last executing test programs: 4m33.325380046s ago: executing program 3 (id=3193): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000ffffab5600000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 4m33.245527615s ago: executing program 3 (id=3194): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000840)={0x1, &(0x7f0000000000)=[{0x6, 0x3a, 0x4, 0x7fff3fff}]}) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r1) (async) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) (async) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800006, 0x2010, r0, 0xb000) 4m33.156901071s ago: executing program 3 (id=3195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x8000) 4m33.151512804s ago: executing program 3 (id=3196): prctl$PR_SET_SECUREBITS(0x1c, 0x4) setresuid(0x0, 0xee00, 0xee01) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x144) fcntl$setlease(r0, 0x400, 0x1) acct(&(0x7f0000000040)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x101, 0x5]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0xa8}}, 0x0) fcntl$setlease(r0, 0x400, 0x2) 4m33.089354596s ago: executing program 3 (id=3197): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) write$qrtrtun(r0, &(0x7f00000014c0)="f885eacbb3a45a3ace061812b088e9b5a6eec9f10c64858f9901eb", 0x1b) sendmsg$NFT_BATCH(r0, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xba, 0x6, "2a33b6a92845c026a246d10f0f02c7d66c9e55bbceb3eee2055634b84e6303165b46c73ba97966d690da7381d3088307716772868b2296495e11a9c8d76069adfd54ccd13a39ca93d471be159e492139cd8b3b336b427ce28508407055e063b67ef5d14d9cf14edb6edc5d5fde6d928f7805070687dd0da5db21f3b4f3cdfe9f71fd1982ee001d2835e7a9126c72fe516145d31527541fb7ad735a93cea289233090adf062bec9c5d16af2bc64f5ec70ee191c64d23e"}]}, @NFT_MSG_DELCHAIN={0x130, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x52, 0xc, "fd441ae62acd575af7c1965c25a6d5a708890ff26e1f10982071991cd20e905b52bd30fb66e2ecb355363b849a765d4dd0a7c51f85f09c1e7d01cd3b5dde990d319bf0507adaf861decf158edff6"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xad3f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7228b915}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x581ba597}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ae965c1}]}]}, @NFT_MSG_DELCHAIN={0xc4, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7db5f896}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7236c987}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x71bb213d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x501994b}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x230, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x1f8, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x6}]}}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x7f}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xcf}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x50, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x64}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc5}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xda}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_OP={0x8}]}}}, {0x60, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xf8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x95}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x34}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x97}]}}}, {0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf3}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x568}, 0x1, 0x0, 0x0, 0x4010}, 0x20004000) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0xd, 0x2, 0x3ff, 0xb, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r2 = syz_usb_connect$midi(0x1, 0xb0, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x1, 0x1, 0xc, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0xf, [@midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x6, 0x7, [{0x2, 0xff}, {0x6, 0xb3}, {0x5, 0x7}, {0x0, 0x4}, {0x4, 0xb}, {0x6, 0xa}, {0x7, 0xff}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x40, 0x10}], [{{0x9, 0x5, 0x3, 0x4, 0x40, 0x7, 0x8, 0xf, {0x14, 0x25, 0x1, 0x10, "7e0b32d9693b94df15a99d9773a6f428"}}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x14, 0x3, 0xe, {0xe, 0x25, 0x1, 0xa, "7ad9734b2190299cb817"}}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x56, 0x0, 0x8, {0xc, 0x25, 0x1, 0x8, "17e7f64deb1de8ec"}}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x5, 0x40, 0x1, {0xe, 0x25, 0x1, 0xa, "78a63727d67061930016"}}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x6, 0x41, 0x0, {0x8, 0x25, 0x1, 0x4, "9896a876"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x1, 0x40, 0xfd, 0x8, 0x4}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_ep_read(r2, 0x6, 0xb3, &(0x7f00000003c0)=""/179) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200b48000000480a05187128369a8848f438d2784ba56fc58efeda78394891a1a23b084ee2c4a27fd726635d83b3909394a67ba82c418eb3962dc22ba982a2d2b00123a1b6b0bafcdc4862fb39a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000580)={0x14, &(0x7f0000000240)={0x20, 0x30, 0xaf, {0xaf, 0xa, "83cd2874c2a581c73c40622f90f87297f6e2a6c5821d94314140db388376f3f1214be205859edecc45b76ae89fd84dca02c0620739097e35bb6353bdce6e6f424f1cf006d806ee9c23d6043b76ff8fcfedcbb524665ae87df5b47c821f1c73d24fb08aea28edbd475c6e4a410b586e168f29d852ab6142d616ed548ea386e56577bd0a698392d2f16bff6752133e7692eb03121c0ce95a3c351bd98519127f142ac4fa918d6ad64075d1f2b629"}}, &(0x7f00000004c0)={0x0, 0x3, 0x94, @string={0x94, 0x3, "3f1fecce44541eed998d83515a9540afcb20c937ad47c048457798166624f3c0b36b846f46f30299ee91c26c011d85b30c43b9d2159a7de82b0a8de02685bfcd9be7391c8d9c9551f19f892af21f9334fb1e5dedbba095d0a71347837bd5ec3cb41d79eb7db167de4d1b67eb74608eef51dc1a4af3e5e1b0ddcf21c7413d50865e21dd35fe9ae2f6ec55b95460c735bea95b"}}}, &(0x7f0000000a80)={0x1c, &(0x7f00000005c0)={0x20, 0x14, 0x3, "05ced6"}, &(0x7f0000000600)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a40)={0x21, 0x0, 0x1, 'n'}}) 4m31.222985986s ago: executing program 3 (id=3208): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)={0x20, 0x23}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000000)={0x0, 0x8}) 4m16.080867986s ago: executing program 32 (id=3208): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)={0x20, 0x23}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000000)={0x0, 0x8}) 3m44.996010205s ago: executing program 0 (id=3420): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000b00)={0x2, 'vlan0\x00', {0xe}, 0xec}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r4, 0x2f3000, 0x1000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m44.505393283s ago: executing program 0 (id=3423): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x200200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x7ffffffe, r3, &(0x7f0000000040)={0x10000001}) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) syz_usb_connect(0x4, 0x219, &(0x7f0000000cc0)={{0x12, 0x1, 0x201, 0x92, 0x89, 0xde, 0x8, 0x13fd, 0x3940, 0x7acf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x207, 0x1, 0x4, 0x8, 0x40, 0xff, "", [{{0x9, 0x4, 0x41, 0x7, 0xb, 0x7d, 0x9b, 0xc5, 0x6b, [], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x36, 0x58, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x5}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0xde, 0xdf, 0x2}}, {{0x9, 0x5, 0x4, 0x6e7e11648f809be6, 0x10, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xeb1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x38, 0xf}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x9, 0x7, 0x5, [@generic={0xaa, 0x23, "ea2bfb627f26e4ae6ff8346a8ae64d42098b0188edc196cafff1626447a47a57e13f956c91d0366b28621b925b101890d8da9b8fb39ebd0ab2b0335d02828958254d490af154c1cf340b5f290c6670cd098236decb0e0868bdb62a39d31bb2db0cb7e5c735d0007150b83baaae91b8a831ee43c6956ea492f67a97468a8f1c2edf3bfbf977c89ba0f95a76f789437bbe6097f778d0a89b01fb8259fab941cd6c032074d544c27863"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x40}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x2, 0x8, 0xc}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x80, 0x5, 0x3}}, {{0x9, 0x5, 0x8e, 0x10, 0x10, 0x2, 0x6, 0x9, [@generic={0x8c, 0x10, "a6574c16afaa4142cf61a36bdc8f4071e4d560151c898bfd5730935de5fffd3ace526bed452bde549a1fcc0d35ab19c483c1a79677c02f2027a69a1a4118c4c6222d87476ea3fbbfdf8b3961f9c8b52dd58efe7778398fdb5f7a78ecf6f32c47e718f2e79801cefa724f3b499b346ee2c7f957558e9bbd3984081ebe2c36619135baa69c63633f376508"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x10, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}, @generic={0x23, 0x8, "b114e150c1921d1b221e956d0c79de29b65817ffc03cb106c893345220a6a8689d"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x87, 0x7, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xc8, 0x8, 0xff}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x9, 0x7d, 0x81, [@generic={0x16, 0x1, "eda3f8f6e714ce969fce85cbfe12082cb988d05b"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0xcd, 0x7f, 0x7, 0xff, 0x70}, 0x11, &(0x7f0000000f40)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xf00f, 0xe4d}]}, 0x1, [{0xf1, &(0x7f0000000f80)=@string={0xf1, 0x3, "d0205854009c95fe5bcc6c49991d5c48270b6a943c507db319976615a77bd9ac1053d1418da9b5263c687915980a9b3d6c5106ab29653910fae17b2c32f4b1f8e485d1ca676f0d4bf5078ccc99f1e947c5fb5606d863326598dfe62f1d3cdd113a3fd38af789f56c927e1436b0c03858d8fc8ac9fa585aec021e97c369ef7feaf2df82e8025c441cd7a565ad63a9100bfdfe4ac5568bb3eade252938a1f77860c36f47e6a46955426832129e34f32d49592a05b25105e5ccea1d6f0861f6dae5c2937d8cd29642ad38ba55a03aabd132351ac0623ab9e183be618f9f1725a4d35595adffc000e686ab7f76ee50d4d9"}}]}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000001240)={r2, &(0x7f0000001140)='/dev/autofs\x00', 0x202080, &(0x7f0000001180)={@_ha_fsid={[0x1ff, 0x4]}, {0xd043, 0xf, 0xd, 0x7}}, 0x5, &(0x7f00000011c0), &(0x7f0000001200)=0x3}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000000)="0f", 0x1, 0x8054, &(0x7f0000000180)={0xa, 0x4e24, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f00000000c0)=0x9, 0x4) ftruncate(r2, 0xea8) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fcdbdf2503000000060001004e200000040005"], 0x20}, 0x1, 0x0, 0x0, 0x48881}, 0x840) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x3, 0x27, 0x10, 0x25d, 0x40, 0x3}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000010c0)) r9 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001100)={r1}) r10 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x4c02, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 3m41.391827434s ago: executing program 0 (id=3430): unshare(0x6020400) r0 = inotify_init1(0x80800) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002015}) syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0) 3m39.889494231s ago: executing program 0 (id=3436): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000940)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000005c0)=""/94, 0x5e, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg(r0, &(0x7f0000003b80)={0x1, {&(0x7f0000000840)=""/248, 0xf8, 0x0, 0x2, 0x2}}, 0x48) r1 = socket$inet(0xa, 0x1, 0x84) connect$inet(r1, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000080)={0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="200003800400010010000400004017b402000000000000000800020049"], 0x40}}, 0x0) 3m39.763004068s ago: executing program 0 (id=3437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010026bdff7f0000df250f"], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000100)='./file1/file0\x00', 0x400000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)=@known='user.incfs.metadata\x00', &(0x7f0000000380)='\x00', 0x1, 0x65aa0ca8b936f6b3) 3m38.688440548s ago: executing program 0 (id=3441): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000dabeffffffffffff000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 3m23.632206603s ago: executing program 33 (id=3441): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000dabeffffffffffff000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2m37.395006852s ago: executing program 2 (id=3746): r0 = socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="87eb250094be5d55342e83eff4ad222ccf6b9000fd5492422bfa687fba7ce7fb3d4a16a9b227118200fc177a306f39c23b0d160a13527befa4aa1763116e5c1fe84d4f337e1be7fcd067f1bf027137fc0cab4f97c0f1ffba3f19d90034", 0x5d}, {&(0x7f0000000100)="854ac93f336ab9f74634827d61f3cf1fb4694020436e80b6812547c85988e4abd6496f5e9ed27004b22075fa4732de2483bf6de548250a13a1a1e31f4ed5f2622ed3d98b098d8326f0ced0ec", 0x4c}, {&(0x7f0000000180)="1cf9c2da3c99a51a1f83d11931d5618e8a6ba01af9ae184d991293d79e52849cc9f55f2ef80240fa0ced8db4caa2820e8acef32ffe7a3f", 0x37}], 0x3, &(0x7f0000000200)=[@rthdr={{0x48, 0x29, 0x39, {0x29, 0x6, 0x2, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x48}, 0x880) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x2, 0xc, 0x5, 0xfffffffe, 0xfffffffd, 0x2]}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf250b0000000c0005"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 2m37.394397667s ago: executing program 2 (id=3747): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x44000, 0x101) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) (rerun: 32) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'aio_iiro_16\x00', [0x100, 0xf, 0x3, 0x400, 0x5, 0x100, 0x3ff, 0x20000010, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x6, 0xfe9, 0x401, 0x3, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a7a, 0x5, 0x7, 0x8]}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x2, 0x2}}, 0x2e) (async, rerun: 64) timer_getoverrun(0x0) (async, rerun: 64) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) r4 = timerfd_create(0x8, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r5, 0x40285107) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000100001050000000700000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000a000000000000000a00000000000000000000000004000000000000fcffffff000000000a0002062000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async, rerun: 64) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000000)={'team_slave_0\x00', 0x4dc1}) (async, rerun: 32) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000100)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000140)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000180)={0x0, 0x1, r0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000001c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01864c2, &(0x7f0000000200)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000380)={0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000400)={0x0, 0x1, r0}) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000480)={&(0x7f0000000440)=[r8, r9, r10, r11, r12, r13, 0x0, r14], 0x1234, 0x8, 0x3}) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 2m37.365556352s ago: executing program 2 (id=3748): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000ffffaa55000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 2m37.274825146s ago: executing program 2 (id=3749): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x20c0000, 0x0) socket(0x15, 0x1, 0x3) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000ea8000/0x4000)=nil, 0x5000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180)=0x2, 0xf, 0x1) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0xd}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xc, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@any_dev={0x4, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xab}}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r5, 0x40086e81, &(0x7f0000000100)=0x6631) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNGETVNETLE(r6, 0x40107446, &(0x7f0000000180)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r9, &(0x7f0000000100)=""/253, 0xfd, 0x1) ioctl$VIDIOC_DECODER_CMD(r9, 0xc0485660, &(0x7f0000000380)={0x1, 0x3, @start={0xe, 0x1}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 2m36.952556362s ago: executing program 2 (id=3750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$sock(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000003c0)="af89beec9c673567302758fddab32a2c6daf11d6818d9e9fd04bf02e66a501601dd741e351ff97257451caf53d15e485e4c7ccdc599c8a1bca20ee890891aa3ac46089124de5550a44ebec184610f7069ed7b3698e26097f48eba75184f6c5a6d5db47b98eb56c6e870f957fa8226d474f86c04ef48e35043702a8b28e19e4b3bba132e56ee7c6ad1accc5470a2276172984ccefdfb7e562bc461db958a3a50360acb580b372549ead111fb7e9576717e5c1fcfc6ab20725445613eeb91fc0eb7721746c9d099ec63d7c7e975125085a782c", 0xd2}, {&(0x7f0000000000)="68e2b983367d17a65e05867d5eb1257253a8b2f24d99c09e8b1cce63d59af7f673df354d5d72947f68c00c8533c1b8233f7762715faec8ecb2d7c66ea724", 0x3e}, {&(0x7f0000000040)}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="687cf932895cd28c9c659dd696068dc1046eb9fbea8cb3ca5c64e5b7704c2c6285e18e95404adbd0b80192e372639fa5abd5c31702bcd18748c4c0cfcdfd6c2a5461eea0173d77fd13f89f561b2dde46f4df3d59cbe3279afad83293ae7914cd7d3d5f17d2d32069b54c459a4f3687d8a50f1a2fed60", 0x98}, {&(0x7f00000024c0)="21a7f0a8c5b79c134699c1c560c24b9ab1d9fc12bb88f969ffbde9dda4ee7e8c1c55bcdc21d30c626e54f2a6e34c68d1ee41fb3bc0bef9442654867065f839320f3e325378de879fcf000b2f5ef42cc3b6e0006ec4e8d52946fffb5b3a41fe31d09e3d1380d21bff2fd8b945fe9aff6d06465364f74b29e5139ccbac4955ee7bfa2e255a42b47292dac81d6fdf6a9706e2d512c57546beb76936f3bc70742ec26ab085a6604e9b402ad2566c1e07162bda7a18b753fa683ab8e70d05f9be6d2470b074ad55ae96d197c4557c7d", 0xcd}, {&(0x7f00000025c0)="923e3a3fb84051104048a10c2b90e31b680660040eef81a7475f386a430535cd76d885cd0be1149dda1f2804e361cd031885d16ffe35bbe88161e447c8a581fd110188bcbcfb238ad3fa814abf9f0731f2b3acf531c4584c5a3b8407d99569c215c84995058da1a6571cbdde6720a06e22c5626a680605cdb5826a032f87f3f0fb548e38698c6189f62936ff0e50c73bb95d7c34bb54746b1f4538cf848151a992eb82bf07789789ec81767779cbdd57000b73d981eed216669e", 0xba}, {&(0x7f0000002680)="4f0e6b55f791b64f738ea0bc3219b56b65ee8145b3ba5ade86b90fbe47145a759072f680eeabe7f96c9d3ebf5021dc942504b51364fce79f62b1f26300a28e6f7c75dedfd66157bba21bf21126ab2390ad38298ad6eabf052fa8ce0a73d1fedfb82d49b83f9d6792d0f3ef60424ac41e0d619ab32d48d1fa6e67f52b6f5f72dfb419ce95fcf8350fa3e190ab9864a0194fed45bee1ce8629e75085797411bec2bdb3", 0xa2}, {&(0x7f0000002740)="ced9d378b9388ab306682f749042f4a977c3aad20adf056eef90fed0d5edb4bc1598f241ac15e7e470cb5ac5541497ecfc53f006a0a823b8ef96c159ea7814b67038bdb4be742908", 0x48}, {&(0x7f00000027c0)="030d6dfe4fc7a49213da06dddf275ac3e29ccc99fc4733977b33f86bec0e34c9db811ea9874b0a95d6135da0c76278aa9829a46145227e43b3b0000fb9a24f9b73c24395bd022cba146ccc167896207693920bfb66c8f333c947c48e2eacece45ef76f0c0431a40b2d35f6ba2f968a8e28b31bfe9d9c5f06c4e71204fe2f42730e7a97f93ee5fdb62d111ec2b7af68cb34393b14cbe59bcc62a820dc397558304dd8897e09aa4de3a67579550115e216190a8084f82087c67af791cd1a81", 0xbe}], 0xa}, 0x24040001) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cifs\x00', 0x10, &(0x7f0000000400)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8814) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="0f0132baf80c66b8ec0e298766efbafc0c66b80e00000066ef2e0f59d90f0867660f3800bd84000000660f2de40faeb178000f09baf80c66b87e95a68366efbafc0cedb89f078ed0", 0x48}], 0x1, 0x5a, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m35.559655092s ago: executing program 2 (id=3754): clock_getres(0x17, 0x0) setrlimit(0x7, &(0x7f0000000000)) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private0, 0x6e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x9, 0x7ff, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0xfffffffffffffff8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1000000, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3507, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 2m35.217854412s ago: executing program 34 (id=3754): clock_getres(0x17, 0x0) setrlimit(0x7, &(0x7f0000000000)) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@private0, 0x6e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x9, 0x7ff, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0xfffffffffffffff8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1000000, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3507, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 12.165528188s ago: executing