [ 909.001261][T14754] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 909.084161][ T7227] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 909.245688][ T7227] usb 5-1: device descriptor read/64, error -71 [ 909.374425][ T7227] usb usb5-port1: attempt power cycle [ 909.523582][T12830] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 909.704361][T12830] usb 2-1: Using ep0 maxpacket: 8 [ 909.726807][T12830] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 909.754102][T12830] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 909.772994][T12830] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 909.792958][ T7227] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 909.804179][T12830] usb 2-1: config 250 has no interface number 0 [ 909.834661][T12830] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 909.853877][T12830] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 909.865141][ T7227] usb 5-1: device descriptor read/8, error -71 [ 909.874203][T12830] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.893606][T12830] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 909.904598][T12830] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 909.923558][T12830] usb 2-1: config 250 interface 228 has no altsetting 0 [ 909.998547][T12830] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 910.013536][T12830] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 910.032324][T12830] usb 2-1: Product: syz [ 910.038989][T12830] usb 2-1: SerialNumber: syz [ 910.088383][T12830] hub 2-1:250.228: bad descriptor, ignoring hub [ 910.172525][ T7227] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 910.193649][T12830] hub: probe of 2-1:250.228 failed with error -5 [ 910.225364][ T7227] usb 5-1: device descriptor read/8, error -71 [ 910.379111][ T7227] usb usb5-port1: unable to enumerate USB device [ 911.161931][T12830] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 30 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 911.864762][T12830] usb 2-1: USB disconnect, device number 30 [ 911.890681][T12830] usblp0: removed [ 913.023130][T14784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2340'. [ 913.459726][T12830] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 913.993950][T12830] usb 2-1: Using ep0 maxpacket: 8 [ 914.008061][T12830] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 914.021521][T12830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.031927][T12830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 914.043067][T12830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 914.073926][T12830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.104200][T12830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 914.114081][T12830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.503887][ T5857] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 914.713532][ T5857] usb 7-1: Using ep0 maxpacket: 8 [ 914.730570][ T5857] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 914.741239][ T5857] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 914.767898][ T5857] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 914.777727][ T5857] usb 7-1: config 250 has no interface number 0 [ 914.784617][ T5857] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 914.796705][ T5857] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 914.818463][ T5857] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 914.854581][ T5857] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 914.865554][ T5857] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 914.879368][ T5857] usb 7-1: config 250 interface 228 has no altsetting 0 [ 914.888590][ T5857] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 914.898210][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 914.906597][ T5857] usb 7-1: Product: syz [ 914.910975][ T5857] usb 7-1: SerialNumber: syz [ 914.919777][T14804] usbtmc 2-1:16.0: simple control status returned d7 [ 915.111983][ T5857] hub 7-1:250.228: bad descriptor, ignoring hub [ 915.123144][T10625] usb 2-1: USB disconnect, device number 31 [ 915.145215][ T5857] hub: probe of 7-1:250.228 failed with error -5 [ 915.532421][ T5857] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 915.676852][ T5857] usb 7-1: USB disconnect, device number 24 [ 915.695761][ T5857] usblp0: removed [ 918.343705][T12830] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 918.513972][T12830] usb 4-1: device descriptor read/64, error -71 [ 918.793854][T12830] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 919.187676][T14843] netlink: 'syz.6.2358': attribute type 4 has an invalid length. [ 919.224419][T14843] netlink: 'syz.6.2358': attribute type 4 has an invalid length. [ 920.162717][T14843] syz.6.2358 (14843) used greatest stack depth: 20104 bytes left [ 920.321423][T14855] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 920.331647][T14855] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 920.473264][T14857] 9pnet_virtio: no channels available for device syz [ 920.513581][ T7227] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 920.717433][ T7227] usb 5-1: Using ep0 maxpacket: 8 [ 920.726446][ T7227] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 920.743530][ T7227] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 920.763524][ T7227] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 920.772651][ T7227] usb 5-1: config 250 has no interface number 0 [ 920.803592][ T7227] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 920.841691][ T7227] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 920.874287][ T7227] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.903011][ T7227] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 920.928679][ T7227] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 920.965707][ T7227] usb 5-1: config 250 interface 228 has no altsetting 0 [ 920.982901][ T7227] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 920.996133][ T7227] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 921.013883][ T7227] usb 5-1: Product: syz [ 921.022877][ T7227] usb 5-1: SerialNumber: syz [ 921.042127][ T7227] hub 5-1:250.228: bad descriptor, ignoring hub [ 921.050956][ T7227] hub: probe of 5-1:250.228 failed with error -5 [ 921.173778][ T5857] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 921.255790][ T7227] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 34 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 921.317017][ T7227] usb 5-1: USB disconnect, device number 34 [ 921.352955][ T7227] usblp0: removed [ 921.365179][ T5857] usb 7-1: device descriptor read/64, error -71 [ 921.663855][ T5857] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 921.837157][ T5857] usb 7-1: device descriptor read/64, error -71 [ 921.973840][ T5857] usb usb7-port1: attempt power cycle [ 924.344754][T14889] 9pnet_virtio: no channels available for device syz [ 926.513786][T10630] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 926.723581][T10630] usb 7-1: Using ep0 maxpacket: 8 [ 926.736282][T10630] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 926.753574][T10630] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 926.767700][T10630] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 926.795362][T10630] usb 7-1: config 250 has no interface number 0 [ 926.808894][T10630] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 926.833132][T10630] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 926.854623][T10630] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 926.874046][T10630] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 926.884786][T10630] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 926.898589][T10630] usb 7-1: config 250 interface 228 has no altsetting 0 [ 926.908691][T10630] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 926.918141][T10630] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 926.927567][T10630] usb 7-1: Product: syz [ 926.932020][T10630] usb 7-1: SerialNumber: syz [ 926.943587][T10625] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 926.956326][T10630] hub 7-1:250.228: bad descriptor, ignoring hub [ 926.965422][T10630] hub: probe of 7-1:250.228 failed with error -5 [ 927.113712][T10625] usb 2-1: device descriptor read/64, error -71 [ 927.164758][T10630] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 927.218002][T10630] usb 7-1: USB disconnect, device number 28 [ 927.240383][T10630] usblp0: removed [ 927.395072][T10625] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 927.553577][T10625] usb 2-1: device descriptor read/64, error -71 [ 927.803809][T10625] usb usb2-port1: attempt power cycle [ 928.347846][T10625] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 928.430685][T10625] usb 2-1: device descriptor read/8, error -71 [ 928.723943][T10625] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 928.777813][T10625] usb 2-1: device descriptor read/8, error -71 [ 928.854059][T10030] Bluetooth: hci4: unexpected event for opcode 0x080d [ 928.913732][T10625] usb usb2-port1: unable to enumerate USB device [ 932.063996][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.070577][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.811778][T14623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 932.824222][T14623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 932.833607][T14623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 932.843193][T14623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 932.873836][T14623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 932.893731][T14623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.053819][T10625] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 934.195966][T14964] chnl_net:caif_netlink_parms(): no params data found [ 934.257353][T10625] usb 5-1: device descriptor read/64, error -71 [ 934.553928][T10625] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 934.607922][T14964] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.633752][T14964] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.664758][T14964] bridge_slave_0: entered allmulticast mode [ 934.674109][T14964] bridge_slave_0: entered promiscuous mode [ 934.686309][T14964] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.696841][T14964] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.705855][T14964] bridge_slave_1: entered allmulticast mode [ 934.715276][T14964] bridge_slave_1: entered promiscuous mode [ 934.763941][T10625] usb 5-1: device descriptor read/64, error -71 [ 934.837895][T14988] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 934.844500][T14988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 934.868671][T14964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.888059][T10625] usb usb5-port1: attempt power cycle [ 934.911234][T14964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.925683][T14623] Bluetooth: hci2: command tx timeout [ 934.952631][ T11] tipc: Left network mode [ 934.968017][T14988] vhci_hcd vhci_hcd.0: Device attached [ 935.097789][T14964] team0: Port device team_slave_0 added [ 935.134641][T14989] vhci_hcd: connection closed [ 935.135077][ T59] vhci_hcd: stop threads [ 935.153481][ T59] vhci_hcd: release socket [ 935.187597][ T59] vhci_hcd: disconnect device [ 935.243880][T12830] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 935.251375][T12830] usb 45-1: enqueue for inactive port 0 [ 935.266753][T14964] team0: Port device team_slave_1 added [ 935.343683][T12830] vhci_hcd: vhci_device speed not set [ 935.425147][T10625] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 935.559188][T14964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.596339][T14964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.628128][T10625] usb 5-1: device descriptor read/8, error -71 [ 935.703489][T14964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.772987][T14964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.781891][T14964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.864634][T14964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.933772][T10625] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 935.974439][T10625] usb 5-1: device descriptor read/8, error -71 [ 936.101091][T10625] usb usb5-port1: unable to enumerate USB device [ 936.126775][T14964] hsr_slave_0: entered promiscuous mode [ 936.150937][T14964] hsr_slave_1: entered promiscuous mode [ 936.168515][T14964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.195465][T14964] Cannot create hsr debugfs directory [ 937.004384][T14623] Bluetooth: hci2: command tx timeout [ 939.093584][T14623] Bluetooth: hci2: command tx timeout [ 939.534979][ T11] hsr_slave_0: left promiscuous mode [ 939.568834][ T11] hsr_slave_1: left promiscuous mode [ 939.596520][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.610644][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.651984][ T11] bridge_slave_1: left allmulticast mode [ 939.663558][ T11] bridge_slave_1: left promiscuous mode [ 939.669418][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.695820][ T11] bridge_slave_0: left allmulticast mode [ 939.701560][ T11] bridge_slave_0: left promiscuous mode [ 939.733368][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.953804][T15038] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 940.235515][T12830] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 940.403713][T12830] usb 5-1: device descriptor read/64, error -71 [ 940.693755][T12830] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 940.889782][T12830] usb 5-1: device descriptor read/64, error -71 [ 941.013972][T12830] usb usb5-port1: attempt power cycle [ 941.163773][T14623] Bluetooth: hci2: command tx timeout [ 941.425008][T12830] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 941.460241][T12830] usb 5-1: device descriptor read/8, error -71 [ 941.739598][T12830] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 941.770580][ T11] bond2 (unregistering): Released all slaves [ 941.779183][T12830] usb 5-1: device descriptor read/8, error -71 [ 941.903776][T12830] usb usb5-port1: unable to enumerate USB device [ 941.937291][ T11] bond1 (unregistering): Released all slaves [ 942.548286][ T11] team0 (unregistering): Port device team_slave_1 removed [ 942.615200][ T11] team0 (unregistering): Port device team_slave_0 removed [ 942.680205][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.751676][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.738919][ T11] bond0 (unregistering): Released all slaves [ 945.302635][T14964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.333230][T14964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.384761][T14964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 945.424350][T14964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 945.603536][T10633] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 945.747150][T14964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.769809][T10633] usb 5-1: device descriptor read/64, error -71 [ 945.826251][T14964] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.895310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.902588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.986784][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.994032][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.062996][T15106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 946.098957][T10633] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 946.200020][T14964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.283801][T10633] usb 5-1: device descriptor read/64, error -71 [ 946.415790][T10633] usb usb5-port1: attempt power cycle [ 946.868379][T10633] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 946.915162][T10633] usb 5-1: device descriptor read/8, error -71 [ 947.064251][T14964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.208353][T10633] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 947.275033][T10633] usb 5-1: device descriptor read/8, error -71 [ 947.294086][T14964] veth0_vlan: entered promiscuous mode [ 947.368620][T14964] veth1_vlan: entered promiscuous mode [ 947.423845][T10633] usb usb5-port1: unable to enumerate USB device [ 947.510418][T14964] veth0_macvtap: entered promiscuous mode [ 947.568197][T14964] veth1_macvtap: entered promiscuous mode [ 947.654473][T14964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.723711][T14964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.764811][T14964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.787473][T14964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.833625][T14964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.860036][T14964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.891753][T14964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.918893][T14964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.927908][T14964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.958636][T14964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.232453][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.278918][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.428248][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.465016][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.084110][ T7227] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 949.174723][T15153] ubi0: attaching mtd0 [ 949.220421][T15153] ubi0: scanning is finished [ 949.264492][T15153] ubi0: empty MTD device detected [ 949.273568][ T7227] usb 2-1: Using ep0 maxpacket: 8 [ 949.285299][ T7227] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 949.304421][ T7227] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 949.313023][ T7227] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 949.343830][ T7227] usb 2-1: config 250 has no interface number 0 [ 949.363845][ T7227] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 949.461521][ T7227] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 949.517482][ T7227] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 949.543718][T15153] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 949.551458][T15153] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 949.559353][T15153] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 949.568217][T15153] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 949.578769][T15153] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 949.589029][T15153] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 949.604340][T15153] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2645439038 [ 949.616886][T15153] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 949.633831][T15166] ubi0: background thread "ubi_bgt0d" started, PID 15166 [ 949.650556][T15161] ubi0: detaching mtd0 [ 949.688969][ T7227] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 949.711506][ T7227] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 949.758447][ T7227] usb 2-1: config 250 interface 228 has no altsetting 0 [ 949.779101][T15161] ubi0: mtd0 is detached [ 949.799679][ T7227] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 949.840032][ T7227] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 949.904949][ T7227] usb 2-1: Product: syz [ 949.924923][ T7227] usb 2-1: SerialNumber: syz [ 949.969958][ T7227] hub 2-1:250.228: bad descriptor, ignoring hub [ 949.993979][ T7227] hub: probe of 2-1:250.228 failed with error -5 [ 950.173810][ T7227] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 950.265770][ T7227] usb 2-1: USB disconnect, device number 36 [ 950.301095][ T7227] usblp0: removed [ 951.905350][T15202] qnx6: unable to read the first superblock [ 952.136602][T10633] IPVS: starting estimator thread 0... [ 952.223789][T15203] IPVS: using max 26 ests per chain, 62400 per kthread [ 952.432800][T15209] syzkaller0: entered promiscuous mode [ 952.466027][T15209] syzkaller0: entered allmulticast mode [ 954.533600][ T5857] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 954.763625][ T5857] usb 4-1: device descriptor read/64, error -71 [ 954.926346][T15291] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.934194][T15291] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.984050][T10633] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 955.054035][ T5857] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 955.173558][T10633] usb 5-1: Using ep0 maxpacket: 8 [ 955.186801][T10633] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 955.203934][T10633] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 955.214146][ T5857] usb 4-1: device descriptor read/64, error -71 [ 955.222490][T10633] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 955.242646][T10633] usb 5-1: config 250 has no interface number 0 [ 955.261960][T10633] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 955.275467][T10633] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 955.286721][T10633] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 955.297813][T10633] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 955.308778][T10633] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 955.331010][T10633] usb 5-1: config 250 interface 228 has no altsetting 0 [ 955.341280][T10633] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 955.352903][ T5857] usb usb4-port1: attempt power cycle [ 955.357631][T10633] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 955.369718][T10633] usb 5-1: Product: syz [ 955.379528][T10633] usb 5-1: SerialNumber: syz [ 955.392102][T10633] hub 5-1:250.228: bad descriptor, ignoring hub [ 955.407751][T10633] hub: probe of 5-1:250.228 failed with error -5 [ 955.546086][T15291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.585716][T15291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.613072][T10633] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 47 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 955.656645][T10633] usb 5-1: USB disconnect, device number 47 [ 955.683324][T10633] usblp0: removed [ 955.794533][ T5857] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 955.835143][ T5857] usb 4-1: device descriptor read/8, error -71 [ 955.870117][T15291] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.881390][T15291] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.897649][T15291] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.909926][T15291] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.113936][ T5857] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 956.181143][ T5857] usb 4-1: device descriptor read/8, error -71 [ 956.317277][ T5857] usb usb4-port1: unable to enumerate USB device [ 956.654799][T15320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 956.771418][T15318] smc: net device bond0 applied user defined pnetid SYZ2 [ 957.538753][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'. [ 958.433645][T12490] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 958.633622][T12490] usb 7-1: Using ep0 maxpacket: 8 [ 958.644498][T12490] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 958.678717][T12490] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 958.714381][T12490] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 958.724593][T12490] usb 7-1: config 250 has no interface number 0 [ 958.731355][T12490] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 958.758848][T12490] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 958.775398][T12490] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 958.796386][T12490] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 958.817832][T12490] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 958.831902][T12490] usb 7-1: config 250 interface 228 has no altsetting 0 [ 958.851323][T12490] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 958.863803][T12490] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 958.872538][T12490] usb 7-1: Product: syz [ 958.877981][T12490] usb 7-1: SerialNumber: syz [ 958.920254][T12490] hub 7-1:250.228: bad descriptor, ignoring hub [ 958.946743][T12490] hub: probe of 7-1:250.228 failed with error -5 [ 959.134100][T12490] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 959.237472][T12490] usb 7-1: USB disconnect, device number 29 [ 959.277565][T12490] usblp0: removed [ 959.532158][T15349] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.540044][T15349] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.808975][T15363] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 959.815591][T15363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.824819][T15363] vhci_hcd vhci_hcd.0: Device attached [ 960.123639][T12490] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 960.331545][T15364] vhci_hcd: connection closed [ 960.346183][T15268] vhci_hcd: stop threads [ 960.913879][T15268] vhci_hcd: release socket [ 960.987179][T15268] vhci_hcd: disconnect device [ 961.393610][T10572] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 965.128944][T15349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.206223][T15349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.374143][ T5844] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 965.564048][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 965.571552][ T5844] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 965.584272][ T5844] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 965.592984][ T5844] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 965.613768][ T5844] usb 5-1: config 250 has no interface number 0 [ 965.620195][ T5844] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 965.652973][ T5844] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 965.665756][ T5844] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 965.703639][ T5844] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 