program 4 (id=4373): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x7d, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x100000001}, {0xfffffff9, 0xfffa, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr$security_ima(r1, &(0x7f00000004c0), &(0x7f0000000680)=@sha1={0x1, "427b5342f38c8cc008b70b376d2113d0da241cff"}, 0x15, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b52, &(0x7f0000000000)={0x79, 0x0, 0x27f}) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="d342ec7261845a15f3f63143b901b995db44fa1b04adfb671e891bf90570e2603802fbc26eedef85ab7b91db22787d5e961075c22f38043d647bbae1da057ae395fe0e4c0d8f1aad41f7aa12275693cc1f61e3e96d9d3a41bd0958f3250dbd1af744859ca5b75c3c5eb2dafa18b06383905749022c1a124f470e9cc720e7cf2a11699f7ff843ddfd76b32cdc6ef67af5c7b5895aac0daea3134450a191a4822bec00da99ed1a8c91a64137db336679fe46a9f9801b0441eb27ae05564e58b47910d2758edb0e899c317d32bcbb1993f19d81ee", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x3, @local}}, 0x3, 0x7fff}, &(0x7f0000000480)=0x90) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$XFS_IOC_INUMBERS(r7, 0x80405880, &(0x7f0000000580)={{0x10001, 0x3, 0xd, 0x7fff, 0xd3ee}, [{0x3, 0x8, 0x32, 0x6}, {0x180000000000, 0x800, 0xfd, 0xb}, {0x2, 0x5, 0x3, 0x3}, {0xc9b0, 0x0, 0x6, 0x4}, {0x9, 0x5e, 0xdc, 0x3}, {0x81, 0x3, 0x79, 0x3}, {0x80, 0x7, 0x1, 0x2}, {0xca2, 0x2, 0x1, 0x40}]}) ioctl$TCSETS(r0, 0x89f1, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000140)=""/249, 0xf9}], 0x3) 10.590228114s ago: executing program 4 (id=4383): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x10002}, 0x20) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x101) openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000046f7ff"], 0x1c}, 0x1, 0x0, 0x0, 0x485}, 0x20000000) write$qrtrtun(r1, 0x0, 0x0) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0xd, 0x2, 0x3ff, 0xd, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) sendmmsg(r2, &(0x7f0000001340)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @empty, 0x1}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000780)=[{0x20, 0x1, 0x1, "d551423d3b3d55a44837a3b1ec7e"}, {0xc0, 0x108, 0x5, "64d4169abb155a11325b5f3dd1661f962a1e64b33bbcd97cdf7053b1ead4b794f62443b3d64c2ffbc75f148205dd95438de0e0bfb9c35f3f22405c11353161acdecff0c6a0a6f8994661a146cb4b221e42711fb1c9cd4f77a63b2314193b21c858710ad24af2c96f15136b4aa2db34afed9ee593632ef9fadde18d295cfe8f0941212475c384b787ad99417babd2237ca657d299bc4f8ac0aa6500e1befca0a19750e649794ea5474e6b19c3"}, {0x50, 0x6, 0x7, "1c003f6d9e951fde4f6ef9890a8f5d663e851adbc4dc8ebed68457c0599a0a8a9e8fec990ca5c6c81910843e32f13efdc9ab9749389188e97336dd70f52e44"}, {0xf8, 0x118, 0x10000, "8920ba681de52dde7a7c3d3abe778b875711b53c54a889a4d68966677322c3af16df3f85c16b48cd27bf90d70a990e7811ca5c476f10649a3f57154f22b3c76ce0a0d6373564c21a3b1b37d2739656adb272d998aab42ada8cf93b00f662b728c11faeca8c22dfccbbeee238ad0316f6c3911c89f05a8c0b1ab5f88cfde2ca1ca6f661bfebd6b6470a7074e9ae8f9c46a85832e2df4fa57dd40fd08a49dd0c8da04a55fa0056fececac84997ff875c573d2ca611cea41be40479a716fa178c2e00443bf9b4b07e8f4ab3fcbd4e993aff5c2acf6aca71f4b563f4cc4ec150bf7001f71743c4135aa7"}], 0x228}}, {{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x3, 0x3, 0x3, {0xa, 0x4e22, 0x6, @private1}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a40)="518f536e8bcb3558c819f9fd2e0bc43d1e0c93f401264f7e4eea7ee6b6dd7c9353a5c6fcfe0f918d54f68daf9b7470a87db81ffb2bc44d2deef3bce68539cacba21f8c8dd68d745a6ba3090250206dd8b7ef41fa3a3a776768b8ec21ec1f9dbad6224070aafc65af251f2af8f7a31ba6a64b5a6d6b376ff8d9db7995071f1adb1bac681f7eac5114224a77fd3af1dfe285b8c8e0ce62107799da3dba2e504f1b834baa052b1394a769f3", 0xaa}, {&(0x7f0000000b00)="1c7410fb4d58db5c23d1ed5422521e8ef7de9f9e713df616439bb366ce84bdc0a87980ea61cb19f754fdd8f8b8fd1f1d9ba502d0134a02c5c31ed7042e11274ffaf58f2e1c7bf95faead4a9c64b6d487af1e1fceb6bd7c0e8457346ed83c4ba5", 0x60}, {&(0x7f0000000b80)="736a9fd7adbdbd735691c49147669d4d2691427164f7549422a093f94a2cbe39e86b88ae851fcafaaa39246c2917b1ab66f444a7523c7a8981967d60bd0fa0313fc5e23ca3b6ccfa1bd6ecd6290fb045e351feba0b0597bed7791d87614335eddd89e9ad504bd39de58ae2453313daee193da10720dd1008a38d055321015b1bd17e6391e19d5b1ba0442944b828d4178f88cfbea45f7e9967f36648d4e348db186515c6ac2175539340a9f699d0915ebe8be99f84b456b4cda4c8d0f39ec868e87b7ecb96619895b3bdcc538889f1108072be225723fb0fa69c", 0xda}, {&(0x7f0000000c80)="9643bbfde7a0780309fe188bb5aca17203f7b2dec8577a55897e18150d596c377b7b6c", 0x23}, {&(0x7f0000000cc0)="2e7d059b9af98132e4e3672be404f5110e8c0b67d02927434673446a8d54c36de5c33cbc66a50a81ef58ba7c8b46e8412ccc7254f02b64e60faeba2791e48b426f647d21b337e1a2aeddd2baf1c192336d07d90f951315d31ae2ee4dce51764500e15b84e6a8565fd464ddd78892a385e8bde2d928", 0x75}, {&(0x7f0000000d40)="7db9a4bb57a63838cccc6d0bfefb5f748b8debccfd3a5e0c3a1e56f8c6bfa9467a6525008b07d1820af91bc7e75254155368719e1efd59d5c0", 0x39}, {&(0x7f0000000d80)="9a72be38a199b57737a918f954d6f3ad2f8f4739d0f00d79e414519bfc78e775bbdf2bba0644686b76c948528c84679a94eae456013273b2c607a7edcb8c97b1680b3a440cbde713f2ff36a4b39e2677d33b672be764161b1ade1f148c7118b902687e3ff38c5ce71646cf0f08638ae36088264661e119463aa19fc533a8e114c194b732d1e94e4aaba7c1e1a1da7abcf055e2396ebfccdaf548a10751f3bbb28f8c742c48eb00ad2d5c606ae12bc44c6526d8a61a81803b745f93e7a9f735efa7863c4faa012316bff41b520b0888dd84", 0xd1}], 0x7, &(0x7f0000000f00)=[{0xa8, 0x115, 0x3acc, "78c0329a2d1d0bc21d9aaff0ea50149cab80708a156ae3dc058c8e0f91da9f6070db76969e5f7ba8e707260c96afb72454036cb474a390754b201932e6fb50bd959a5bd14b294a6278e27d9ad40316ff0970722e1880fbff9807f7ec03010287512d2be57b4ecb2b1c6d99ed01eb44a8b530dedd4e45d27de9d52868f4db457704381e852c7e04965ceaabed0aae6cbf35d1c87c7e"}, {0xa0, 0x84, 0x2, "fd5b096af824d543224217c93ca7fa9f774158a5d4e1002874fe3c372b5893d2fdae4f70e93b39bb14becf85568e56ab10bf5810af17e4b1236d6ff6ec9395768d691e1a5eec0d8f37cd79aae6b49b95b2082ca8657dae5da736471f7d5c7909e848c88e1dbcfc34ae8f5a44092afa2f6e38279e05541fde9ef68ba288007f642a70c6625fd7e4bb5a21"}, {0x38, 0x10c, 0xfffffff9, "f11e2ed0c409e5be432b5dd2bc116fcc4ac9ae18ed873ee5f7b0322027469e4963a96fb300d392"}, {0xb8, 0x30, 0x7ff, "959d849a4c2501dd30abbf9b5d03e156ca935486efea763dab1c15236a8cb0d4282cfe1093553158639263c58e987a3b1530e8f536afdb9176cfc7f3846e545d3bddaaeadceb100da460ee1005d9bb4d158ce7d3005f18b2da5da22bce392996b386055517da294a419e0f90be2950b2e56c972d2b803276d281d0f31d9dd3cb0033a526af2ffc01228cfa76304ce4d916f7b029551e89d821993a4ccfeb22b6875bf8b2"}, {0x90, 0x10e, 0x24, "139eb2827b3f08d7b667d565a63cd08b47e29a4b444f41cbfda3d93bfebf456a46636a2d1b0c7139d84de66920fc0bc0672761921936a93922337fcc7b707164bb5564aa0b81441fa4eb24a7376e40b70eeb0312818d5910b292ec524ac531133a33fcff42342c28eac75b77c0b2064e0a3e37e5fc3a0b9070921765e000260b"}, {0x90, 0x84, 0xffff, "c59809ec6a2eb0e3f4ceb7d37d7ad0c97bd59b7f43b72c7616f958aafba54b33b9bb0a992b64d2b951e934411ace38e7a2d371471be0050aec73c5d4384b4c7c50f4fa182e63d9ffb62f7399a2311b5bf179a63ec32509e949f146c63dca869aed71a48aadf7f7d89d545ac003792d0c4a7d3a93a0c394b4c6"}, {0x60, 0x1e, 0x9, "f2105aebea33f02a8212c9ecb1b23f6eed06ebeed0c411c7d5525390b635c6ef5268c499de23239640a891ed424d2dae3bb3970f690f744348020ce6a8a46a89d1a834a216e6d0bf6ca393"}, {0x78, 0x88, 0x7, "a85aee1e7105f131cf859fa21e84c3607a0b81aeaa53f818af780f1612214e5244bcb9f2e2bf378285d259390c1cde8599d338b07671b7e5306425201879311dc751799b18d68955ba41a9369a11d42d80ebc1a4c827e05e2ff2a37353a79a741af1995f1dcc29"}], 0x430}}], 0x2, 0x44045) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \vH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.479165754s ago: executing program 4 (id=4409): socket(0x2000000015, 0x80005, 0x0) (async) socket(0x2000000015, 0x80005, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x7, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000002c0)={0x8098f909, 0x281, "6003487e5ed594ac0601c9060500", 0x1, 0x1001, 0x0, 0xe5d, 0xc0000080}) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.577475579s ago: executing program 6 (id=4415): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x29a8, 0x4) close(0x3) write(r0, &(0x7f0000000100)="24bd3fdb9056f70cf2265d01cb809c9b1535b478310000001e005f000040000000000000020000000060af0fb2104faa158900000000ff788df9ae9c3dfdf7fc838e5011a34a06000000000000000000000000c0ffeb0a0ddd31baa60a172b7ccffffc11df35a187e78d10ef15aa0f3f056b8ce77464d3cee10c0dbe9325b9e97525e76f91dcfe36c937eb7a56ee6d0b8bf1d0b5680668611b069b1165a52e393d6ec18e4b098a3c368285e8b14158e23508406d2cc34787d1be5f6c6d0ff4751369fb232092ad5242a2dfb3364f0b5bd0943c825f80d0edd2d496fa73c04fca7d9f81473735e1fbc9c489469841", 0xee) socket(0x10, 0x2, 0x0) (async) socket(0x11, 0x3, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x29a8, 0x4) (async) close(0x3) (async) write(r0, &(0x7f0000000100)="24bd3fdb9056f70cf2265d01cb809c9b1535b478310000001e005f000040000000000000020000000060af0fb2104faa158900000000ff788df9ae9c3dfdf7fc838e5011a34a06000000000000000000000000c0ffeb0a0ddd31baa60a172b7ccffffc11df35a187e78d10ef15aa0f3f056b8ce77464d3cee10c0dbe9325b9e97525e76f91dcfe36c937eb7a56ee6d0b8bf1d0b5680668611b069b1165a52e393d6ec18e4b098a3c368285e8b14158e23508406d2cc34787d1be5f6c6d0ff4751369fb232092ad5242a2dfb3364f0b5bd0943c825f80d0edd2d496fa73c04fca7d9f81473735e1fbc9c489469841", 0xee) (async) 5.292673317s ago: executing program 6 (id=4416): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f0000000000)='./file1/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) pipe(&(0x7f0000000140)) (async) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpgid(r3, r3) (async) setpgid(0x0, r3) (async) fchdir(r2) (async) lstat(&(0x7f0000000000)='./file1/file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) (async) 5.134493593s ago: executing program 6 (id=4417): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x101) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r1, 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c0d0) write$qrtrtun(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0xf7, 0x0, 0x5, 0x0, 0x10001, 0x3b218590d887af9d, 0x22, 0x4, 0xf3, 0x38, 0x226, 0x80000000, 0x10, 0x20, 0x3, 0x7, 0x8d, 0x3}, [{0x3, 0x10001, 0x5, 0x6dc7, 0x1, 0x17, 0x7ff, 0x4e8d}, {0x4, 0xa142, 0x2, 0x9, 0x3, 0x56, 0xa5, 0x8}, {0x6474e551, 0x1, 0x6adf, 0x17, 0x5, 0x5, 0x1f7, 0x31df398e}], "ca6364a597ccbf61fd15d7731e", ['\x00', '\x00', '\x00']}, 0x3a5) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0xd, 0x2, 0x3ff, 0xb, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \vH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.319081552s ago: executing program 4 (id=4419): r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @local, @remote}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x634, 0x2cf1, 0x7fffffff, 0x8, 0x4, 0x2, 0x81}, 0x1c) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x74}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="56a039b3c918af595dbc9c782c55cffc8419dd8c0c0d56345af98a7f5ecb6425ff6a8dd1748a63c0e06f353d43c7ea2fb81e5b8abffe162119d2fbca7fd8f9da81e8c8acf190e59f30b80255abb3261ec148564d7bb6a540942f30c5182cf4fab0", @ANYRES16=r3, @ANYBLOB="00032abd7000fcdbdf25070000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 4.0806148s ago: executing program 4 (id=4422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) preadv2(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/75, 0x4b}], 0x1, 0xfffffffe, 0x9, 0x11) r2 = gettid() clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000140)={0x77359400}, 0x0) (async) rt_sigqueueinfo(r2, 0x20, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x560, 0x0, 0x8}]}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000200)={0x18, 0x69, 0x15, 0x8000000, 0x0, "", [@generic="fd1746d97d"]}, 0x18}], 0x1}, 0x8000) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000000070124e0aab97000fedb9f25027c0000100076931746a78f21cc01800c000100ffffffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4048054}, 0x2004c010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r8, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}}, 0x24000080) 3.128940303s ago: executing program 6 (id=4427): setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xdddd1000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x200004, 0x200006, 0x3, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2, 0xec000000, 0xcd}]}) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000003c0)={0x8, 0x5, [{0x2, 0x0, 0x8}, {0xfffffc01, 0x0, 0xfffffffffffffff9}, {0xff, 0x0, 0xfffffffffffffff9}, {0x81, 0x0, 0x3}, {0x4, 0x0, 0x3}, {0x7, 0x0, 0x6f}, {0x0, 0x0, 0x100}, {0x4, 0x0, 0x8000000000000000}, {0x3, 0x0, 0xc4}, {0x6, 0x0, 0xfffffffc00000000}, {0x6, 0x0, 0xfff}, {0x7, 0x0, 0x8}, {0x7, 0x0, 0x8}, {}, {0x4, 0x0, 0x7fffffff}, {0x80000001, 0x0, 0xfffffffffffffffb}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$fuse(0x0, 0x0, 0x0, 0x2000010, 0x0) file_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x21, 0x7, 0x4, 0x1, 0xf}, 0x18, 0x100) 2.802339724s ago: executing program 6 (id=4431): prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close(0x3) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x800000000000002, 0x1, 0x10000ffe}) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r1, r0, 0x9, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r6 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r4, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x28, 0x65, 0x0, 0x3f, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x4}, "ef01f067"}}}}, 0x36) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0x17}, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0), 0x0}) syz_usb_control_io$uac2(r7, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x40, 0x6, 0xed, {0xed, 0xa, "fe98ca77572b0ae5f2fffdb02633a359aa8a3f7e34fa08a5f1ec8a5d129cc571ac0bbb5d964ed84b737cb91239df5c0018985bb631757ae5caeedd98c275bf899f5fd17bedf92696c55ffe01169ed930424c11b5c3fdfdf0a4df47b363f53f4cfd2e667b2415f9c4d3ae7caf04ccc2a734ab0bdf9389b1d00b7490e824678005bbfa0b83bfefd7ec4209edc86381787e857c20726a557918dc90aea6e633d3db637896553d0e8c5a5e9bae56131edee25792c6f61e641421ac590144dbaf7ca1f2618ace0cf240ba5db64360dfca5d7e31f4b3a22006cec6ee755b7bfbea61da6597be1d95487d7c4dbfc2"}}, &(0x7f0000000340)={0x0, 0x3, 0x52, @string={0x52, 0x3, "878d3da54ce9cf74f35424e56994572cb860c8d28d84496e555569680d6967a8dc96c2deb5b43e6d9149638e35716ec666afdf782bbf6ae08358339c41bf2dd6f77c0cc613fb6a63ba37c46153185f2d"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0xa87d4978e7909870, 0x12, 0x96, "a28450020032701707984bfa5e6e3960a0eb46a0ffcb6ed4e899b1f19783b109ac702842047d49b1a2b3f88d3c96170f0caf9c76bb47c2204d5fa3c345a1433a529cc980a93ca8017402b89eddcd2bc3d6e8fca0b227bc5ab5ca1ee65030dba363a6bd0134c1158ad42e17ebc0a5ef9222dd83fdd25f9f4419081ba4cc434f347e62bae56e940c63905bc8965557cb68009013e81fd9"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000580)={0x20, 0x81, 0x3, "e110aa"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000600)={0x20, 0x83, 0x1, 'Z'}, &(0x7f0000000640)={0x20, 0x84, 0x2, "3eea"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "8f29cb"}}) 2.433071523s ago: executing program 5 (id=4435): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x63b}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) write$qrtrtun(r0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x191, 0x78, 0x550, 0x78, 0x32, 0x3, 0x4, 0x0, {0x0, 0x0, 0x3}, {}, {0x0, 0x4}, {0xeb7a}, 0x2, 0x40, 0xab, 0x1, 0x1, 0x1, 0x1, 0x1000, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x100, 0x2, 0xb}) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0xd, 0x2, 0x3ff, 0xb, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @local, @remote}, 0xc) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \vH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 1.401104475s ago: executing program 1 (id=4438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000300)="120000003200e7", 0x7, 0x0, 0x0, 0x52) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x1f, 0x111, 0x8300, 0xf}}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000140)=0x7fc, 0x4) syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.096583798s ago: executing program 1 (id=4439): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)=']^+\x00', 0x30000, 0x0, 0x7, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x80082102, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x4}) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) close(r0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_open_procfs(r1, &(0x7f0000000100)='attr/current\x00') syz_open_procfs(r1, &(0x7f0000000040)='uid_map\x00') (async) wait4(r1, 0x0, 0x8, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) (async) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x26, 0x5}}}}}]}}]}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0xa0, 0x19, @MIDI_NOTEON=@note=0x3, 0x9, 0x5c4}) (async, rerun: 64) syz_usb_control_io$hid(r3, 0x0, 0x0) (rerun: 64) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB=' 1('], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (rerun: 64) 1.054120266s ago: executing program 4 (id=4440): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x48dc9b527bd9cb67) (async) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x48dc9b527bd9cb67) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x1c7) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r8], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x20000000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}], 0xee01}, 0x18, 0x1) (async) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}], 0xee01}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') (async) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 904.367685ms ago: executing program 1 (id=4441): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000e0100000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 741.043744ms ago: executing program 1 (id=4442): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3m\xcf\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, ':\x10\xee\xc2G\x8e\xe4\xef1CS/%\xa2%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\x00\x00\x00\x00\x00\x00\x00\x04\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xca\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaq6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xd9\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f', 0x3a, './file1'}, 0x231) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x642, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 740.822059ms ago: executing program 1 (id=4443): r0 = epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1003ffffff9]}, 0x8, 0x0) (async) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1003ffffff9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc0000005}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc0000005}) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000007c0)={0x0, 0xfffffffa}) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8088, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000)=@nullb, 0x0, 0x0) 691.392595ms ago: executing program 1 (id=4444): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) socket$unix(0x1, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000019080), 0x2000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24a70e", 0x2c}], 0x1}, 0x30008b08) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x1, 0x3, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r8) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x800) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x24, {0x0, 0x0, 0x0, 0x4, 0x5}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x45) 597.484004ms ago: executing program 5 (id=4445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000fbdbdf250300000008000b00030200000500130008000000060002000100000005001300000500000000000c001600fbffffffffffffff0000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000200)={0xc0000011, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000440)={0x2000000}) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x7fffffffffffffff, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_rxfh={0x33, 0x8, 0x0, 0x9, 0x4, "226ac5", 0x5}}) 496.645074ms ago: executing program 5 (id=4446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000300)="120000003200e7", 0x7, 0x0, 0x0, 0x52) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x1f, 0x111, 0x8300, 0xf}}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000140)=0x7fc, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r5, r5, &(0x7f0000000540)=0xffffff7f, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1d, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) 469.221751ms ago: executing program 5 (id=4447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000300)="120000003200e7", 0x7, 0x0, 0x0, 0x52) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x1f, 0x111, 0x8300, 0xf}}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000140)=0x7fc, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 376.112474ms ago: executing program 5 (id=4448): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4ff3913b, 0xca0, 0xffffffff}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000040)=0x6a) 140.595245ms ago: executing program 5 (id=4449): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000004c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x42880) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 0s ago: executing program 6 (id=4450): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000200000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) kernel console output (not intermixed with test programs): ed; connect to a high speed hub [ 1032.150038][T18816] usb 5-1: config 12 has an invalid interface number: 126 but max is 0 [ 1032.150146][T18816] usb 5-1: config 12 has no interface number 0 [ 1032.150165][T18816] usb 5-1: config 12 interface 126 has no altsetting 0 [ 1032.186148][T18816] usb 5-1: string descriptor 0 read error: -22 [ 1032.186489][T18816] usb 5-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 1032.186515][T18816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.325326][ T5789] snd-usb-6fire 7-1:2.0: unable to receive device firmware state. [ 1032.325400][ T5789] snd-usb-6fire 7-1:2.0: probe with driver snd-usb-6fire failed with error -71 [ 1032.337050][ T5789] usb 7-1: USB disconnect, device number 23 [ 1032.385024][T12255] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1032.402953][T18816] dvb-usb: found a 'PCTV 2002e' in warm state. [ 1032.412230][T18816] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1032.413775][T18816] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 1032.413848][T18816] usb 5-1: media controller created [ 1032.417917][T18816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.503728][T18816] DVB: Unable to find symbol dib7000p_attach() [ 1032.503739][T18816] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 1032.503746][T18816] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1032.504328][T18816] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 1032.504358][T18816] usb 5-1: media controller created [ 1032.508500][T18816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.535212][T12255] usb 6-1: device descriptor read/64, error -71 [ 1032.584024][T18816] DVB: Unable to find symbol dib7000p_attach() [ 1032.584034][T18816] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 1032.610302][T21189] program syz.4.4076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1032.614240][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.619710][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.642652][T12255] usb usb6-port1: attempt power cycle [ 1032.665598][T18816] rc_core: IR keymap rc-dib0700-rc5 not found [ 1032.665609][T18816] Registered IR keymap rc-empty [ 1032.665839][T18816] dvb-usb: could not initialize remote control. [ 1032.665846][T18816] dvb-usb: PCTV 2002e successfully initialized and connected. [ 1032.674689][T18816] usb 5-1: USB disconnect, device number 70 [ 1032.742240][T18816] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 1032.897997][T21247] loop5: detected capacity change from 0 to 7 [ 1032.911260][T21247] Dev loop5: unable to read RDB block 7 [ 1032.911302][T21247] loop5: unable to read partition table [ 1032.911480][T21247] loop5: partition table beyond EOD, truncated [ 1032.911497][T21247] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1032.941014][T16231] Flush: task=udevd[16231] dev=loop5 state=2 [ 1032.995059][T12255] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1032.998752][T21251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.004037][T21251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.005349][T16231] Teardown: task=udevd[16231] dev=loop5 state=2 [ 1033.015817][T12255] usb 6-1: device descriptor read/8, error -71 [ 1033.252162][T21277] openvswitch: netlink: Multiple metadata blocks provided [ 1033.274273][T21277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.281890][T12255] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1033.306509][T12255] usb 6-1: device descriptor read/8, error -71 [ 1033.338796][T12426] IPVS: starting estimator thread 0... [ 1033.417302][T12255] usb usb6-port1: unable to enumerate USB device [ 1033.431537][T21285] IPVS: using max 8 ests per chain, 19200 per kthread [ 1033.705194][T12255] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1033.869468][T12255] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1033.869497][T12255] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1033.869518][T12255] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1033.869567][T12255] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1033.869593][T12255] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1033.873621][T12255] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1033.873649][T12255] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1033.873670][T12255] usb 5-1: Product: syz [ 1033.873684][T12255] usb 5-1: Manufacturer: syz [ 1033.976611][T12255] cdc_wdm 5-1:1.0: skipping garbage [ 1033.976630][T12255] cdc_wdm 5-1:1.0: skipping garbage [ 1033.983571][T12255] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1033.983590][T12255] cdc_wdm 5-1:1.0: Unknown control protocol [ 1034.103701][T21319] loop5: detected capacity change from 0 to 7 [ 1034.115197][T21319] Dev loop5: unable to read RDB block 7 [ 1034.115251][T21319] loop5: unable to read partition table [ 1034.115450][T21319] loop5: partition table beyond EOD, truncated [ 1034.115481][T21319] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1034.189786][T18279] Flush: task=udevd[18279] dev=loop5 state=2 [ 1034.277064][T18279] Teardown: task=udevd[18279] dev=loop5 state=2 [ 1034.322321][T21334] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4091'. [ 1034.465005][ T5698] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1034.595087][ T5698] usb 7-1: device descriptor read/64, error -71 [ 1034.653301][ T5789] usb 5-1: USB disconnect, device number 71 [ 1034.835759][ T5698] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1034.899681][T21374] overlayfs: statfs failed on './file0' [ 1034.965043][ T5698] usb 7-1: device descriptor read/64, error -71 [ 1035.075609][ T5698] usb usb7-port1: attempt power cycle [ 1035.124975][ T5789] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1035.275311][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 1035.282700][ T5789] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1035.282729][ T5789] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1035.282751][ T5789] usb 5-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 1035.282772][ T5789] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1035.282793][ T5789] usb 5-1: config 0 has no interface number 0 [ 1035.282850][ T5789] usb 5-1: config 0 interface 125 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1035.282880][ T5789] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1035.351807][ T5789] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1035.351837][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.351859][ T5789] usb 5-1: Product: syz [ 1035.351875][ T5789] usb 5-1: Manufacturer: syz [ 1035.351890][ T5789] usb 5-1: SerialNumber: syz [ 1035.384271][ T5789] usb 5-1: config 0 descriptor?? [ 1035.416293][ T5698] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1035.425371][T18816] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1035.435763][ T5698] usb 7-1: device descriptor read/8, error -71 [ 1035.535095][ T5690] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1035.579398][T18816] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1035.579429][T18816] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1035.579450][T18816] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1035.579569][T18816] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1035.579598][T18816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1035.579680][T18816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1035.582869][T18816] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1035.582896][T18816] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1035.582971][T18816] usb 2-1: Product: syz [ 1035.582986][T18816] usb 2-1: Manufacturer: syz [ 1035.600276][T21383] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1035.621901][T18816] cdc_wdm 2-1:1.0: skipping garbage [ 1035.621917][T18816] cdc_wdm 2-1:1.0: skipping garbage [ 1035.683264][ T5698] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1035.707748][ T5698] usb 7-1: device descriptor read/8, error -71 [ 1035.711291][T18816] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1035.711312][T18816] cdc_wdm 2-1:1.0: Unknown control protocol [ 1035.727698][ T5690] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.738955][ T5690] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1035.738982][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.739534][ T5690] usb 6-1: Product: syz [ 1035.739551][ T5690] usb 6-1: Manufacturer: syz [ 1035.739565][ T5690] usb 6-1: SerialNumber: syz [ 1035.790086][ T5690] usb 6-1: config 0 descriptor?? [ 1035.815880][ T5698] usb usb7-port1: unable to enumerate USB device [ 1035.822585][ T5690] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1035.874770][ C0] wdm_int_callback: 3 callbacks suppressed [ 1035.874796][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.874856][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.875135][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.875157][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.875418][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.875437][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.875672][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.875689][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.875909][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.875927][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.876145][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.876162][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.876381][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.876398][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.876608][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.876624][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.876841][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.876859][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1035.877070][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1035.877087][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1036.018982][T21407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.019957][T21407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.053692][ T5323] usb 2-1: USB disconnect, device number 38 [ 1036.053869][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1036.166861][T12255] usb 6-1: USB disconnect, device number 62 [ 1036.242119][ T5789] usb 5-1: USB disconnect, device number 72 [ 1036.545545][T12426] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1036.629003][T21464] loop5: detected capacity change from 0 to 7 [ 1036.632650][T21464] Dev loop5: unable to read RDB block 7 [ 1036.632691][T21464] loop5: unable to read partition table [ 1036.632891][T21464] loop5: partition table beyond EOD, truncated [ 1036.632908][T21464] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1036.700414][T12426] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1036.700442][T12426] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1036.700472][T12426] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1036.700519][T12426] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1036.700545][T12426] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1036.700570][T12426] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1036.702600][T12426] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1036.702627][T12426] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1036.702647][T12426] usb 2-1: Product: syz [ 1036.702661][T12426] usb 2-1: Manufacturer: syz [ 1036.726411][T16231] Flush: task=udevd[16231] dev=loop5 state=2 [ 1036.812954][T21383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1036.824970][T16231] Teardown: task=udevd[16231] dev=loop5 state=2 [ 1036.829504][T12426] cdc_wdm 2-1:1.0: skipping garbage [ 1036.829521][T12426] cdc_wdm 2-1:1.0: skipping garbage [ 1036.853661][T12426] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1036.853679][T12426] cdc_wdm 2-1:1.0: Unknown control protocol [ 1037.023764][ T5698] usb 2-1: USB disconnect, device number 39 [ 1037.125500][ T5690] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1037.245335][T12426] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1037.278949][ T5690] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1037.278978][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.278999][ T5690] usb 5-1: Product: syz [ 1037.279010][ T5690] usb 5-1: Manufacturer: syz [ 1037.279018][ T5690] usb 5-1: SerialNumber: syz [ 1037.283301][ T5690] usb 5-1: config 0 descriptor?? [ 1037.407301][T12426] usb 6-1: not running at top speed; connect to a high speed hub [ 1037.408574][T12426] usb 6-1: config 7 has an invalid interface number: 112 but max is 3 [ 1037.408600][T12426] usb 6-1: config 7 has an invalid interface number: 77 but max is 3 [ 1037.408621][T12426] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.408641][T12426] usb 6-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 1037.408662][T12426] usb 6-1: config 7 has no interface number 0 [ 1037.408678][T12426] usb 6-1: config 7 has no interface number 1 [ 1037.408739][T12426] usb 6-1: config 7 interface 112 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1037.408758][T12426] usb 6-1: config 7 interface 112 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1037.408777][T12426] usb 6-1: config 7 interface 112 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1037.408793][T12426] usb 6-1: config 7 interface 112 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1037.408819][T12426] usb 6-1: config 7 interface 112 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1037.408842][T12426] usb 6-1: config 7 interface 112 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 1037.408866][T12426] usb 6-1: config 7 interface 112 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1037.408903][T12426] usb 6-1: config 7 interface 77 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1037.408923][T12426] usb 6-1: config 7 interface 112 has no altsetting 0 [ 1037.408932][T12426] usb 6-1: config 7 interface 77 has no altsetting 0 [ 1037.411374][T12426] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=66.61 [ 1037.411401][T12426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.411422][T12426] usb 6-1: Product: syz [ 1037.411437][T12426] usb 6-1: Manufacturer: ᐴ [ 1037.411451][T12426] usb 6-1: SerialNumber: syz [ 1037.485026][ T5789] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1037.504982][T21486] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1037.517562][ T5690] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1037.635035][ T5789] usb 7-1: Using ep0 maxpacket: 16 [ 1037.642811][ T5789] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1037.642836][ T5789] usb 7-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 1037.642856][ T5789] usb 7-1: config 0 has no interface number 0 [ 1037.670789][ T5789] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1037.670817][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.670837][ T5789] usb 7-1: Product: syz [ 1037.670851][ T5789] usb 7-1: Manufacturer: syz [ 1037.670865][ T5789] usb 7-1: SerialNumber: syz [ 1037.686213][ T5789] usb 7-1: config 0 descriptor?? [ 1037.733118][ T5789] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1037.734050][T12426] kvaser_usb 6-1:7.112: error -ENODEV: Cannot get usb endpoint(s) [ 1037.736418][ T5789] uvcvideo 7-1:0.105: No valid video chain found. [ 1037.837358][T12426] kvaser_usb 6-1:7.77: error -ENODEV: Cannot get usb endpoint(s) [ 1037.863974][T12426] usb 6-1: USB disconnect, device number 63 [ 1037.917462][T12255] usb 7-1: USB disconnect, device number 28 [ 1038.463669][T21552] input: syz1 as /devices/virtual/input/input82 [ 1038.641749][T21565] loop5: detected capacity change from 0 to 7 [ 1038.643786][T21565] Dev loop5: unable to read RDB block 7 [ 1038.643826][T21565] loop5: unable to read partition table [ 1038.644016][T21565] loop5: partition table beyond EOD, truncated [ 1038.644034][T21565] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1038.756086][T18279] Flush: task=udevd[18279] dev=loop5 state=2 [ 1038.825966][T18279] Teardown: task=udevd[18279] dev=loop5 state=2 [ 1039.015810][T12255] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1039.194956][T12255] usb 7-1: Using ep0 maxpacket: 32 [ 1039.197194][T12255] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.197237][T12255] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.197262][T12255] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.197282][T12255] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.197307][T12255] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1039.197337][T12255] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1039.197358][T12255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.306604][T12255] usb 7-1: config 0 descriptor?? [ 1039.705017][ T5698] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1039.717027][ T4906] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 1039.860131][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1039.861445][ T5698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.861469][ T5698] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1039.861573][ T5698] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x42, changing to 0x2 [ 1039.861589][ T5698] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1039.864278][ T5698] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 1039.864305][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.864376][ T5698] usb 2-1: Product: syz [ 1039.864391][ T5698] usb 2-1: Manufacturer: syz [ 1039.864406][ T5698] usb 2-1: SerialNumber: syz [ 1039.915033][ T5789] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1039.921160][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.929408][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.940108][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.942245][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.998052][T12255] hid_parser_main: 30 callbacks suppressed [ 1039.998074][T12255] corsair-psu 0003:1B1C:1C09.004D: unknown main item tag 0x2 [ 1039.998112][T12255] corsair-psu 0003:1B1C:1C09.004D: item fetching failed at offset 1/5 [ 1039.998926][T12255] corsair-psu 0003:1B1C:1C09.004D: probe with driver corsair-psu failed with error -22 [ 1040.065332][ T5789] usb 6-1: Using ep0 maxpacket: 8 [ 1040.068694][ T5789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.068713][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.068925][ T5789] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1040.068940][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.122014][ T5789] usb 6-1: config 0 descriptor?? [ 1040.179860][T12255] usb 7-1: USB disconnect, device number 29 [ 1040.345005][T21595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.347421][T21595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.350884][ T5698] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 