965.716547][ T5844] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 965.751130][ T5844] usb 5-1: config 250 interface 228 has no altsetting 0 [ 965.766116][ T5844] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 965.775732][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 965.814373][ T5844] usb 5-1: Product: syz [ 965.824254][ T5844] usb 5-1: SerialNumber: syz [ 965.847338][ T5844] hub 5-1:250.228: bad descriptor, ignoring hub [ 965.874576][ T5844] hub: probe of 5-1:250.228 failed with error -5 [ 966.001355][T15349] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.011142][T15349] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.021568][T15349] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.030873][T15349] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.053837][T12490] vhci_hcd: vhci_device speed not set [ 966.078469][ T5844] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 966.134900][ T5844] usb 5-1: USB disconnect, device number 48 [ 966.150602][ T5844] usblp0: removed [ 967.073834][T10626] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 967.153137][T15416] bond0: entered promiscuous mode [ 967.161791][T15416] bond_slave_0: entered promiscuous mode [ 967.176894][T15416] bond_slave_1: entered promiscuous mode [ 967.191823][T15416] dummy0: entered promiscuous mode [ 967.201127][T15416] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 967.218868][T15416] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 967.231178][T15416] hsr1: entered promiscuous mode [ 967.241534][T15416] hsr1: entered allmulticast mode [ 967.258179][T15416] bond0: entered allmulticast mode [ 967.263800][T10626] usb 7-1: device descriptor read/64, error -71 [ 967.275551][T15416] bond_slave_0: entered allmulticast mode [ 967.281654][T15416] bond_slave_1: entered allmulticast mode [ 967.293525][T15416] dummy0: entered allmulticast mode [ 968.293523][T10626] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 968.363603][T10030] Bluetooth: hci2: command tx timeout [ 968.683783][T10626] usb 7-1: device descriptor read/64, error -71 [ 968.783971][T15423] syzkaller0: entered promiscuous mode [ 968.789502][T15423] syzkaller0: entered allmulticast mode [ 968.813799][T10626] usb usb7-port1: attempt power cycle [ 969.006096][T15428] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 969.253725][T10626] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 969.314902][T10626] usb 7-1: device descriptor read/8, error -71 [ 969.431469][T15438] 9pnet_virtio: no channels available for device syz [ 969.538639][T15440] syz_tun: entered allmulticast mode [ 969.645251][T10626] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 969.653751][ T5844] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 969.863571][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 969.893519][T10626] usb 7-1: device not accepting address 34, error -71 [ 969.910825][ T5844] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 969.934275][T10626] usb usb7-port1: unable to enumerate USB device [ 969.943479][ T5844] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 969.962563][ T5844] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 969.992783][ T5844] usb 2-1: config 250 has no interface number 0 [ 970.012241][ T5844] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 970.012284][ T5844] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 970.012312][ T5844] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 970.012343][ T5844] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 970.012369][ T5844] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 970.012398][ T5844] usb 2-1: config 250 interface 228 has no altsetting 0 [ 970.014463][ T5844] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 970.014495][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 970.014516][ T5844] usb 2-1: Product: syz [ 970.014532][ T5844] usb 2-1: SerialNumber: syz [ 970.036363][ T5844] hub 2-1:250.228: bad descriptor, ignoring hub [ 970.036395][ T5844] hub: probe of 2-1:250.228 failed with error -5 [ 970.256320][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2484'. [ 970.728676][ T5844] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 971.036136][ T5844] usb 2-1: USB disconnect, device number 37 [ 971.039130][ T5844] usblp0: removed [ 971.136369][T15453] tty tty2: ldisc open failed (-12), clearing slot 1 [ 971.534596][T15458] bridge_slave_0: left allmulticast mode [ 971.563571][T15458] bridge_slave_0: left promiscuous mode [ 971.593919][T15458] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.692608][T15458] bridge_slave_1: left allmulticast mode [ 971.713717][T15458] bridge_slave_1: left promiscuous mode [ 971.719631][T15458] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.791775][T15458] bond0: (slave bond_slave_0): Releasing backup interface [ 971.876623][T15458] bond0: (slave bond_slave_1): Releasing backup interface [ 971.929176][T15458] team0: Port device team_slave_0 removed [ 971.981009][T15458] team0: Port device team_slave_1 removed [ 972.018176][T15458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.046738][T15458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.079419][T15459] vlan0: entered promiscuous mode [ 972.120058][T15460] tipc: Enabled bearer , priority 0 [ 973.237644][T12490] tipc: Node number set to 3296880662 [ 973.743605][T12490] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 973.948288][T12490] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 973.978629][T12490] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 974.013650][T12490] usb 4-1: config 0 interface 0 has no altsetting 0 [ 974.034144][T12490] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 974.052393][T12490] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 974.069452][T12490] usb 4-1: Product: syz [ 974.073908][T12490] usb 4-1: Manufacturer: syz [ 974.078646][T12490] usb 4-1: SerialNumber: syz [ 974.094861][T12490] usb 4-1: config 0 descriptor?? [ 974.114511][T12490] hub 4-1:0.0: bad descriptor, ignoring hub [ 974.120523][T12490] hub: probe of 4-1:0.0 failed with error -5 [ 974.134340][T12490] usb 4-1: selecting invalid altsetting 0 [ 974.233544][ T5844] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 974.433572][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 974.441260][ T5844] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 974.455941][ T5844] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 974.473531][ T5844] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 974.493366][ T5844] usb 5-1: config 250 has no interface number 0 [ 974.506645][ T5844] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 974.533253][ T5844] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 974.565042][ T5844] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 974.592622][ T5844] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 974.620289][ T5844] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 974.663257][ T5844] usb 5-1: config 250 interface 228 has no altsetting 0 [ 974.682614][ T5844] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 974.696125][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 974.708381][ T5844] usb 5-1: Product: syz [ 974.712743][ T5844] usb 5-1: SerialNumber: syz [ 974.806382][ T5844] hub 5-1:250.228: bad descriptor, ignoring hub [ 974.831307][ T5844] hub: probe of 5-1:250.228 failed with error -5 [ 975.036530][ T5844] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 975.110343][ T5844] usb 5-1: USB disconnect, device number 49 [ 975.148664][ T5844] usblp0: removed [ 975.944211][T15493] 9pnet_virtio: no channels available for device syz [ 980.007302][T12490] usb 4-1: USB disconnect, device number 36 [ 982.774227][ T5844] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 982.983532][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 983.003568][ T5844] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 983.011909][ T5844] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 983.041485][ T5844] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 983.057342][ T5844] usb 2-1: config 250 has no interface number 0 [ 983.073180][ T5844] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 983.118225][ T5844] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 983.199066][ T5844] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 983.279947][ T5844] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 983.367581][ T5844] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 983.501956][ T5844] usb 2-1: config 