1040.360351][ T5698] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1040.406581][ T5698] usb 2-1: USB disconnect, device number 40 [ 1040.512811][ T5690] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1040.544076][ T5690] usb 5-1: USB disconnect, device number 73 [ 1040.551966][ T5789] asus 0003:048D:CE50.004E: unknown main item tag 0x0 [ 1040.552000][ T5789] asus 0003:048D:CE50.004E: unknown main item tag 0x0 [ 1040.552027][ T5789] asus 0003:048D:CE50.004E: unexpected long global item [ 1040.554561][ T5789] asus 0003:048D:CE50.004E: Asus hid parse failed: -22 [ 1040.554704][ T5789] asus 0003:048D:CE50.004E: probe with driver asus failed with error -22 [ 1040.734244][T21601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1040.740159][T21601] netlink: 'syz.5.4116': attribute type 4 has an invalid length. [ 1040.775485][T21601] netlink: 'syz.5.4116': attribute type 4 has an invalid length. [ 1040.796848][T12255] usb 6-1: USB disconnect, device number 64 [ 1041.013676][T21683] comedi comedi3: pcl812: a I/O base address must be specified [ 1041.195121][T12426] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1041.357173][T12426] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1041.357774][T12426] usb 7-1: not running at top speed; connect to a high speed hub [ 1041.358952][T12426] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.358976][T12426] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1041.359025][T12426] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1041.361350][T12426] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.361379][T12426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.361399][T12426] usb 7-1: Product: syz [ 1041.361415][T12426] usb 7-1: Manufacturer: syz [ 1041.361429][T12426] usb 7-1: SerialNumber: syz [ 1041.665164][T21677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.666822][T21677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.671880][T21677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.674639][T21677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.713159][T12426] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1041.713185][T12426] cdc_ncm 7-1:1.0: bind() failure [ 1041.745129][T12426] usb 7-1: USB disconnect, device number 30 [ 1041.765019][T12255] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1041.828446][T21726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.918810][T12255] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1041.918839][T12255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.918859][T12255] usb 2-1: Product: syz [ 1041.918868][T12255] usb 2-1: Manufacturer: syz [ 1041.918876][T12255] usb 2-1: SerialNumber: syz [ 1042.085582][ T5698] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1042.235099][ T5698] usb 5-1: Using ep0 maxpacket: 16 [ 1042.237462][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1042.238961][ T5698] usb 5-1: config 128 has an invalid interface number: 190 but max is 0 [ 1042.238985][ T5698] usb 5-1: config 128 has no interface number 0 [ 1042.241409][ T5698] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=3d.62 [ 1042.241444][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.241465][ T5698] usb 5-1: Product: syz [ 1042.241479][ T5698] usb 5-1: Manufacturer: syz [ 1042.241493][ T5698] usb 5-1: SerialNumber: syz [ 1042.260820][ T5698] usb 5-1: active config #128 != 1 ?? [ 1042.307051][T12426] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1042.327916][T12255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1042.327982][T12255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1042.448811][T21753] usb usb8: usbfs: process 21753 (syz.6.4132) did not claim interface 0 before use [ 1042.461620][ T5698] usb 5-1: USB disconnect, device number 74 [ 1042.473841][T12426] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1042.473863][T12426] usb 6-1: config 0 has no interface number 0 [ 1042.473888][T12426] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1042.493727][T21753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4132'. [ 1042.517720][T12426] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1042.517747][T12426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.517767][T12426] usb 6-1: Product: syz [ 1042.517828][T12426] usb 6-1: Manufacturer: syz [ 1042.517843][T12426] usb 6-1: SerialNumber: syz [ 1042.617376][T12426] usb 6-1: config 0 descriptor?? [ 1042.680963][T21767] comedi comedi3: pcl818: I/O base address not correctly aligned [ 1042.874759][T21781] comedi comedi3: comedi_config --init_data is deprecated [ 1043.075061][ T5698] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1043.180185][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4137'. [ 1043.224956][ T5698] usb 7-1: Using ep0 maxpacket: 32 [ 1043.226878][ T5698] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1043.226905][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.234422][ T5698] usb 7-1: config 0 descriptor?? [ 1043.268915][ T5698] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1043.830619][T21800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4139'. [ 1044.189256][T12255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 1044.189313][T12255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1044.236602][T12255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1044.266848][T12255] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1044.311596][T12255] usb 2-1: USB disconnect, device number 41 [ 1044.745533][ T5698] gspca_sunplus: reg_w_riv err -71 [ 1044.745654][ T5698] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1044.755488][ T5698] usb 7-1: USB disconnect, device number 31 [ 1044.795009][ T5323] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1044.944930][ T5323] usb 5-1: Using ep0 maxpacket: 16 [ 1044.946854][ T5323] usb 5-1: config 1 has an invalid interface number: 95 but max is 0 [ 1044.946879][ T5323] usb 5-1: config 1 has no interface number 0 [ 1044.946923][ T5323] usb 5-1: config 1 interface 95 altsetting 253 has a duplicate endpoint with address 0x9, skipping [ 1044.946948][ T5323] usb 5-1: config 1 interface 95 has no altsetting 0 [ 1044.949101][ T5323] usb 5-1: Dual-Role OTG device on HNP port [ 1044.949367][ T5323] usb 5-1: New USB device found, idVendor=12d1, idProduct=7491, bcdDevice=fd.6f [ 1044.949382][ T5323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.949393][ T5323] usb 5-1: Product: syz [ 1044.949401][ T5323] usb 5-1: Manufacturer: syz [ 1044.949409][ T5323] usb 5-1: SerialNumber: syz [ 1045.053985][ T5698] usb 6-1: USB disconnect, device number 65 [ 1045.132589][T21833] usb usb8: usbfs: process 21833 (syz.5.4141) did not claim interface 0 before use [ 1045.157859][T21833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4141'. [ 1045.298668][ T5323] option 5-1:1.95: GSM modem (1-port) converter detected [ 1045.321561][ T5323] usb 5-1: USB disconnect, device number 75 [ 1045.353470][ T5323] option 5-1:1.95: device disconnected [ 1045.508549][T21859] loop5: detected capacity change from 0 to 7 [ 1045.511646][T21859] Dev loop5: unable to read RDB block 7 [ 1045.511688][T21859] loop5: unable to read partition table [ 1045.511879][T21859] loop5: partition table beyond EOD, truncated [ 1045.511897][T21859] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1045.534441][T16231] Flush: task=udevd[16231] dev=loop5 state=2 [ 1045.615099][T16231] Teardown: task=udevd[16231] dev=loop5 state=2 [ 1045.896336][T21873] comedi comedi3: pcl812: a I/O base address must be specified [ 1046.021701][T21876] usb usb8: usbfs: process 21876 (syz.4.4150) did not claim interface 0 before use [ 1046.030365][T21876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4150'. [ 1046.154167][T21883] tipc: Started in network mode [ 1046.154198][T21883] tipc: Node identity 000000400000005f0007, cluster identity 4711 [ 1046.154246][T21883] tipc: Enabling of bearer rejected, failed to enable media [ 1046.279286][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1046.425342][ T4906] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1046.677358][ T5698] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1046.734973][ T5690] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1046.824965][ T5698] usb 7-1: device descriptor read/64, error -71 [ 1046.888917][ T5690] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1046.888938][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.888949][ T5690] usb 6-1: Product: syz [ 1046.888957][ T5690] usb 6-1: Manufacturer: syz [ 1046.888964][ T5690] usb 6-1: SerialNumber: syz [ 1046.894372][ T5690] usb 6-1: config 0 descriptor?? [ 1047.065233][ T5698] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 1047.138088][T21901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.138239][ T5690] peak_usb 6-1:0.0: PEAK-System PCAN-USB FD v23 fw v38.6.0 (1 channels) [ 1047.142542][T21901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.194998][ T5698] usb 7-1: device descriptor read/64, error -71 [ 1047.305997][ T5698] usb usb7-port1: attempt power cycle [ 1047.338508][ T5690] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1047.338536][ T5690] peak_usb 6-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 1047.425307][ T5690] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1047.431394][ T5690] usb 6-1: USB disconnect, device number 66 [ 1047.644993][ T5698] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 1047.665405][ T5698] usb 7-1: device descriptor read/8, error -71 [ 1047.902691][T21930] usb usb8: usbfs: process 21930 (syz.5.4159) did not claim interface 0 before use [ 1047.905088][ T5698] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 1047.927345][ T5698] usb 7-1: device descriptor read/8, error -71 [ 1047.953426][T21930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4159'. [ 1048.041755][ T5698] usb usb7-port1: unable to enumerate USB device [ 1048.171435][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4163'. [ 1048.462782][T21962] random: crng reseeded on system resumption [ 1048.478258][T21962] Restarting kernel threads ... [ 1048.500329][T21962] Done restarting kernel threads. [ 1048.504303][T21962] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4166'. [ 1048.625167][ T5323] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1048.792313][ T5323] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1048.792341][ T5323] usb 5-1: config 1 has no interface number 0 [ 1048.792378][ T5323] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1048.792393][ T5323] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1048.792406][ T5323] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1048.792419][ T5323] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1048.796062][ T5698] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1048.800833][ T5323] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1048.800849][ T5323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.800860][ T5323] usb 5-1: Product: syz [ 1048.800868][ T5323] usb 5-1: Manufacturer: syz [ 1048.800875][ T5323] usb 5-1: SerialNumber: syz [ 1048.893157][T21956] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1048.893261][T21956] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1048.945069][ T5698] usb 6-1: Using ep0 maxpacket: 8 [ 1048.949435][ T5698] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.949463][ T5698] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.949486][ T5698] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1048.949511][ T5698] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1048.949540][ T5698] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1048.949563][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.961496][ T5698] usb 6-1: config 0 descriptor?? [ 1049.100241][T21956] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1049.100417][T21956] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1049.121219][ T5323] usb 5-1: No status endpoint found [ 1049.174074][T21962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.178008][T21962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.394628][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.394665][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.394717][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.394744][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.394771][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.395325][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.395359][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.395386][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.395411][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.395437][ T5698] kye 0003:0458:4018.004F: unknown main item tag 0x0 [ 1049.423129][ T5698] kye 0003:0458:4018.004F: hidraw0: USB HID v0.04 Device [HID 0458:4018] on usb-dummy_hcd.5-1/input0 [ 1049.461420][T21988] usb usb8: usbfs: process 21988 (syz.1.4168) did not claim interface 0 before use [ 1049.481970][T21988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4168'. [ 1049.571287][T21991] usb usb8: usbfs: process 21991 (syz.6.4169) did not claim interface 0 before use [ 1049.593028][T21962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.604355][T21993] comedi comedi3: pcl812: a I/O base address must be specified [ 1049.610414][T21962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.618532][ T5690] usb 6-1: USB disconnect, device number 67 [ 1049.636124][T21989] fido_id[21989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1050.004929][ T5698] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1050.157840][ T5698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.160008][ T5698] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1050.160035][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.160055][ T5698] usb 2-1: Product: syz [ 1050.160065][ T5698] usb 2-1: Manufacturer: syz [ 1050.160073][ T5698] usb 2-1: SerialNumber: syz [ 1050.164782][ T5698] usb 2-1: config 0 descriptor?? [ 1050.221280][ T5698] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 1050.221302][ T5698] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1050.417663][ T5323] usb 2-1: USB disconnect, device number 42 [ 1051.008559][T22049] usb usb8: usbfs: process 22049 (syz.1.4179) did not claim interface 0 before use [ 1051.106934][T22051] comedi comedi3: pcl812: a I/O base address must be specified [ 1051.155000][ T5789] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1051.306637][ T5789] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 1051.306664][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.306684][ T5789] usb 7-1: config 0 has no interface number 0 [ 1051.337901][ T5789] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1051.337924][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.337935][ T5789] usb 7-1: Product: syz [ 1051.337943][ T5789] usb 7-1: Manufacturer: syz [ 1051.337951][ T5789] usb 7-1: SerialNumber: syz [ 1051.356597][ T5789] usb 7-1: config 0 descriptor?? [ 1051.402124][ T5789] vmk80xx 7-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 1051.417600][ T5323] usb 5-1: USB disconnect, device number 76 [ 1051.539286][T22068] fuse: fd is not a fuse device [ 1051.976585][ T5323] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 1052.125483][ T5323] usb 5-1: device descriptor read/64, error -71 [ 1052.239459][T12426] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1052.404972][ T5323] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1052.415814][T12426] usb 2-1: Using ep0 maxpacket: 8 [ 1052.419387][T12426] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1052.419423][T12426] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1052.419516][T12426] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1052.419551][T12426] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1052.419574][T12426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.455957][T12426] usb 2-1: config 0 descriptor?? [ 1052.545042][ T5323] usb 5-1: device descriptor read/64, error -71 [ 1052.655782][ T5323] usb usb5-port1: attempt power cycle [ 1052.887564][T22098] usb usb8: usbfs: process 22098 (syz.5.4187) did not claim interface 0 before use [ 1052.986013][T22097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4187'. [ 1052.994715][T12426] belkin 0003:1020:0006.0050: hidraw0: USB HID v10.01 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 1053.024939][ T5323] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 1053.045722][ T5323] usb 5-1: device descriptor read/8, error -71 [ 1053.157114][T22108] usb usb8: usbfs: process 22108 (syz.5.4188) did not claim interface 0 before use [ 1053.182599][T22089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.184625][T22089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.191846][ T5755] usb 2-1: USB disconnect, device number 43 [ 1053.285693][ T5323] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1053.312329][ T5323] usb 5-1: device descriptor read/8, error -71 [ 1053.415529][ T5323] usb usb5-port1: unable to enumerate USB device [ 1053.544996][T12426] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1053.709304][T12426] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1053.709335][T12426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.709355][T12426] usb 6-1: Product: syz [ 1053.709366][T12426] usb 6-1: Manufacturer: syz [ 1053.709374][T12426] usb 6-1: SerialNumber: syz [ 1053.715714][T12426] usb 6-1: config 0 descriptor?? [ 1053.750323][T12426] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1053.787524][T12426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1053.788357][T12426] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1053.788413][T12426] usb 6-1: media controller created [ 1053.877536][T12426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.904981][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.942615][ T5755] usb 7-1: USB disconnect, device number 36 [ 1053.969533][T22123] comedi comedi3: pcl812: a I/O base address must be specified [ 1054.033619][T22132] fuse: fd is not a fuse device [ 1054.038245][T12426] DVB: Unable to find symbol mt352_attach() [ 1054.108538][T12426] DVB: Unable to find symbol nxt6000_attach() [ 1054.108552][T12426] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1054.128848][T12426] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input83 [ 1054.145752][T12426] dvb-usb: schedule remote query interval to 1000 msecs. [ 1054.145771][T12426] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1054.145787][T12426] dvb-usb: bulk message failed: -22 (7/0) [ 1054.145804][T12426] dvb-usb: bulk message failed: -22 (7/0) [ 1054.157210][T12426] usb 6-1: USB disconnect, device number 68 [ 1054.288495][T12426] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1054.335071][ T5755] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1054.485754][ T5755] usb 7-1: too many configurations: 24, using maximum allowed: 8 [ 