250 interface 228 has no altsetting 0 [ 983.599270][ T5844] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 983.684964][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 983.790232][ T5844] usb 2-1: Product: syz [ 983.852234][ T5844] usb 2-1: SerialNumber: syz [ 984.121769][ T5844] hub 2-1:250.228: bad descriptor, ignoring hub [ 984.202234][ T5844] hub: probe of 2-1:250.228 failed with error -5 [ 984.407491][ T5844] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 984.495924][ T5844] usb 2-1: USB disconnect, device number 38 [ 984.523096][ T5844] usblp0: removed [ 984.744358][T15563] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2512'. [ 985.763502][T10626] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 986.554970][T10626] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 987.554463][T15574] 9pnet_fd: Insufficient options for proto=fd [ 988.153802][T10030] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 988.162776][T10030] Bluetooth: hci1: Injecting HCI hardware error event [ 988.177045][T10030] Bluetooth: hci1: hardware error 0x00 [ 988.369797][T15570] Process accounting resumed [ 988.424514][T10626] usb 7-1: config 0 has no interface number 0 [ 988.430736][T10626] usb 7-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 988.449174][T10626] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.489470][T10626] usb 7-1: config 0 descriptor?? [ 988.824016][T15580] netlink: 'syz.4.2516': attribute type 14 has an invalid length. [ 989.478597][T10626] usb 7-1: can't set config #0, error -71 [ 989.531147][T10626] usb 7-1: USB disconnect, device number 35 [ 990.074532][T15595] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 990.081221][T15595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 990.118011][T15595] vhci_hcd vhci_hcd.0: Device attached [ 990.168803][T15595] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 990.175483][T15595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 990.248011][T15595] vhci_hcd vhci_hcd.0: Device attached [ 990.257287][T15601] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 990.263947][T15601] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 990.310514][T15595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.344883][T15601] vhci_hcd vhci_hcd.0: Device attached [ 990.384078][T15606] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 990.390756][T15606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 990.403584][T12490] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 990.465114][T15606] vhci_hcd vhci_hcd.0: Device attached [ 990.505164][T15601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.563639][T15595] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(24) [ 990.570330][T15595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 990.603563][T10030] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 990.643810][T15595] vhci_hcd vhci_hcd.0: Device attached [ 990.673592][T15601] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(30) [ 990.680276][T15601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 990.734844][T15595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 990.737037][T15601] vhci_hcd vhci_hcd.0: Device attached [ 990.790486][T15596] vhci_hcd: connection reset by peer [ 990.796253][T15599] vhci_hcd: connection closed [ 990.796493][T15602] vhci_hcd: connection closed [ 990.804145][T15608] vhci_hcd: connection closed [ 990.805550][T15611] vhci_hcd: connection closed [ 990.811294][T15281] vhci_hcd: stop threads [ 990.839842][T15281] vhci_hcd: release socket [ 990.851176][T15281] vhci_hcd: disconnect device [ 990.861010][T15613] vhci_hcd: connection closed [ 990.873972][T15281] vhci_hcd: stop threads [ 990.883144][T15281] vhci_hcd: release socket [ 990.893258][T15281] vhci_hcd: disconnect device [ 990.903737][T15281] vhci_hcd: stop threads [ 990.908054][T15281] vhci_hcd: release socket [ 990.922800][T15281] vhci_hcd: disconnect device [ 990.928969][T15281] vhci_hcd: stop threads [ 990.943536][T15281] vhci_hcd: release socket [ 990.948327][T15281] vhci_hcd: disconnect device [ 990.963867][T15281] vhci_hcd: stop threads [ 990.968186][T15281] vhci_hcd: release socket [ 990.983815][T15281] vhci_hcd: disconnect device [ 990.989181][T15281] vhci_hcd: stop threads [ 990.998972][T15281] vhci_hcd: release socket [ 991.003675][T15281] vhci_hcd: disconnect device [ 991.319257][T15620] syzkaller0: entered promiscuous mode [ 991.325196][T15620] syzkaller0: entered allmulticast mode [ 992.171360][T15628] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.214454][T15628] ksmbd: Unknown IPC event: 12, ignore. [ 993.526035][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.532386][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.821093][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.832423][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.840102][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.847733][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.855255][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.863825][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.871332][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.878927][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.920007][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.938339][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.954036][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.972004][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 994.983525][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 995.013504][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 995.021023][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 995.063541][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 995.071064][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 995.123482][T10626] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 995.160771][T10626] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 995.699548][T12490] vhci_hcd: vhci_device speed not set [ 996.805823][T15684] netlink: 'syz.4.2538': attribute type 13 has an invalid length. [ 996.822437][T15684] netlink: 'syz.4.2538': attribute type 17 has an invalid length. [ 996.888587][T15686] kvm: pic: non byte read [ 996.893050][T15686] kvm: pic: non byte read [ 996.925153][T15686] kvm: pic: non byte read [ 996.944837][T15686] kvm: pic: non byte read [ 996.976403][T15686] kvm: pic: non byte read [ 996.989148][T15686] kvm: pic: non byte read [ 997.042509][T15686] kvm: pic: non byte read [ 997.047323][T15686] kvm: pic: non byte read [ 997.051780][T15686] kvm: pic: non byte read [ 997.059727][T15686] kvm: pic: non byte read [ 997.455689][ T5844] usb usb42-port1: attempt power cycle [ 997.764086][T15684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.772827][T15684] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.785684][T15684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 997.810216][T15687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.847154][T15687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.873591][T15687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.882345][T15687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.913865][T15687] geneve2: entered promiscuous mode [ 997.921491][T15687] geneve2: entered allmulticast mode [ 998.124490][ T5844] usb usb42-port1: unable to enumerate USB device [ 1000.922208][T15738] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1003.380760][T15728] netlink: 'syz.1.2554': attribute type 1 has an invalid length. [ 1003.389233][T15728] netlink: 'syz.1.2554': attribute type 4 has an invalid length. [ 1003.397103][T15728] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2554'. [ 1004.134989][T15264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.247780][T15264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.642687][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 1005.424126][T15754] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1008.161075][T15772] netlink: 'syz.4.2564': attribute type 4 has an invalid length. [ 1008.202162][T15772] netlink: 'syz.4.2564': attribute type 4 has an invalid length. [ 1009.585317][T15806] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1009.890405][T15806] fuse: Bad value for 'user_id' [ 1010.008748][T15815] 9pnet_virtio: no channels available for device syz [ 1012.963948][T15836] siw: device registration error -23 [ 1014.943888][T15846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2584'. [ 1016.743496][T15865] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1021.319393][T15887] overlay: Unknown parameter 'obj_type' [ 1021.532327][T15892] 9pnet_virtio: no channels available for device syz [ 1023.057087][T15908] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.066279][T15908] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.076133][T15908] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.085708][T15908] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.143244][T15912] syzkaller0: entered promiscuous mode [ 1023.148828][T15912] syzkaller0: entered allmulticast mode [ 1023.176983][T15912] 0: reclassify loop, rule prio 0, protocol 800 [ 1023.521831][T15918] sit1: entered promiscuous mode [ 1023.528150][T15918] sit1: entered allmulticast mode [ 1023.558182][T15918] netlink: 'syz.6.2602': attribute type 1 has an invalid length. [ 1023.700029][T15923] capability: warning: `syz.6.2604' uses 32-bit capabilities (legacy support in use) [ 1025.004149][T15932] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1025.010750][T15932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1025.072317][T15936] overlayfs: failed to resolve './bus': -2 [ 1025.089159][T15932] vhci_hcd vhci_hcd.0: Device attached [ 1025.675654][T10572] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1026.089236][T15933] vhci_hcd: connection reset by peer [ 1026.099695][ T59] vhci_hcd: stop threads [ 1026.105854][ T59] vhci_hcd: release socket [ 1026.179838][ T59] vhci_hcd: disconnect device [ 1026.497680][T14623] Bluetooth: hci2: link tx timeout [ 1026.505019][T14623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1026.518268][T10030] Bluetooth: hci2: link tx timeout [ 1026.523713][T10030] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1026.535689][T10030] Bluetooth: hci2: link tx timeout [ 1026.541314][T10030] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1026.549231][T10030] Bluetooth: hci2: link tx timeout [ 1026.554945][T10030] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1026.712883][T10030] Bluetooth: hci2: link tx timeout [ 1026.718170][T10030] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1027.602811][T12827] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1027.830590][T12827] usb 4-1: Using ep0 maxpacket: 8 [ 1027.868689][T12827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.884823][T10030] Bluetooth: hci2: link tx timeout [ 1027.890051][T10030] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1027.912288][T12827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1027.950310][T12827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1027.980797][T12827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1028.023534][T12827] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1028.215784][T12827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.610255][T10030] Bluetooth: hci2: command 0x0406 tx timeout [ 1029.838871][T12827] hub 4-1:1.0: bad descriptor, ignoring hub [ 1029.937316][T12827] hub: probe of 4-1:1.0 failed with error -5 [ 1029.966396][T12827] cdc_wdm 4-1:1.0: skipping garbage [ 1029.979103][T12827] cdc_wdm 4-1:1.0: skipping garbage [ 1029.986643][T12827] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1030.001082][T12827] cdc_wdm 4-1:1.0: Unknown control protocol [ 1030.450547][T12827] usb 4-1: USB disconnect, device number 37 [ 1031.009939][T10572] vhci_hcd: vhci_device speed not set [ 1031.838162][T16011] bridge1: entered promiscuous mode [ 1032.019597][ T27] kauditd_printk_skb: 144 callbacks suppressed [ 1032.019648][ T27] audit: type=1800 audit(1764120740.130:264): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2629" name="bus" dev="overlay" ino=265 res=0 errno=0 [ 1035.738324][T16059] bridge_slave_0: left allmulticast mode [ 1035.738354][T16059] bridge_slave_0: left promiscuous mode [ 1035.738552][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.169559][T16064] 9pnet_virtio: no channels available for device syz [ 1036.840301][T16066] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1036.840376][T16066] overlayfs: overlapping lowerdir path [ 1036.913524][T16059] bridge_slave_1: left allmulticast mode [ 1036.913545][T16059] bridge_slave_1: left promiscuous mode [ 1036.913720][T16059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.302903][T16059] bond0: (slave bond_slave_0): Releasing backup interface [ 1038.364908][T16059] bond0: (slave bond_slave_1): Releasing backup interface [ 1038.513665][T16069] nvme_fabrics: missing parameter 'transport=%s' [ 1038.539144][T16069] nvme_fabrics: missing parameter 'nqn=%s' [ 1038.548421][T16059] team0: Port device team_slave_0 removed [ 1038.584342][T16059] team0: Port device team_slave_1 removed [ 1038.602532][T16059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.620829][T16059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.477203][T16088] ALSA: mixer_oss: invalid OSS volume '' [ 1039.485783][T16089] ALSA: mixer_oss: invalid OSS volume '' [ 1039.588928][T12490] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1039.721995][T16088] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1039.728597][T16088] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1039.736804][T16089] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1039.743348][T16089] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1039.808901][T12490] usb 7-1: Using ep0 maxpacket: 16 [ 1039.920333][T16088] vhci_hcd vhci_hcd.0: Device attached [ 1039.932423][T12490] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1040.037502][T16091] vhci_hcd: connection closed [ 1040.056811][T16089] vhci_hcd vhci_hcd.0: Device attached [ 1040.063030][T12490] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1040.178368][T10572] vhci_hcd: vhci_device speed not set [ 1040.209777][T15246] vhci_hcd: stop threads [ 1040.214072][T15246] vhci_hcd: release socket [ 1040.237460][T15246] vhci_hcd: disconnect device [ 1040.248913][T10633] vhci_hcd: vhci_device speed not set [ 1040.378783][T10572] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 1040.455433][T12490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.597539][T12490] usb 7-1: config 0 descriptor?? [ 1040.781245][T12490] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10 [ 1041.065130][ T5143] bcm5974 7-1:0.0: could not read from device [ 1041.117722][T12490] usb 7-1: USB disconnect, device number 36 [ 1041.124362][ T5143] bcm5974 7-1:0.0: could not read from device [ 1041.170685][T16090] vhci_hcd: connection reset by peer [ 1041.177442][ T5143] bcm5974 7-1:0.0: could not read from device [ 1041.189828][T15246] vhci_hcd: stop threads [ 1041.194119][T15246] vhci_hcd: release socket [ 1041.204072][T16086] bcm5974 7-1:0.0: could not read from device [ 1041.216487][T15246] vhci_hcd: disconnect device [ 1041.229078][ T5143] bcm5974 7-1:0.0: could not read from device [ 1041.278718][ T5844] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1041.488661][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 1041.495800][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.630757][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.731823][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.844394][ T5844] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1041.854003][T16107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1041.888711][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.920616][ T5844] usb 5-1: config 0 descriptor?? [ 1041.944022][ T5844] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 1042.011396][ T5143] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1042.097437][ T5143] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1042.160151][ T5143] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1042.188976][ T5844] usb 5-1: USB disconnect, device number 50 [ 1044.344028][T15264] tipc: Disabling bearer [ 1044.445896][T15264] tipc: Left network mode [ 1045.478334][T10572] vhci_hcd: vhci_device speed not set [ 1045.699309][T10030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.728469][T10030] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.768335][T10030] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.781783][T10030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.789602][T10030] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1045.796982][T10030] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1046.695964][T16156] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1046.702558][T16156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1046.724077][T16156] vhci_hcd vhci_hcd.0: Device attached [ 1046.832939][T16134] chnl_net:caif_netlink_parms(): no params data