1054.494771][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.495137][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.495183][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.495211][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.495235][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.495259][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.495284][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.509307][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.509331][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.509391][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.509416][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.509440][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.509464][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.509489][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.562820][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.562845][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.562886][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.562912][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.562936][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.562960][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.562986][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.592799][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.592823][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.592865][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.592891][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.592914][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.592938][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.592964][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.645674][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.645699][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.645743][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.645769][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.645792][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.645816][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.645841][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.685574][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.685599][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.685640][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.685665][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.685689][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.685713][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.685738][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.689122][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.689145][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.689186][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.689211][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.689235][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.689258][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.689283][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.691358][ T5755] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1054.691381][ T5755] usb 7-1: config 1 has no interface number 0 [ 1054.691485][ T5755] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1054.691512][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1054.691535][ T5755] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1054.691558][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.691582][ T5755] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.717564][ T5755] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1054.717590][ T5755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.717610][ T5755] usb 7-1: Product: syz [ 1054.717624][ T5755] usb 7-1: Manufacturer: syz [ 1054.717639][ T5755] usb 7-1: SerialNumber: syz [ 1054.735943][T22148] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1054.736292][T22148] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1054.960274][T22148] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1054.960440][T22148] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1054.983219][ T5755] usb 7-1: No status endpoint found [ 1055.185729][T22198] usb usb8: usbfs: process 22198 (syz.5.4197) did not claim interface 0 before use [ 1055.186217][T22196] usb usb8: usbfs: process 22196 (syz.1.4196) did not claim interface 0 before use [ 1055.295799][T12426] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1055.413705][T22209] loop5: detected capacity change from 0 to 7 [ 1055.418111][T22209] Dev loop5: unable to read RDB block 7 [ 1055.418151][T22209] loop5: unable to read partition table [ 1055.418340][T22209] loop5: partition table beyond EOD, truncated [ 1055.420000][T22209] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1055.444377][T16231] Flush: task=udevd[16231] dev=loop5 state=2 [ 1055.447532][T12426] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1055.447561][T12426] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1055.447586][T12426] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1055.450511][T12426] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1055.450538][T12426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.450557][T12426] usb 5-1: Product: syz [ 1055.450571][T12426] usb 5-1: Manufacturer: syz [ 1055.450586][T12426] usb 5-1: SerialNumber: syz [ 1055.463256][T12426] usb 5-1: config 0 descriptor?? [ 1055.464355][T22189] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1055.464529][T22189] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1055.473872][T12426] usb 5-1: ucan: probing device on interface #0 [ 1055.525012][ T5755] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1055.546514][T16231] Teardown: task=udevd[16231] dev=loop5 state=2 [ 1055.677267][ T5755] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1055.679187][ T5755] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1055.679347][ T5755] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1055.679746][T12426] usb 5-1: ucan: could not read protocol version, ret=-32 [ 1055.679766][T12426] usb 5-1: ucan: probe failed; try to update the device firmware [ 1055.683004][ T5755] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 1055.683020][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.683031][ T5755] usb 2-1: Product: ӿ [ 1055.683039][ T5755] usb 2-1: Manufacturer: ч [ 1055.683046][ T5755] usb 2-1: SerialNumber: 掋䂚뀵왍옛桑ꖤ鸤䥟蓖궉鐌Ყ墀郵鑍텷ᢴ凅⅙坉蚚Ⅿ䫌르ᝃ퇸ꌤ啤퀻裨ꌲ凼黨勀䦺갨⪟⁍᧾゘㱤䕉藼鍟䯖⊣窉見킾葰㉃勧乼伉鿻畉嵱嫜⿾辙큹ᬂމ〱椏劰塍﶐契ƨ뷡꛴㽺숉콴덽펥쎽䄴풪벗忛섪칛㩶䉦騦刺瞵㳮ܡ霒奶⇃䷛ⴹ㌼凈 [ 1056.166507][T22231] comedi comedi3: pcl812: a I/O base address must be specified [ 1056.296325][ T5698] usb 2-1: USB disconnect, device number 44 [ 1056.724993][ T5690] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1056.851613][T22261] usb usb8: usbfs: process 22261 (syz.1.4206) did not claim interface 0 before use [ 1056.875520][ T5690] usb 6-1: Using ep0 maxpacket: 8 [ 1056.879215][ T5690] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1056.881590][ T5690] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.881613][ T5690] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1056.914559][ T5690] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1056.914586][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.914606][ T5690] usb 6-1: Product: syz [ 1056.914621][ T5690] usb 6-1: Manufacturer: syz [ 1056.914636][ T5690] usb 6-1: SerialNumber: syz [ 1056.960042][T22264] usb usb8: usbfs: process 22264 (syz.1.4207) did not claim interface 0 before use [ 1057.055526][T12426] usb 7-1: USB disconnect, device number 37 [ 1057.153584][T22256] netlink: 'syz.5.4205': attribute type 12 has an invalid length. [ 1057.153674][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4205'. [ 1057.156575][ T5690] usb 6-1: invalid UAC_HEADER (v1) [ 1057.180549][T22277] loop5: detected capacity change from 0 to 7 [ 1057.190188][T22277] Dev loop5: unable to read RDB block 7 [ 1057.190230][T22277] loop5: unable to read partition table [ 1057.190430][T22277] loop5: partition table beyond EOD, truncated [ 1057.190448][T22277] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1057.232198][T16222] Flush: task=udevd[16222] dev=loop5 state=2 [ 1057.290025][ T5690] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1057.316517][T16222] Teardown: task=udevd[16222] dev=loop5 state=2 [ 1057.343957][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.383896][T22288] comedi comedi3: 8255: I/O port conflict (0x20,4) [ 1057.460030][ T5789] usb 6-1: USB disconnect, device number 69 [ 1057.577891][T22308] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4211'. [ 1057.578041][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4211'. [ 1058.011470][T22320] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1058.020222][T12255] usb 5-1: USB disconnect, device number 81 [ 1058.220735][T22330] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4214'. [ 1058.222653][T22336] usb usb8: usbfs: process 22336 (syz.1.4215) did not claim interface 0 before use [ 1058.412399][T22340] usb usb8: usbfs: process 22340 (syz.1.4216) did not claim interface 0 before use [ 1058.709000][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4219'. [ 1058.827264][T22358] binder: 22357:22358 ioctl 4020ae76 200000000000 returned -22 [ 1058.853282][T22360] comedi comedi3: pcl812: a I/O base address must be specified [ 1058.883606][T22361] binder: 22357:22361 ioctl c0306201 200000000640 returned -22 [ 1058.965004][ T5755] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1058.969673][ T4906] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 1059.011382][T22373] usb usb8: usbfs: process 22373 (syz.6.4224) did not claim interface 0 before use [ 1059.058275][T22375] usb usb8: usbfs: process 22375 (syz.6.4225) did not claim interface 0 before use [ 1059.093584][T22375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4225'. [ 1059.115026][ T5755] usb 2-1: Using ep0 maxpacket: 8 [ 1059.117285][ T5755] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1059.117312][ T5755] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.117333][ T5755] usb 2-1: config 179 has no interface number 0 [ 1059.117376][ T5755] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1059.117419][ T5755] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1059.117443][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.185018][ T5698] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1059.206140][T22380] loop5: detected capacity change from 0 to 7 [ 1059.209712][T22380] Dev loop5: unable to read RDB block 7 [ 1059.209762][T22380] loop5: unable to read partition table [ 1059.210534][T22380] loop5: partition table beyond EOD, truncated [ 1059.210552][T22380] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1059.231575][T16222] Flush: task=udevd[16222] dev=loop5 state=2 [ 1059.315668][T16222] Teardown: task=udevd[16222] dev=loop5 state=2 [ 1059.343709][T12426] usb 2-1: USB disconnect, device number 45 [ 1059.350640][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.350684][ T5698] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1059.350708][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.393787][ T5698] usb 6-1: config 0 descriptor?? [ 1059.602191][ T5698] usbhid 6-1:0.0: can't add hid device: -71 [ 1059.602314][ T5698] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1059.620919][ T5698] usb 6-1: USB disconnect, device number 70 [ 1060.045114][T12426] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1060.085164][ T5698] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1060.203720][T12426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.203769][T12426] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1060.203793][T12426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.214964][ T5690] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1060.248600][ T5698] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1060.248653][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.248680][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.248703][ T5698] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1060.251371][T12426] usb 6-1: config 0 descriptor?? [ 1060.251707][ T5698] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1060.251733][ T5698] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1060.251753][ T5698] usb 7-1: Manufacturer: syz [ 1060.314762][ T5698] usb 7-1: config 0 descriptor?? [ 1060.370186][ T5690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1060.371250][ T5690] usb 2-1: not running at top speed; connect to a high speed hub [ 1060.399640][ T5690] usb 2-1: config 243 has an invalid interface number: 55 but max is 0 [ 1060.399664][ T5690] usb 2-1: config 243 has no interface number 0 [ 1060.399695][ T5690] usb 2-1: config 243 interface 55 has no altsetting 0 [ 1060.402708][ T5690] usb 2-1: New USB device found, idVendor=0458, idProduct=7004, bcdDevice=a9.bc [ 1060.402735][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.402806][ T5690] usb 2-1: Product: syz [ 1060.402820][ T5690] usb 2-1: Manufacturer: syz [ 1060.402834][ T5690] usb 2-1: SerialNumber: syz [ 1060.662856][T22364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.674239][T22364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.829905][ T5698] hid_parser_main: 30 callbacks suppressed [ 1060.833248][ T5698] appleir 0003:05AC:8243.0051: unknown main item tag 0x0 [ 1060.841292][ T5690] gspca_main: spca561-2.14.0 probing 0458:7004 [ 1060.847608][ T5690] spca561 2-1:243.55: probe with driver spca561 failed with error -22 [ 1060.854755][ T5698] appleir 0003:05AC:8243.0051: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1060.859249][ T5690] usb 2-1: USB disconnect, device number 46 [ 1061.462595][T12426] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1061.492515][T12426] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 1061.618378][T22455] usb usb8: usbfs: process 22455 (syz.4.4233) did not claim interface 0 before use [ 1061.774230][T22459] usb usb8: usbfs: process 22459 (syz.4.4234) did not claim interface 0 before use [ 1061.869620][ T5690] usb 6-1: USB disconnect, device number 71 [ 1061.869679][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1061.999897][T22471] loop5: detected capacity change from 0 to 7 [ 1062.022121][T22471] Dev loop5: unable to read RDB block 7 [ 1062.022164][T22471] loop5: unable to read partition table [ 1062.022357][T22471] loop5: partition table beyond EOD, truncated [ 1062.022389][T22471] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1062.032823][T22412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.034151][T22470] Flush: task=syz.1.4235[22470] dev=loop5 state=2 [ 1062.038557][T22412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.098631][T22470] Teardown: task=syz.1.4235[22470] dev=loop5 state=2 [ 1062.205139][T18816] usb 7-1: USB disconnect, device number 38 [ 1062.355524][ T5789] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1062.517345][ T5789] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1062.517381][ T5789] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1062.517416][ T5789] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1062.517440][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.524151][ T5789] usb 5-1: config 0 descriptor?? [ 1062.525025][ T5690] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1062.572783][T22483] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1062.706371][ T5690] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 1062.706427][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 26232, setting to 64 [ 1062.706486][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1062.706511][ T5690] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1062.706523][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.713411][ T5690] usb 2-1: config 0 descriptor?? [ 1062.922799][ T5323] usb 2-1: USB disconnect, device number 47 [ 1062.995187][ T4906] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1062.995596][ T4906] Bluetooth: hci0: Injecting HCI hardware error event [ 1063.007282][T16189] Bluetooth: hci0: hardware error 0x00 [ 1063.085017][T12426] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1063.133924][T22533] comedi comedi3: pcl812: a I/O base address must be specified [ 1063.177190][ T5789] usbhid 5-1:0.0: can't add hid device: -71 [ 1063.179846][ T5789] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1063.202714][ T5789] usb 5-1: USB disconnect, device number 82 [ 1063.238953][T12426] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1063.238980][T12426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.239000][T12426] usb 7-1: Product: syz [ 1063.239009][T12426] usb 7-1: Manufacturer: syz [ 1063.239017][T12426] usb 7-1: SerialNumber: syz [ 1063.243190][T12426] usb 7-1: config 0 descriptor?? [ 1063.360184][T22545] usb usb8: usbfs: process 22545 (syz.5.4242) did not claim interface 0 before use [ 1063.513076][T22554] usb usb8: usbfs: process 22554 (syz.1.4244) did not claim interface 0 before use [ 1063.665240][ T5789] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1063.698782][T12426] usb 7-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1063.698799][T12426] usb 7-1: Firmware version (0.0) predates our first public release. [ 1063.698809][T12426] usb 7-1: Please update to version 0.2 or newer [ 1063.746967][T22556] netlink: 'syz.1.4245': attribute type 10 has an invalid length. [ 1063.811491][T22561] netlink: 'syz.4.4246': attribute type 2 has an invalid length. [ 1063.811510][T22561] netlink: 'syz.4.4246': attribute type 1 has an invalid length. [ 1063.820820][T22556] bond0: (slave bond_slave_0): Releasing backup interface [ 1063.841113][ T5789] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1063.841141][ T5789] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1063.841162][ T5789] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1063.873890][T22561] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1063.889512][ T5789] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1063.889541][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1063.889563][ T5789] usb 6-1: Product: syz [ 1063.889577][ T5789] usb 6-1: Manufacturer: syz [ 1063.889592][ T5789] usb 6-1: SerialNumber: syz [ 1063.927121][ T5789] usb 6-1: config 0 descriptor?? [ 1063.940798][ T5789] usb 6-1: selecting invalid altsetting 0 [ 1064.090938][T12426] usb 7-1: USB disconnect, device number 39 [ 1064.360653][T22590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.378100][T22590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.526799][T18816] usb 6-1: USB disconnect, device number 72 [ 1064.947509][T22631] usb usb8: usbfs: process 22631 (syz.5.4251) did not claim interface 0 before use [ 1065.075074][T12426] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1065.077197][T16189] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1065.226737][T12426] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1065.226764][T12426] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1065.226785][T12426] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.227890][T12426] usb 5-1: config 220 has no interface number 2 [ 1065.227961][T12426] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1065.227989][T12426] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1065.228007][T12426] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1065.228024][T12426] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1065.230638][T12426] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1065.230665][T12426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.230680][T12426] usb 5-1: Product: syz [ 1065.230688][T12426] usb 5-1: Manufacturer: syz [ 1065.230696][T12426] usb 5-1: SerialNumber: syz [ 1065.451314][T22653] usb usb8: usbfs: process 22653 (syz.1.4253) did not claim interface 0 before use [ 1065.584332][T22659] program syz.6.4254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.596324][T22659] tipc: Can't bind to reserved service type 1 [ 1066.055024][ T5698] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1066.216914][ T5698] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1066.216945][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.226135][ T5698] usb 6-1: config 0 descriptor?? [ 1066.304293][ T5698] cp210x 6-1:0.0: cp210x converter detected [ 1066.722432][ T5698] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1066.872482][T16189] Bluetooth: hci5: Malformed LE Event: 0x0b [ 1066.874697][ T5323] usb 6-1: USB disconnect, device number 73 [ 1066.925019][T22694] usb usb8: usbfs: process 22694 (syz.1.4260) did not claim interface 0 before use [ 1067.014378][ T5323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1067.084631][T16189] Bluetooth: hci2: SCO packet for unknown connection handle 6 [ 1067.235207][ T5323] cp210x 6-1:0.0: device disconnected [ 1067.318767][T12255] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1067.474940][T12255] usb 7-1: Using ep0 maxpacket: 32 [ 1067.481600][T12255] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1067.481617][T12255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.481628][T12255] usb 7-1: Product: syz [ 1067.481637][T12255] usb 7-1: Manufacturer: syz [ 1067.481647][T12255] usb 7-1: SerialNumber: syz [ 1067.515221][T12255] usb 7-1: config 0 descriptor?? [ 1067.536576][T12255] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1067.817478][T12426] usb 5-1: selecting invalid altsetting 0 [ 1067.819404][T12426] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1067.819435][T12426] uvcvideo 5-1:220.0: No valid video chain found. [ 1067.885265][T12426] usb 5-1: selecting invalid altsetting 0 [ 1067.885301][T12426] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1067.891120][T12255] gspca_ov534_9: reg_w failed -71 [ 1067.891314][T12426] usb 5-1: USB disconnect, device number 83 [ 1067.912132][T22741] IPv6: A: Disabled Multicast RS [ 1068.007431][T22754] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4265'. [ 1068.023133][T22754] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4265'. [ 1068.174938][T12255] gspca_ov534_9: Unknown sensor 0000 [ 1068.175045][T12255] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1068.177446][T22765] usb usb8: usbfs: process 22765 (syz.6.4269) did not claim interface 0 before use [ 1068.178745][T12255] usb 7-1: USB disconnect, device number 40 [ 1068.332454][T22774] loop5: detected capacity change from 0 to 7 [ 1068.339015][T22774] Dev loop5: unable to read RDB block 7 [ 1068.339055][T22774] loop5: unable to read partition table [ 1068.339248][T22774] loop5: partition table beyond EOD, truncated [ 1068.339264][T22774] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1068.344140][T22772] Flush: task=syz.6.4271[22772] dev=loop5 state=2 [ 1068.425286][T22772] Teardown: task=syz.6.4271[22772] dev=loop5 state=2 [ 1068.672301][T22761] sock: sock_set_timeout: `syz.1.4268' (pid 22761) tries to set negative timeout [ 1068.976554][T22815] usb usb8: usbfs: process 22815 (syz.1.4279) did not claim interface 0 before use [ 1069.134469][T22821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.145243][T22821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.158576][T22821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.160377][T22821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.163057][T22821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.163618][T22821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.201792][T22821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.202786][T22821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.222517][T22821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.223917][T22821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.366260][T12255] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1069.514927][T12255] usb 7-1: Using ep0 maxpacket: 16 [ 1069.517729][T12255] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.517754][T12255] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.519959][T12255] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.519987][T12255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.520007][T12255] usb 7-1: Product: syz [ 1069.520021][T12255] usb 7-1: Manufacturer: syz [ 1069.520035][T12255] usb 7-1: SerialNumber: syz [ 1069.527338][T22854] loop5: detected capacity change from 0 to 7 [ 1069.532436][T22854] Dev loop5: unable to read RDB block 7 [ 1069.532524][T22854] loop5: unable to read partition table [ 1069.532834][T22854] loop5: partition table beyond EOD, truncated [ 1069.532852][T22854] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1069.534011][T22853] Flush: task=syz.5.4283[22853] dev=loop5 state=2 [ 1069.589234][T12255] usb 7-1: 0:2 : does not exist [ 1069.696243][T22853] Teardown: task=syz.5.4283[22853] dev=loop5 state=2 [ 1069.861880][T12255] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1069.953396][T12255] usb 7-1: USB disconnect, device number 41 [ 1070.026300][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.116417][ T5789] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1070.136854][T22896] genirq: Flags mismatch irq 4. 00202000 (pcl816) vs. 00202080 (ttyS0) [ 1070.205405][T22900] usb usb8: usbfs: process 22900 (syz.5.4289) did not claim interface 0 before use [ 1070.279214][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 1070.282904][ T5789] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1070.301637][ T5789] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1070.301664][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.301685][ T5789] usb 5-1: Product: 䀁 [ 1070.301699][ T5789] usb 5-1: Manufacturer: 沿疘 [ 1070.301713][ T5789] usb 5-1: SerialNumber: ᗮ뵢ꑱ모궝꺵鉑䘃搁秘㸁各䨘⁐ꏺ鏋ಕ쩏瘪䋲쥄㻨쮛᝕爳ጚⵅ䶯ﲎ뷠ܘ鐅ꩱ洐蟟燗с徔簎ﬢ℁厔꜊卙䓙咋鳍濱䇚╦鴃俰垎炿饰뉶窊ꊄ쫞뙿응裆ꪴ丏䴜綠缶펚ᘚﺣ뢑铕ҿӢ䑉ﻛṄ凸依뒛喸傽쒿⋘ꑬ耢 [ 1070.590282][ T5789] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1070.745040][T18816] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1070.786112][ T5789] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1070.843985][ T5789] usb 5-1: USB disconnect, device number 84 [ 1070.908532][T18816] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1070.908558][T18816] usb 7-1: config 1 has no interface number 0 [ 1070.908601][T18816] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1070.908626][T18816] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 1070.908651][T18816] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 1070.908674][T18816] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1070.913742][T18816] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1070.913769][T18816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.913789][T18816] usb 7-1: Product: syz [ 1070.913803][T18816] usb 7-1: Manufacturer: syz [ 1070.913817][T18816] usb 7-1: SerialNumber: syz [ 1071.021337][T22949] usb usb8: usbfs: process 22949 (syz.5.4294) did not claim interface 0 before use [ 1071.023015][T22915] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.023129][T22915] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.044677][T22949] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4294'. [ 1071.068444][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.230075][T22915] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.230326][T22915] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.279730][T18816] usb 7-1: No status endpoint found [ 1071.444167][T18816] usb 7-1: USB disconnect, device number 42 [ 1071.466462][ T5698] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1071.627054][ T5698] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1071.627727][ T5698] usb 6-1: not running at top speed; connect to a high speed hub [ 1071.630412][ T5698] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 208, changing to 4 [ 1071.664439][ T5698] usb 6-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1071.664467][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.664487][ T5698] usb 6-1: Product: syz [ 1071.664501][ T5698] usb 6-1: Manufacturer: syz [ 1071.664516][ T5698] usb 6-1: SerialNumber: syz [ 1071.698705][T22989] usb usb8: usbfs: process 22989 (syz.4.4298) did not claim interface 0 before use [ 1072.156273][T18816] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1072.250686][ T5698] usb 6-1: USB disconnect, device number 74 [ 1072.296116][T23010] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4300'. [ 1072.336385][T18816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1072.336944][T18816] usb 5-1: not running at top speed; connect to a high speed hub [ 1072.340953][T18816] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1072.340978][T18816] usb 5-1: config 0 has no interface number 0 [ 1072.341020][T18816] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1072.341047][T18816] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1072.341072][T18816] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1072.347795][T16222] udevd[16222]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.348293][T18816] usb 5-1: string descriptor 0 read error: -22 [ 1072.348421][T18816] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1072.348448][T18816] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1072.475466][T18816] usb 5-1: config 0 descriptor?? [ 1072.506385][T18816] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input85 [ 1072.628183][T18816] input: failed to attach handler mousedev to device input85, error: -5 [ 1072.707906][T23052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.711427][T23052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.714028][T12255] usb 5-1: USB disconnect, device number 85 [ 1072.773376][T16222] udevd[16222]: Error opening device "/dev/input/event5": No such file or directory [ 1072.773489][T16222] udevd[16222]: Unable to EVIOCGABS device "/dev/input/event5" [ 1072.774362][T16222] udevd[16222]: Unable to EVIOCGABS device "/dev/input/event5" [ 1072.810523][T23064] usb usb8: usbfs: process 23064 (syz.5.4304) did not claim interface 0 before use [ 1072.851688][T23064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4304'. [ 1072.926897][T23061] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1072.926922][T23061] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1072.927020][T23061] vhci_hcd vhci_hcd.0: Device attached [ 1073.073833][T23075] vhci_hcd: connection closed [ 1073.108457][T13062] vhci_hcd vhci_hcd.6: stop threads [ 1073.108482][T13062] vhci_hcd vhci_hcd.6: release socket [ 1073.109868][T13062] vhci_hcd vhci_hcd.6: disconnect device [ 1073.140412][T19326] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1073.398025][T23102] usb usb8: usbfs: process 23102 (syz.1.4307) did not claim interface 0 before use [ 1073.435112][ T5698] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1073.552708][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 1073.552887][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 1073.572088][T23106] ceph: No mds server is up or the cluster is laggy [ 1073.573040][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 1073.573205][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 1073.626354][ T5698] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1073.626382][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.626404][ T5698] usb 6-1: Product: syz [ 1073.626418][ T5698] usb 6-1: Manufacturer: syz [ 1073.626433][ T5698] usb 6-1: SerialNumber: syz [ 1073.632264][ T5698] usb 6-1: config 0 descriptor?? [ 1073.678213][ T5698] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1073.755008][T18816] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1073.930778][T18816] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1073.931511][T18816] usb 5-1: config 1 has no interface number 0 [ 1073.931559][T18816] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1073.931585][T18816] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1073.931663][T18816] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 32 [ 1073.931695][T18816] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.957736][T23120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.985829][T18816] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1073.985848][T18816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.985859][T18816] usb 5-1: Product: syz [ 1073.985867][T18816] usb 5-1: Manufacturer: syz [ 1073.985911][T18816] usb 5-1: SerialNumber: syz [ 1074.082672][T23107] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1074.082779][T23107] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1074.348316][T23136] usb usb8: usbfs: process 23136 (syz.1.4313) did not claim interface 0 before use [ 1074.392334][T23136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4313'. [ 1074.424997][ T5690] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1074.512106][T12426] usb 6-1: USB disconnect, device number 75 [ 1074.565649][T23152] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1074.565768][T23152] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1074.594949][ T5690] usb 7-1: Using ep0 maxpacket: 16 [ 1074.597111][ T5690] usb 7-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config [ 1074.597136][ T5690] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.600627][ T5690] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1074.600652][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.600682][ T5690] usb 7-1: Product: syz [ 1074.600696][ T5690] usb 7-1: Manufacturer: syz [ 1074.600710][ T5690] usb 7-1: SerialNumber: syz [ 1074.693644][ T5690] usb 7-1: 0:2 : does not exist [ 1074.882723][ T5690] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1074.942030][ T5690] usb 7-1: USB disconnect, device number 43 [ 1075.025857][T18816] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:10:07 [ 1075.027921][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.138594][T18816] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 1075.138934][T18816] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 1075.140583][T18816] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 1075.140606][T18816] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 1075.206717][T18816] usb 5-1: USB disconnect, device number 86 [ 1075.213095][T18816] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 1075.326009][T18816] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1075.420183][T23208] usb usb8: usbfs: process 23208 (syz.1.4317) did not claim interface 0 before use [ 1075.601761][T23215] cgroup: subsys name conflicts with all [ 1075.704903][ T5690] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1075.740101][T23227] usb usb8: usbfs: process 23227 (syz.4.4322) did not claim interface 0 before use [ 1075.770143][T23227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4322'. [ 1075.845431][ T5690] usb 7-1: device descriptor read/64, error -71 [ 1076.023472][T23247] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1076.035089][T12426] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1076.046064][T23247] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4326'. [ 1076.105090][ T5690] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1076.139136][T23248] netlink: 'syz.1.4325': attribute type 12 has an invalid length. [ 1076.140266][T23248] netlink: 'syz.1.4325': attribute type 4 has an invalid length. [ 1076.200635][T12426] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1076.200664][T12426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.210924][T12426] usb 6-1: config 0 descriptor?? [ 1076.244987][ T5690] usb 7-1: device descriptor read/64, error -71 [ 1076.346429][ T5690] usb usb7-port1: attempt power cycle [ 1076.440954][T23231] 9p: Bad value for 'cache' [ 1076.471770][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4323'. [ 1076.473063][T23258] usb usb8: usbfs: process 23258 (syz.1.4327) did not claim interface 0 before use [ 1076.515025][T12426] ath6kl: Failed to submit usb control message: -71 [ 1076.515069][T12426] ath6kl: unable to send the bmi data to the device: -71 [ 1076.515088][T12426] ath6kl: Unable to send get target info: -71 [ 1076.516109][T12426] ath6kl: Failed to init ath6kl core: -71 [ 1076.517521][T12426] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1076.567236][T12426] usb 6-1: USB disconnect, device number 76 [ 1076.719304][ T5690] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1076.746795][ T5690] usb 7-1: device descriptor read/8, error -71 [ 1076.995601][ T5690] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1077.025575][ T5690] usb 7-1: device descriptor read/8, error -71 [ 1077.065011][T19326] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1077.146085][ T5690] usb usb7-port1: unable to enumerate USB device [ 1077.221612][T19326] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1077.221645][T19326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.221666][T19326] usb 5-1: Product: syz [ 1077.221680][T19326] usb 5-1: Manufacturer: syz [ 1077.221695][T19326] usb 5-1: SerialNumber: syz [ 1077.271682][T19326] usb 5-1: config 0 descriptor?? [ 1077.289430][T19326] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1077.515746][ T5698] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1077.687756][ T5698] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1077.687784][ T5698] usb 6-1: config 1 has no interface number 0 [ 1077.687827][ T5698] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1077.687853][ T5698] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1077.687878][ T5698] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1077.687894][ T5698] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.690939][ T5698] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1077.690965][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.690985][ T5698] usb 6-1: Product: syz [ 1077.691000][ T5698] usb 6-1: Manufacturer: syz [ 1077.691013][ T5698] usb 6-1: SerialNumber: syz [ 1077.765493][T23279] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1077.765665][T23279] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1077.990238][T23279] binder: 23278:23279 ioctl 40046205 0 returned -22 [ 1078.042479][T23296] binder: 23278:23296 ioctl c0306201 0 returned -14 [ 1078.051602][T23296] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1078.052189][T23296] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1078.109619][T18816] usb 5-1: USB disconnect, device number 87 [ 1078.265104][ T5698] usb 6-1: Incompatible driver and firmware versions [ 1078.309168][T23307] usb usb8: usbfs: process 23307 (syz.1.4332) did not claim interface 0 before use [ 1078.370554][T23308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1078.495910][T23313] usb usb5: usbfs: interface 0 claimed by hub while 'syz.6.4333' sets config #1 [ 1078.632271][T23322] usb usb8: usbfs: process 23322 (syz.1.4336) did not claim interface 0 before use [ 1078.944926][T18816] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1079.107423][T18816] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1079.107465][T18816] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.00 [ 1079.107484][T18816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.111834][T18816] usb 2-1: config 0 descriptor?? [ 1079.128793][T18816] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input86 [ 1079.323815][T23327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.335923][T23327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.337810][T16189] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 1079.337902][ T4942] bcm5974 2-1:0.0: could not read from device [ 1079.411480][T18816] bcm5974 2-1:0.0: could not read from device [ 1079.429960][ T4942] bcm5974 2-1:0.0: could not read from device [ 1079.511662][T18816] input: failed to attach handler mousedev to device input86, error: -5 [ 1079.561596][T18816] usb 2-1: USB disconnect, device number 48 [ 1079.574276][ T4942] bcm5974 2-1:0.0: could not read from device [ 1079.584960][ T5698] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1079.629743][T16231] udevd[16231]: Error opening device "/dev/input/event5": No such file or directory [ 1079.629814][T16231] udevd[16231]: Unable to EVIOCGABS device "/dev/input/event5" [ 1079.629885][T16231] udevd[16231]: Unable to EVIOCGABS device "/dev/input/event5" [ 1079.629943][T16231] udevd[16231]: Unable to EVIOCGABS device "/dev/input/event5" [ 1079.630546][T16231] udevd[16231]: Unable to EVIOCGABS device "/dev/input/event5" [ 1079.754943][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 1079.756547][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.756570][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1079.756607][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1079.758672][ T5698] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1079.758698][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.758723][ T5698] usb 5-1: Product: syz [ 1079.758735][ T5698] usb 5-1: Manufacturer: syz [ 1079.758743][ T5698] usb 5-1: SerialNumber: syz [ 1079.772600][ T5698] cdc_ncm 5-1:1.0: skipping garbage [ 1079.772617][ T5698] cdc_ncm 5-1:1.0: skipping garbage [ 1079.772630][ T5698] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1079.772671][ T5698] cdc_ncm 5-1:1.0: bind() failure [ 1080.005750][ T5698] usb 5-1: USB disconnect, device number 88 [ 1080.107332][T23364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4339'. [ 1080.173297][T23379] loop5: detected capacity change from 0 to 7 [ 1080.177003][T23379] Dev loop5: unable to read RDB block 7 [ 1080.177058][T23379] loop5: unable to read partition table [ 1080.178706][T23379] loop5: partition table beyond EOD, truncated [ 