found [ 1047.018055][T10572] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 1047.248240][T16157] vhci_hcd: connection reset by peer [ 1047.258147][ T59] vhci_hcd: stop threads [ 1047.283187][ T59] vhci_hcd: release socket [ 1047.315222][ T59] vhci_hcd: disconnect device [ 1047.535403][T16180] ptrace attach of ""[16182] was attempted by "./syz-executor exec"[16180] [ 1047.595245][T16180] hub 8-0:1.0: USB hub found [ 1047.622764][T16180] hub 8-0:1.0: 1 port detected [ 1047.710634][T16134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.726088][T16134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.743160][T16134] bridge_slave_0: entered allmulticast mode [ 1047.761536][T16134] bridge_slave_0: entered promiscuous mode [ 1047.818031][T16134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.825192][T16134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.884554][T16134] bridge_slave_1: entered allmulticast mode [ 1047.885707][T14623] Bluetooth: hci3: command tx timeout [ 1047.929471][T16134] bridge_slave_1: entered promiscuous mode [ 1048.335625][T15264] hsr_slave_0: left promiscuous mode [ 1048.364414][T15264] hsr_slave_1: left promiscuous mode [ 1048.610926][T16194] 9pnet_virtio: no channels available for device syz [ 1049.983816][T14623] Bluetooth: hci3: command tx timeout [ 1050.080896][ T23] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1050.318047][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1050.334443][ T23] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.361913][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1050.430503][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1050.466411][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.520325][ T23] usbtmc 4-1:16.0: bulk endpoints not found [ 1052.049904][T14623] Bluetooth: hci3: command tx timeout [ 1052.197577][T10572] vhci_hcd: vhci_device speed not set [ 1052.798088][T15264] bond0 (unregistering): Released all slaves [ 1053.020512][T16134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.138351][T16134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.313223][T16134] team0: Port device team_slave_0 added [ 1053.356264][T16134] team0: Port device team_slave_1 added [ 1053.597619][T16134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.655784][T16134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.672057][T14623] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 1053.714508][T14623] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 1053.817229][T16134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.881236][T16134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.916776][T16134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.993959][T16134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.117515][T14623] Bluetooth: hci3: command tx timeout [ 1054.287393][T10572] usb 4-1: USB disconnect, device number 38 [ 1054.372406][T16134] hsr_slave_0: entered promiscuous mode [ 1054.422185][T16134] hsr_slave_1: entered promiscuous mode [ 1054.458090][T16134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.465690][T16134] Cannot create hsr debugfs directory [ 1054.922472][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.929063][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.156096][T16134] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1055.195941][T16134] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1055.278075][T16134] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1055.307459][T16134] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1055.646190][T16134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.850019][T16134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.884180][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.891386][ T6493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.998224][T16249] syz_tun: entered allmulticast mode [ 1056.017000][T16252] netlink: 'syz.4.2678': attribute type 39 has an invalid length. [ 1056.168229][T16252] syz_tun (unregistering): left allmulticast mode [ 1056.196252][T15253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.203466][T15253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.385770][T16278] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1057.505461][T16284] syzkaller0: entered promiscuous mode [ 1057.528888][T16284] syzkaller0: entered allmulticast mode [ 1057.602910][T16284] tipc: Enabled bearer , priority 0 [ 1057.633917][T16284] tipc: Resetting bearer [ 1057.696913][T16283] tipc: Resetting bearer [ 1057.718749][T14623] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1057.729336][T14623] Bluetooth: hci0: Injecting HCI hardware error event [ 1057.739016][T14623] Bluetooth: hci0: hardware error 0x00 [ 1057.818789][T16283] tipc: Disabling bearer [ 1057.839872][T16134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.032098][T16297] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1059.230290][T16134] veth0_vlan: entered promiscuous mode [ 1059.349636][T16134] veth1_vlan: entered promiscuous mode [ 1059.549705][T16134] veth0_macvtap: entered promiscuous mode [ 1059.621985][T16134] veth1_macvtap: entered promiscuous mode [ 1059.806562][T14623] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1059.811174][T16134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.925607][T16134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.988110][T16134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.018578][T16134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.063394][T16134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.106328][T16134] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.877531][T16324] loop9: detected capacity change from 0 to 7 [ 1061.400759][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 1061.400834][T16324] Dev loop9: unable to read RDB block 7 [ 1061.462867][T16324] loop9: unable to read partition table [ 1061.469493][T16324] loop9: partition table beyond EOD, truncated [ 1061.469675][T16323] bridge1: entered allmulticast mode [ 1061.475853][T16324] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1061.475853][T16324] ) failed (rc=-5) [ 1061.808218][T15281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.844294][T15281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.880648][T16329] overlayfs: failed to resolve './file0': -2 [ 1061.910075][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.948149][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.074804][T16341] block device autoloading is deprecated and will be removed. [ 1063.236150][T16341] syz.1.2689: attempt to access beyond end of device [ 1063.236150][T16341] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1064.640495][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2695'. [ 1064.671629][T16365] bridge1: entered allmulticast mode [ 1064.694197][T16365] loop9: detected capacity change from 0 to 7 [ 1065.275955][T16365] Dev loop9: unable to read RDB block 7 [ 1065.281786][T16365] loop9: unable to read partition table [ 1065.293230][T16365] loop9: partition table beyond EOD, truncated [ 1065.319247][T16365] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1065.319247][T16365] ) failed (rc=-5) [ 1065.886722][T16380] overlayfs: failed to resolve './file0': -2 [ 1067.385572][T16392] tipc: Started in network mode [ 1067.901807][T16392] tipc: Node identity ae63a723947c, cluster identity 4711 [ 1182.911774][ C1] ------------[ cut here ]------------ [ 1182.918821][ C1] WARNING: CPU: 1 PID: 16377 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 1182.929523][ C1] Modules linked in: [ 1182.933422][ C1] CPU: 1 PID: 16377 Comm: syz.3.2697 Not tainted syzkaller #0 [ 1182.940880][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1182.951033][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1182.957381][ C1] Code: ff ff ff 48 c7 c7 a0 24 ef 96 be 04 00 00 00 e8 da d0 6c 00 48 89 df b8 01 00 00 00 87 05 4c e4 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 51 d3 8c 74 47 48 c7 c0 ec c2 4a 8e 48 c1 e8 03 [ 1182.977000][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 1182.983082][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35140 RCX: ffffffff81704046 [ 1182.991061][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35140 [ 1182.999042][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 1183.007018][ C1] R10: dffffc0000000000 R11: fffffbfff2dde494 R12: 0000000000002904 [ 1183.015033][ C1] R13: 1ffff110171e79e2 R14: 0000000000000a02 R15: dffffc0000000000 [ 1183.023098][ C1] FS: 