1080.178740][T23379] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1080.179574][T23378] Flush: task=syz.1.4340[23378] dev=loop5 state=2 [ 1080.244455][T23279] binder: 23278:23279 ioctl c0306201 200000000180 returned -14 [ 1080.256980][T23378] Teardown: task=syz.1.4340[23378] dev=loop5 state=2 [ 1080.285624][T18816] usb 6-1: USB disconnect, device number 77 [ 1080.556235][T23404] usb usb8: usbfs: process 23404 (syz.5.4344) did not claim interface 0 before use [ 1080.564774][T23404] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4344'. [ 1080.691433][T23408] usb usb8: usbfs: process 23408 (syz.5.4345) did not claim interface 0 before use [ 1080.822390][T23418] tipc: Failed to obtain node identity [ 1080.822410][T23418] tipc: Enabling of bearer rejected, failed to enable media [ 1081.035138][T19326] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1081.039973][T23432] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4349'. [ 1081.186530][T19326] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1081.186556][T19326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1081.186571][T19326] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1081.186584][T19326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1081.186597][T19326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1081.188768][T19326] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1081.188793][T19326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.188807][T19326] usb 2-1: Product: syz [ 1081.188815][T19326] usb 2-1: Manufacturer: syz [ 1081.188822][T19326] usb 2-1: SerialNumber: syz [ 1081.193897][T19326] usb 2-1: config 0 descriptor?? [ 1081.291341][T19326] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1081.413811][ T5698] usb 2-1: USB disconnect, device number 49 [ 1081.419369][T12426] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1081.576691][T12426] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1081.576718][T12426] usb 5-1: config 1 has no interface number 0 [ 1081.576761][T12426] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1081.576789][T12426] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1081.576814][T12426] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1081.576838][T12426] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.579038][T12426] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1081.579065][T12426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.579085][T12426] usb 5-1: Product: syz [ 1081.579099][T12426] usb 5-1: Manufacturer: syz [ 1081.579113][T12426] usb 5-1: SerialNumber: syz [ 1081.586252][T23435] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1081.586367][T23435] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1081.791278][T23435] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1081.791398][T23435] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1081.980000][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4352'. [ 1082.021816][T12426] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:12:07 [ 1082.119134][T23465] usb usb8: usbfs: process 23465 (syz.5.4353) did not claim interface 0 before use [ 1082.145235][T23465] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4353'. [ 1082.202291][T12426] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 1082.202317][T12426] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 1082.203141][T12426] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 1082.203162][T12426] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 1082.255692][T12426] usb 5-1: USB disconnect, device number 89 [ 1082.267651][T12426] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 1082.316668][T23478] usb usb8: usbfs: process 23478 (syz.5.4355) did not claim interface 0 before use [ 1082.407299][T12426] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1082.481976][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4357'. [ 1082.482399][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4357'. [ 1082.486447][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4357'. [ 1082.487524][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4357'. [ 1082.487905][T23493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4357'. [ 1082.664928][T19326] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1082.814949][T19326] usb 2-1: Using ep0 maxpacket: 8 [ 1082.816640][T19326] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1082.816691][T19326] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5B, changing to 0xB [ 1082.816717][T19326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1082.816742][T19326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1082.818937][T19326] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1082.818963][T19326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.818982][T19326] usb 2-1: Product: syz [ 1082.818997][T19326] usb 2-1: Manufacturer: syz [ 1082.819010][T19326] usb 2-1: SerialNumber: syz [ 1082.823354][T19326] usb 2-1: config 0 descriptor?? [ 1082.840291][ T5698] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1082.925638][T19326] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 1082.985125][ T5698] usb 6-1: device descriptor read/64, error -71 [ 1083.020228][T23527] netlink: 'syz.6.4362': attribute type 2 has an invalid length. [ 1083.048248][T12426] usb 2-1: USB disconnect, device number 50 [ 1083.097807][T23538] usb usb8: usbfs: process 23538 (syz.6.4363) did not claim interface 0 before use [ 1083.235703][T18816] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1083.235792][ T5698] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1083.375162][ T5698] usb 6-1: device descriptor read/64, error -71 [ 1083.413749][T18816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.413776][T18816] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.441171][T18816] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1083.441197][T18816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.441208][T18816] usb 5-1: Product: syz [ 1083.441216][T18816] usb 5-1: Manufacturer: syz [ 1083.441224][T18816] usb 5-1: SerialNumber: syz [ 1083.496050][ T5698] usb usb6-port1: attempt power cycle [ 1083.580729][T23546] usb usb8: usbfs: process 23546 (syz.6.4365) did not claim interface 0 before use [ 1083.692816][T18816] usb 5-1: 0:1 : does not exist [ 1083.692893][T18816] usb 5-1: BAAD SPEAKER p_chmask mismatch [ 1083.746548][T18816] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1083.762285][T18816] usb 5-1: USB disconnect, device number 90 [ 1083.802930][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.821860][T16189] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1083.855060][ T5698] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1083.876191][ T5698] usb 6-1: device descriptor read/8, error -71 [ 1083.904970][T19326] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1084.058736][T19326] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1084.058765][T19326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1084.060937][T19326] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1084.060965][T19326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.060992][T19326] usb 7-1: Product: syz [ 1084.061000][T19326] usb 7-1: Manufacturer: syz [ 1084.061008][T19326] usb 7-1: SerialNumber: syz [ 1084.067938][T19326] usb 7-1: config 0 descriptor?? [ 1084.084032][T19326] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1084.164998][ T5698] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1084.186714][ T5698] usb 6-1: device descriptor read/8, error -71 [ 1084.295290][ T5698] usb usb6-port1: unable to enumerate USB device [ 1084.537392][T23550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.540072][T23550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.574999][ T5698] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1084.749260][ T5698] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1084.749290][ T5698] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1084.749309][ T5698] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1084.749352][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1084.749367][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1084.751445][ T5698] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1084.751473][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1084.751493][ T5698] usb 5-1: Product: syz [ 1084.751503][ T5698] usb 5-1: Manufacturer: syz [ 1084.836980][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 1084.837000][ T5698] cdc_wdm 5-1:1.0: skipping garbage [ 1084.840637][ T5698] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1084.840656][ T5698] cdc_wdm 5-1:1.0: Unknown control protocol [ 1084.955029][T19101] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1085.114939][T19101] usb 2-1: Using ep0 maxpacket: 16 [ 1085.117918][T19101] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1085.117948][T19101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1085.118075][T19101] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1085.120863][T19101] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1085.120891][T19101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.120911][T19101] usb 2-1: Product: syz [ 1085.120969][T19101] usb 2-1: Manufacturer: syz [ 1085.120985][T19101] usb 2-1: SerialNumber: syz [ 1085.131289][T19101] usb 2-1: config 0 descriptor?? [ 1085.148539][T23588] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 1085.158169][T19101] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 1085.158203][T19101] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 1085.251809][ T5323] usb 5-1: USB disconnect, device number 91 [ 1085.348987][T23550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.351240][T23550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.354012][T19326] gspca_sunplus: reg_r err -71 [ 1085.354099][T19326] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1085.371426][T19326] usb 7-1: USB disconnect, device number 48 [ 1085.416645][ T5698] usb 2-1: USB disconnect, device number 51 [ 1085.813526][T23637] usb usb8: usbfs: process 23637 (syz.4.4372) did not claim interface 0 before use [ 1085.829463][T23637] __nla_validate_parse: 10 callbacks suppressed [ 1085.829474][T23637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4372'. [ 1085.974033][T23647] usb usb8: usbfs: process 23647 (syz.1.4375) did not claim interface 0 before use [ 1085.987004][T19326] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1085.996488][T23648] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1086.112315][T23639] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1086.113021][T23639] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1086.113148][T23639] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1086.113188][T23639] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1086.113470][T23639] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1086.114170][T23639] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1086.114302][T23639] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 1086.121170][T23639] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1086.121256][T23639] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 1086.135575][T19326] usb 6-1: Using ep0 maxpacket: 16 [ 1086.137933][T19326] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1086.137963][T19326] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1086.141570][T19326] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1086.141595][T19326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.141615][T19326] usb 6-1: Product: syz [ 1086.141629][T19326] usb 6-1: Manufacturer: syz [ 1086.141643][T19326] usb 6-1: SerialNumber: syz [ 1086.153019][T19326] usb 6-1: config 0 descriptor?? [ 1086.157915][T23648] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4373'. [ 1086.306824][T23654] random: crng reseeded on system resumption [ 1086.395373][T23656] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4376'. [ 1086.461588][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1086.824592][T19326] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input88 [ 1086.960608][T23691] usb usb8: usbfs: process 23691 (syz.1.4381) did not claim interface 0 before use [ 1087.114052][T23691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4381'. [ 1087.372208][T19326] imon:send_packet: packet tx failed (-71) [ 1087.384889][T19326] imon 6-1:0.0: panel buttons/knobs setup failed [ 1087.515177][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 1087.557702][T19326] rc_core: IR keymap rc-imon-pad not found [ 1087.557722][T19326] Registered IR keymap rc-empty [ 1087.557812][T19326] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1087.557830][T19326] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1087.559717][T19326] imon:send_packet: packet tx failed (-71) [ 1087.575680][T19326] imon 6-1:0.0: remote input dev register failed [ 1087.575851][T19326] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1087.692589][T23720] usb usb8: usbfs: process 23720 (syz.6.4384) did not claim interface 0 before use [ 1088.132739][T19326] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1088.132759][T19326] imon:imon_probe: failed to initialize context! [ 1088.132772][T19326] imon 6-1:0.0: unable to register, err -19 [ 1088.145582][T19326] usb 6-1: USB disconnect, device number 82 [ 1088.163512][T23741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1088.163539][T23741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1088.411740][T23760] usb usb8: usbfs: process 23760 (syz.6.4390) did not claim interface 0 before use [ 1088.431009][T23760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4390'. [ 1088.464950][T19326] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1088.629393][T19326] usb 6-1: device descriptor read/all, error -71 [ 1088.749522][T23776] usb usb8: usbfs: process 23776 (syz.5.4393) did not claim interface 0 before use [ 1088.925038][T12426] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1088.987745][T23787] vivid-000: disconnect [ 1088.991905][T23786] vivid-000: reconnect [ 1089.087518][T12426] usb 7-1: too many configurations: 215, using maximum allowed: 8 [ 1089.089159][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.089191][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.089218][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.126253][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.126285][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.126312][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.157520][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.157552][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.157579][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.185576][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.185617][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.218731][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.219741][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.219770][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.219785][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.220765][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.220795][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.220820][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.222016][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.222047][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.222075][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.223087][T12426] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid maxpacket 42131, setting to 64 [ 1089.223116][T12426] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1089.223144][T12426] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1089.287879][T12426] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1089.287896][T12426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.287907][T12426] usb 7-1: Product: К [ 1089.287915][T12426] usb 7-1: Manufacturer: थ鷻꒪딓毇愂ⷞ앋៏╘ᨀ勆拗雷ꍯ鑪Ｍ㟗宗飂뫫纚୉뛼ے⹂튐㡀꧝냳△槔ⴏ朕홓蝙槺ᖃ [ 1089.287926][T12426] usb 7-1: SerialNumber: М [ 1089.485030][T19326] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1089.611969][T23806] usb usb8: usbfs: process 23806 (syz.1.4399) did not claim interface 0 before use [ 1089.623872][T23806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1089.639030][T19326] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.639064][T19326] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1089.639099][T19326] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1089.639331][T19326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.693726][T19326] usb 6-1: config 0 descriptor?? [ 1089.813806][T23764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.817220][T23764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.818217][T23764] netlink: 'syz.6.4391': attribute type 10 has an invalid length. [ 1089.841388][T23764] team0: Device veth0_vlan failed to register rx_handler [ 1089.903638][T12426] usb 7-1: USB disconnect, device number 49 [ 1089.943856][T23820] netlink: 'syz.5.4397': attribute type 4 has an invalid length. [ 1090.114216][T23827] usb usb8: usbfs: process 23827 (syz.1.4402) did not claim interface 0 before use [ 1090.149240][T19326] usbhid 6-1:0.0: can't add hid device: -71 [ 1090.149352][T19326] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1090.168043][T19326] usb 6-1: USB disconnect, device number 84 [ 1090.509977][T23861] usb usb8: usbfs: process 23861 (syz.6.4408) did not claim interface 0 before use [ 1090.518473][T23861] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4408'. [ 1090.556480][T19326] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1090.615167][T19101] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1090.712923][T19326] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 1090.712940][T19326] usb 6-1: config 0 has no interface number 1 [ 1090.712980][T19326] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1090.712992][T19326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.752107][T19326] usb 6-1: config 0 descriptor?? [ 1090.777499][T19101] usb 2-1: not running at top speed; connect to a high speed hub [ 1090.778636][T19101] usb 2-1: config 1 interface 0 altsetting 73 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1090.778667][T19101] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1090.781091][T19101] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1090.781118][T19101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.781138][T19101] usb 2-1: Product: syz [ 1090.781152][T19101] usb 2-1: Manufacturer: syz [ 1090.781167][T19101] usb 2-1: SerialNumber: syz [ 1090.805795][T23851] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1090.960643][T19326] qcserial 6-1:0.2: Qualcomm USB modem converter detected [ 1090.998488][T23883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.002010][T23883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.067116][T23894] usb usb8: usbfs: process 23894 (syz.6.4411) did not claim interface 0 before use [ 1091.077695][T19101] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 73 proto 3 vid 0x0525 pid 0xA4A8 [ 1091.086224][T19101] usb 2-1: USB disconnect, device number 52 [ 1091.098716][T19101] usblp0: removed [ 1091.235803][T19326] usb 6-1: USB disconnect, device number 85 [ 1091.238998][T19326] qcserial 6-1:0.2: device disconnected [ 1091.414985][ T5698] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1091.576356][ T5698] usb 7-1: Using ep0 maxpacket: 16 [ 1091.578464][ T5698] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1091.579538][ T5698] usb 7-1: config 5 has an invalid interface number: 255 but max is 0 [ 1091.579560][ T5698] usb 7-1: config 5 has no interface number 0 [ 1091.579592][ T5698] usb 7-1: config 5 interface 255 has no altsetting 0 [ 1091.581820][ T5698] usb 7-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=96.e6 [ 1091.581845][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.581864][ T5698] usb 7-1: Product: syz [ 1091.581879][ T5698] usb 7-1: Manufacturer: syz [ 1091.581893][ T5698] usb 7-1: SerialNumber: syz [ 1091.890748][ T5698] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 1091.891209][ T5698] gspca_spca508: reg_read