00007f9390fa06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1183.032031][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.038618][ C1] CR2: 000020000001b000 CR3: 000000002ecea000 CR4: 00000000003526e0 [ 1183.046603][ C1] Call Trace: [ 1183.050409][ C1] [ 1183.053262][ C1] rcu_core+0x612/0x1720 [ 1183.057516][ C1] ? lock_chain_count+0x20/0x20 [ 1183.062374][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1183.067863][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.073181][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1183.078454][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1183.083696][ C1] ? __run_timers+0x781/0x7d0 [ 1183.088429][ C1] ? __run_timers+0x74e/0x7d0 [ 1183.093126][ C1] ? detach_timer+0x2b0/0x2b0 [ 1183.097811][ C1] ? detach_timer+0x2b0/0x2b0 [ 1183.102500][ C1] ? lock_chain_count+0x20/0x20 [ 1183.107363][ C1] handle_softirqs+0x280/0x820 [ 1183.112168][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1183.116940][ C1] ? do_softirq+0x180/0x180 [ 1183.121448][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1183.126657][ C1] __irq_exit_rcu+0xc7/0x190 [ 1183.131253][ C1] ? irq_exit_rcu+0x20/0x20 [ 1183.135764][ C1] irq_exit_rcu+0x9/0x20 [ 1183.140009][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1183.145648][ C1] [ 1183.148589][ C1] [ 1183.151526][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.157601][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1183.163411][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4a a2 ee f6 48 89 df e8 62 74 ef f6 e8 fd 1a 13 f7 fb bf 01 00 00 00 32 96 e2 f6 65 8b 05 23 cd 8a 75 85 c0 74 02 5b c3 e8 00 b3 87 [ 1183.183025][ C1] RSP: 0018:ffffc9000479fc78 EFLAGS: 00000286 [ 1183.189098][ C1] RAX: bd851a91b8c92900 RBX: ffff8880624b3780 RCX: bd851a91b8c92900 [ 1183.197159][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 1183.205134][ C1] RBP: ffff8880624b3c18 R08: ffffffff8e4a8e2f R09: 1ffffffff1c951c5 [ 1183.213370][ C1] R10: dffffc0000000000 R11: fffffbfff1c951c6 R12: 1ffff1100c496783 [ 1183.221435][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 1183.229428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.234635][ C1] get_signal+0x11f5/0x1400 [ 1183.239170][ C1] arch_do_signal_or_restart+0x9c/0x7b0 [ 1183.244819][ C1] ? get_sigframe_size+0x20/0x20 [ 1183.249784][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1183.255272][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1183.260566][ C1] exit_to_user_mode_prepare+0xf6/0x180 [ 1183.266124][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1183.271588][ C1] do_syscall_64+0x61/0xb0 [ 1183.276039][ C1] ? clear_bhb_loop+0x40/0x90 [ 1183.280723][ C1] ? clear_bhb_loop+0x40/0x90 [ 1183.285426][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.291329][ C1] RIP: 0033:0x7f939018f747 [ 1183.295749][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1183.315452][ C1] RSP: 002b:00007f9390fa00e8 EFLAGS: 00000246 [ 1183.321525][ C1] RAX: 00000000000000ca RBX: 00007f93903e5fa8 RCX: 00007f939018f749 [ 1183.329511][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93903e5fa8 [ 1183.337487][ C1] RBP: 00007f93903e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.345551][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.353541][ C1] R13: 00007f93903e6038 R14: 00007ffd8b7a6c90 R15: 00007ffd8b7a6d78 [ 1183.361531][ C1] [ 1183.364556][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1183.372007][ C1] CPU: 1 PID: 16377 Comm: syz.3.2697 Not tainted syzkaller #0 [ 1183.379461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1183.389512][ C1] Call Trace: [ 1183.392796][ C1] [ 1183.395649][ C1] dump_stack_lvl+0x16c/0x230 [ 1183.400342][ C1] ? show_regs_print_info+0x20/0x20 [ 1183.405548][ C1] ? load_image+0x3b0/0x3b0 [ 1183.410104][ C1] panic+0x2c0/0x710 [ 1183.414010][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1183.418536][ C1] __warn+0x2e0/0x470 [ 1183.422523][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1183.428259][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1183.434001][ C1] report_bug+0x2be/0x4f0 [ 1183.438416][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1183.444145][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1183.449869][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 1183.455596][ C1] handle_bug+0xcf/0x120 [ 1183.459857][ C1] exc_invalid_op+0x1a/0x50 [ 1183.464373][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1183.469225][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1183.475561][ C1] Code: ff ff ff 48 c7 c7 a0 24 ef 96 be 04 00 00 00 e8 da d0 6c 00 48 89 df b8 01 00 00 00 87 05 4c e4 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 51 d3 8c 74 47 48 c7 c0 ec c2 4a 8e 48 c1 e8 03 [ 1183.495177][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 1183.501279][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35140 RCX: ffffffff81704046 [ 1183.509280][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35140 [ 1183.517260][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 1183.525239][ C1] R10: dffffc0000000000 R11: fffffbfff2dde494 R12: 0000000000002904 [ 1183.533215][ C1] R13: 1ffff110171e79e2 R14: 0000000000000a02 R15: dffffc0000000000 [ 1183.541281][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1183.547018][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1183.552745][ C1] rcu_core+0x612/0x1720 [ 1183.556992][ C1] ? lock_chain_count+0x20/0x20 [ 1183.561864][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1183.567362][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.572607][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1183.577883][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1183.583192][ C1] ? __run_timers+0x781/0x7d0 [ 1183.588051][ C1] ? __run_timers+0x74e/0x7d0 [ 1183.592971][ C1] ? detach_timer+0x2b0/0x2b0 [ 1183.597878][ C1] ? detach_timer+0x2b0/0x2b0 [ 1183.602906][ C1] ? lock_chain_count+0x20/0x20 [ 1183.607923][ C1] handle_softirqs+0x280/0x820 [ 1183.612777][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1183.617705][ C1] ? do_softirq+0x180/0x180 [ 1183.622253][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1183.627726][ C1] __irq_exit_rcu+0xc7/0x190 [ 1183.632553][ C1] ? irq_exit_rcu+0x20/0x20 [ 1183.637117][ C1] irq_exit_rcu+0x9/0x20 [ 1183.642171][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1183.648132][ C1] [ 1183.651187][ C1] [ 1183.654404][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1183.660464][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1183.666494][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4a a2 ee f6 48 89 df e8 62 74 ef f6 e8 fd 1a 13 f7 fb bf 01 00 00 00 32 96 e2 f6 65 8b 05 23 cd 8a 75 85 c0 74 02 5b c3 e8 00 b3 87 [ 1183.686376][ C1] RSP: 0018:ffffc9000479fc78 EFLAGS: 00000286 [ 1183.692471][ C1] RAX: bd851a91b8c92900 RBX: ffff8880624b3780 RCX: bd851a91b8c92900 [ 1183.700785][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001 [ 1183.708958][ C1] RBP: ffff8880624b3c18 R08: ffffffff8e4a8e2f R09: 1ffffffff1c951c5 [ 1183.717203][ C1] R10: dffffc0000000000 R11: fffffbfff1c951c6 R12: 1ffff1100c496783 [ 1183.725807][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 1183.733949][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.739198][ C1] get_signal+0x11f5/0x1400 [ 1183.743781][ C1] arch_do_signal_or_restart+0x9c/0x7b0 [ 1183.749350][ C1] ? get_sigframe_size+0x20/0x20 [ 1183.754315][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1183.759785][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1183.765087][ C1] exit_to_user_mode_prepare+0xf6/0x180 [ 1183.770663][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1183.776142][ C1] do_syscall_64+0x61/0xb0 [ 1183.780567][ C1] ? clear_bhb_loop+0x40/0x90 [ 1183.785247][ C1] ? clear_bhb_loop+0x40/0x90 [ 1183.789932][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1183.795828][ C1] RIP: 0033:0x7f939018f747 [ 1183.800271][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1183.819884][ C1] RSP: 002b:00007f9390fa00e8 EFLAGS: 00000246 [ 1183.825964][ C1] RAX: 00000000000000ca RBX: 00007f93903e5fa8 RCX: 00007f939018f749 [ 1183.834025][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93903e5fa8 [ 1183.842000][ C1] RBP: 00007f93903e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.850061][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1183.858043][ C1] R13: 00007f93903e6038 R14: 00007ffd8b7a6c90 R15: 00007ffd8b7a6d78 [ 1183.866027][ C1] [ 1184.983741][ C1] Shutting down cpus with NMI [ 1184.988969][ C1] Kernel Offset: disabled [ 1184.993880][ C1] Rebooting in 86400 seconds..