err -71 [ 1091.893074][ T5698] gspca_spca508: reg_read err -71 [ 1091.893523][ T5698] gspca_spca508: reg_read err -71 [ 1091.893955][ T5698] gspca_spca508: reg_read err -71 [ 1091.894462][ T5698] gspca_spca508: reg_read err -71 [ 1091.894974][ T5698] gspca_spca508: reg write: error -71 [ 1091.895052][ T5698] spca508 7-1:5.255: probe with driver spca508 failed with error -71 [ 1091.902299][ T5698] usb 7-1: USB disconnect, device number 50 [ 1091.926197][T19101] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1092.085418][T12426] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1092.125384][T19101] usb 2-1: Using ep0 maxpacket: 8 [ 1092.128193][T19101] usb 2-1: config index 0 descriptor too short (expected 82, got 52) [ 1092.128218][T19101] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 1092.128238][T19101] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1092.128253][T19101] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.128263][T19101] usb 2-1: config 3 has no interface number 0 [ 1092.128288][T19101] usb 2-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1092.128301][T19101] usb 2-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1092.128312][T19101] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1092.128326][T19101] usb 2-1: config 3 interface 45 has no altsetting 0 [ 1092.130434][T19101] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1092.130461][T19101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.130481][T19101] usb 2-1: Product: syz [ 1092.130494][T19101] usb 2-1: Manufacturer: syz [ 1092.130502][T19101] usb 2-1: SerialNumber: syz [ 1092.319822][T12426] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1092.319852][T12426] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.319872][T12426] usb 6-1: Product: syz [ 1092.319887][T12426] usb 6-1: Manufacturer: syz [ 1092.319901][T12426] usb 6-1: SerialNumber: syz [ 1092.326954][T12426] usb 6-1: config 0 descriptor?? [ 1092.371435][T12426] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1092.580235][T19101] usb 2-1: USB disconnect, device number 53 [ 1092.668076][T16231] udevd[16231]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.136143][T19101] usb 6-1: USB disconnect, device number 86 [ 1093.235261][ T5789] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1093.396740][ T5789] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1093.396767][ T5789] usb 7-1: config 1 has no interface number 0 [ 1093.396803][ T5789] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1093.396817][ T5789] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1093.396831][ T5789] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1093.396844][ T5789] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.398904][ T5789] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1093.398931][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.398946][ T5789] usb 7-1: Product: syz [ 1093.398954][ T5789] usb 7-1: Manufacturer: syz [ 1093.398961][ T5789] usb 7-1: SerialNumber: syz [ 1093.404039][T23977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1093.404156][T23977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1093.609284][T23977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1093.609457][T23977] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1093.662479][T24002] usb usb8: usbfs: process 24002 (syz.1.4418) did not claim interface 0 before use [ 1093.684059][T24002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4418'. [ 1093.760640][T24006] usb usb8: usbfs: process 24006 (syz.1.4420) did not claim interface 0 before use [ 1093.846948][ T5789] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:13:07 [ 1094.025569][T16189] Bluetooth: hci2: unexpected subevent 0x2b length: 30 < 253 [ 1094.028821][ T5789] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 1094.028845][ T5789] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 1094.034387][ T5789] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71 [ 1094.034409][ T5789] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71 [ 1094.088439][ T5789] usb 7-1: USB disconnect, device number 51 [ 1094.121639][ T5789] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem [ 1094.210337][T24030] netlink: 'syz.5.4423': attribute type 53 has an invalid length. [ 1094.465637][ T5789] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1095.101275][T24061] usb usb8: usbfs: process 24061 (syz.5.4428) did not claim interface 0 before use [ 1095.111999][T24061] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4428'. [ 1095.169332][T24065] usb usb8: usbfs: process 24065 (syz.5.4429) did not claim interface 0 before use [ 1095.389949][T24079] loop5: detected capacity change from 0 to 7 [ 1095.402188][T24079] Dev loop5: unable to read RDB block 7 [ 1095.404754][T24079] loop5: unable to read partition table [ 1095.405492][T24079] loop5: partition table beyond EOD, truncated [ 1095.405511][T24079] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1095.443982][T16231] Flush: task=udevd[16231] dev=loop5 state=2 [ 1095.547164][T16231] Teardown: task=udevd[16231] dev=loop5 state=2 [ 1095.615036][T18816] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1095.768602][T18816] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1095.768632][T18816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.768661][T18816] usb 7-1: Product: syz [ 1095.768676][T18816] usb 7-1: Manufacturer: syz [ 1095.768690][T18816] usb 7-1: SerialNumber: syz [ 1095.774025][T18816] usb 7-1: config 0 descriptor?? [ 1095.828820][T18816] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1095.875282][ T5789] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1096.026714][ T5789] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1096.026742][ T5789] usb 6-1: config 1 has no interface number 0 [ 1096.026772][ T5789] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1096.026822][ T5789] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1096.026837][ T5789] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 1096.026850][ T5789] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.029339][ T5789] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1096.029356][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.029367][ T5789] usb 6-1: Product: syz [ 1096.029374][ T5789] usb 6-1: Manufacturer: syz [ 1096.029383][ T5789] usb 6-1: SerialNumber: syz [ 1096.085844][T24097] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1096.086094][T24097] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1096.289696][T24097] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1096.289805][T24097] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1096.448855][T24106] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1096.529767][ T5789] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:14:07 [ 1096.554667][T24116] usb usb8: usbfs: process 24116 (syz.1.4437) did not claim interface 0 before use [ 1096.577486][T24116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'. [ 1096.641263][ T5698] usb 7-1: USB disconnect, device number 52 [ 1096.657202][T24119] usb usb8: usbfs: process 24119 (syz.1.4438) did not claim interface 0 before use [ 1096.776080][ T5789] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 1096.776215][ T5789] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 1096.777870][ T5789] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 1096.777892][ T5789] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 1096.888228][ T5789] usb 6-1: USB disconnect, device number 87 [ 1096.897271][ T5789] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 1097.085858][T24142] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4440'. [ 1097.129364][T24156] loop5: detected capacity change from 0 to 7 [ 1097.130796][T24156] Dev loop5: unable to read RDB block 7 [ 1097.130836][T24156] loop5: unable to read partition table [ 1097.131071][T24156] loop5: partition table beyond EOD, truncated [ 1097.131090][T24156] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1097.148046][ T5789] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1097.171501][T16231] Flush: task=udevd[16231] dev=loop5 state=2 [ 1097.275826][T16231] Teardown: task=udevd[16231] dev=loop5 state=2 [ 1097.508102][T24182] usb usb8: usbfs: process 24182 (syz.5.4446) did not claim interface 0 before use [ 1097.523194][T24182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4446'. [ 1097.590653][T24185] usb usb8: usbfs: process 24185 (syz.5.4447) did not claim interface 0 before use [ 1097.614437][ T5323] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1097.776867][ T5323] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 1097.776895][ T5323] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.779351][ T5323] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1097.779379][ T5323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.779399][ T5323] usb 2-1: Product: syz [ 1097.779414][ T5323] usb 2-1: Manufacturer: syz [ 1097.779430][ T5323] usb 2-1: SerialNumber: syz [ 1097.859722][ T5323] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input90 [ 1098.152841][T24200] loop5: detected capacity change from 0 to 7 [ 1098.169468][T24200] Dev loop5: unable to read RDB block 7 [ 1098.169507][T24200] loop5: unable to read partition table [ 1098.169718][T24200] loop5: partition table beyond EOD, truncated [ 1098.198238][T24200] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1098.250418][T16222] Flush: task=udevd[16222] dev=loop5 state=2 [ 1098.260647][T16189] =========================[ 1098.260647][T16189] ================================================================== [ 1098.260662][T16189] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 1098.260698][T16189] Read of size 8 at addr ffff8880405bc200 by task kworker/u9:2/16189 [ 1098.260717][T16189] [ 1098.260731][T16189] CPU: 0 UID: 0 PID: 16189 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1098.260760][T16189] Tainted: [L]=SOFTLOCKUP [ 1098.260768][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.260782][T16189] Workqueue: hci5 hci_rx_work [ 1098.260807][T16189] Call Trace: [ 1098.260816][T16189] [ 1098.260825][T16189] dump_stack_lvl+0xe8/0x150 [ 1098.260851][T16189] print_address_description+0x55/0x1e0 [ 1098.260881][T16189] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1098.260902][T16189] print_report+0x58/0x70 [ 1098.260928][T16189] kasan_report+0x117/0x150 [ 1098.260948][T16189] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1098.260982][T16189] l2cap_sock_ready_cb+0xe3/0x180 [ 1098.261005][T16189] l2cap_le_start+0x257/0x1910 [ 1098.261034][T16189] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.261059][T16189] ? irqentry_exit+0x218/0x8f0 [ 1098.261081][T16189] ? trace_irq_disable+0x3b/0x140 [ 1098.261102][T16189] ? __pfx_l2cap_le_start+0x10/0x10 [ 1098.261135][T16189] ? l2cap_connect_cfm+0x948/0x1620 [ 1098.261156][T16189] l2cap_connect_cfm+0x950/0x1620 [ 1098.261179][T16189] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1098.261198][T16189] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1098.261223][T16189] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.261246][T16189] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1098.261270][T16189] ? mutex_lock_nested+0x152/0x1d0 [ 1098.261288][T16189] ? hci_connect_cfm+0x2c/0x140 [ 1098.261313][T16189] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1098.261332][T16189] hci_connect_cfm+0x95/0x140 [ 1098.261359][T16189] le_conn_complete_evt+0x1034/0x1580 [ 1098.261391][T16189] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1098.261419][T16189] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.261442][T16189] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1098.261465][T16189] ? rt_mutex_slowunlock+0x219/0x460 [ 1098.261484][T16189] ? skb_pull_data+0xf0/0x200 [ 1098.261510][T16189] hci_le_conn_complete_evt+0x187/0x470 [ 1098.261540][T16189] hci_event_packet+0x67a/0xf10 [ 1098.261562][T16189] ? reacquire_held_locks+0x117/0x1a0 [ 1098.261587][T16189] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1098.261611][T16189] ? __pfx_hci_event_packet+0x10/0x10 [ 1098.261633][T16189] ? rt_spin_unlock+0x157/0x200 [ 1098.261656][T16189] ? hci_send_to_monitor+0xe2/0x590 [ 1098.261686][T16189] hci_rx_work+0x3ee/0x1020 [ 1098.261711][T16189] ? process_one_work+0x7fd/0x1480 [ 1098.261731][T16189] process_one_work+0xaaf/0x1480 [ 1098.261760][T16189] ? __pfx_process_one_work+0x10/0x10 [ 1098.261779][T16189] ? do_raw_spin_lock+0x12b/0x2f0 [ 1098.261808][T16189] ? assign_work+0x3cf/0x5d0 [ 1098.261829][T16189] worker_thread+0xb05/0x10d0 [ 1098.261854][T16189] ? __kthread_parkme+0x71/0x1f0 [ 1098.261881][T16189] kthread+0x388/0x470 [ 1098.261906][T16189] ? __pfx_worker_thread+0x10/0x10 [ 1098.261925][T16189] ? __pfx_kthread+0x10/0x10 [ 1098.261957][T16189] ret_from_fork+0x514/0xb70 [ 1098.261986][T16189] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.262012][T16189] ? __switch_to+0xc89/0x1420 [ 1098.262034][T16189] ? __pfx_kthread+0x10/0x10 [ 1098.262061][T16189] ret_from_fork_asm+0x1a/0x30 [ 1098.262093][T16189] [ 1098.262102][T16189] [ 1098.262113][T16189] Allocated by task 24197: [ 1098.262123][T16189] kasan_save_track+0x3e/0x80 [ 1098.262150][T16189] __kasan_kmalloc+0x93/0xb0 [ 1098.262177][T16189] __kmalloc_noprof+0x415/0x790 [ 1098.262203][T16189] sk_prot_alloc+0xe7/0x210 [ 1098.262222][T16189] sk_alloc+0x3a/0x390 [ 1098.262240][T16189] bt_sock_alloc+0x3b/0x340 [ 1098.262262][T16189] l2cap_sock_create+0x15a/0x300 [ 1098.262281][T16189] bt_sock_create+0x163/0x240 [ 1098.262305][T16189] __sock_create+0x4e8/0x960 [ 1098.262329][T16189] __sys_socket+0xd9/0x320 [ 1098.262354][T16189] __x64_sys_socket+0x7a/0x90 [ 1098.262379][T16189] do_syscall_64+0x174/0x580 [ 1098.262402][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.262420][T16189] [ 1098.262424][T16189] Freed by task 24196: [ 1098.262434][T16189] kasan_save_track+0x3e/0x80 [ 1098.262457][T16189] kasan_save_free_info+0x40/0x50 [ 1098.262478][T16189] __kasan_slab_free+0x5c/0x80 [ 1098.262503][T16189] kfree+0x1c5/0x6c0 [ 1098.262523][T16189] __sk_destruct+0x754/0x9e0 [ 1098.262540][T16189] l2cap_sock_release+0x1b3/0x250 [ 1098.262557][T16189] __sock_release+0xa0/0x1f0 [ 1098.262580][T16189] sock_close+0x1c/0x30 [ 1098.262602][T16189] __fput+0x42a/0xa80 [ 1098.262617][T16189] task_work_run+0x1d9/0x270 [ 1098.262642][T16189] exit_to_user_mode_loop+0x1fa/0x730 [ 1098.262659][T16189] do_syscall_64+0x353/0x580 [ 1098.262681][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.262698][T16189] [ 1098.262703][T16189] The buggy address belongs to the object at ffff8880405bc000 [ 1098.262703][T16189] which belongs to the cache kmalloc-4k of size 4096 [ 1098.262722][T16189] The buggy address is located 512 bytes inside of [ 1098.262722][T16189] freed 4096-byte region [ffff8880405bc000, ffff8880405bd000) [ 1098.262743][T16189] [ 1098.262747][T16189] The buggy address belongs to the physical page: [ 1098.262822][T16189] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x405b8 [ 1098.262842][T16189] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1098.262858][T16189] flags: 0x80000000000040(head|node=0|zone=1) [ 1098.262875][T16189] page_type: f5(slab) [ 1098.262894][T16189] raw: 0080000000000040 ffff88813fe3b140 dead000000000100 dead000000000122 [ 1098.262912][T16189] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1098.262931][T16189] head: 0080000000000040 ffff88813fe3b140 dead000000000100 dead000000000122 [ 1098.262947][T16189] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1098.262972][T16189] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1098.262988][T16189] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1098.262999][T16189] page dumped because: kasan: bad access detected [ 1098.263014][T16189] page_owner tracks the page as allocated [ 1098.263023][T16189] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4957, tgid 4957 (udevd), ts 45246630662 [ 1098.263054][T16189] post_alloc_hook+0x1f9/0x250 [ 1098.263080][T16189] get_page_from_freelist+0x264c/0x26c0 [ 1098.263097][T16189] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 1098.263115][T16189] allocate_slab+0x7c/0x5e0 [ 1098.263135][T16189] refill_objects+0x2d8/0x350 [ 1098.263155][T16189] __pcs_replace_empty_main+0x330/0x690 [ 1098.263174][T16189] __kmalloc_cache_noprof+0x467/0x670 [ 1098.263200][T16189] uevent_show+0x15c/0x310 [ 1098.263219][T16189] dev_attr_show+0x58/0xc0 [ 1098.263238][T16189] sysfs_kf_seq_show+0x331/0x490 [ 1098.263265][T16189] seq_read_iter+0x464/0xcb0 [ 1098.263288][T16189] vfs_read+0x59e/0xa90 [ 1098.263307][T16189] ksys_read+0x156/0x270 [ 1098.263325][T16189] do_syscall_64+0x174/0x580 [ 1098.263347][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.263364][T16189] page_owner free stack trace missing [ 1098.263371][T16189] [ 1098.263376][T16189] Memory state around the buggy address: [ 1098.263420][T16189] ffff8880405bc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1098.263434][T16189] ffff8880405bc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1098.263448][T16189] >ffff8880405bc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1098.263458][T16189] ^ [ 1098.263468][T16189] ffff8880405bc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1098.263480][T16189] ffff8880405bc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1098.263490][T16189] ================================================================== [ 1098.263569][T16189] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1098.263587][T16189] CPU: 0 UID: 0 PID: 16189 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1098.263617][T16189] Tainted: [L]=SOFTLOCKUP [ 1098.263624][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.263637][T16189] Workqueue: hci5 hci_rx_work [ 1098.263661][T16189] Call Trace: [ 1098.263673][T16189] [ 1098.263681][T16189] vpanic+0x5d9/0xad0 [ 1098.263701][T16189] ? __pfx_clockevents_program_event+0x10/0x10 [ 1098.263728][T16189] ? __pfx_vpanic+0x10/0x10 [ 1098.263753][T16189] panic+0xc5/0xd0 [ 1098.263770][T16189] ? __pfx_panic+0x10/0x10 [ 1098.263789][T16189] ? preempt_schedule_thunk+0x16/0x40 [ 1098.263810][T16189] ? preempt_schedule_thunk+0x16/0x40 [ 1098.263829][T16189] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1098.263851][T16189] check_panic_on_warn+0x89/0xb0 [ 1098.263877][T16189] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1098.263898][T16189] end_report+0x73/0x170 [ 1098.263917][T16189] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1098.263938][T16189] kasan_report+0x128/0x150 [ 1098.263964][T16189] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1098.263989][T16189] l2cap_sock_ready_cb+0xe3/0x180 [ 1098.264011][T16189] l2cap_le_start+0x257/0x1910 [ 1098.264040][T16189] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.264065][T16189] ? irqentry_exit+0x218/0x8f0 [ 1098.264087][T16189] ? trace_irq_disable+0x3b/0x140 [ 1098.264106][T16189] ? __pfx_l2cap_le_start+0x10/0x10 [ 1098.264138][T16189] ? l2cap_connect_cfm+0x948/0x1620 [ 1098.264159][T16189] l2cap_connect_cfm+0x950/0x1620 [ 1098.264180][T16189] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1098.264199][T16189] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1098.264223][T16189] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.264247][T16189] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1098.264270][T16189] ? mutex_lock_nested+0x152/0x1d0 [ 1098.264288][T16189] ? hci_connect_cfm+0x2c/0x140 [ 1098.264313][T16189] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1098.264331][T16189] hci_connect_cfm+0x95/0x140 [ 1098.264358][T16189] le_conn_complete_evt+0x1034/0x1580 [ 1098.264390][T16189] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1098.264417][T16189] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.264440][T16189] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1098.264463][T16189] ? rt_mutex_slowunlock+0x219/0x460 [ 1098.264482][T16189] ? skb_pull_data+0xf0/0x200 [ 1098.264508][T16189] hci_le_conn_complete_evt+0x187/0x470 [ 1098.264538][T16189] hci_event_packet+0x67a/0xf10 [ 1098.264560][T16189] ? reacquire_held_locks+0x117/0x1a0 [ 1098.264585][T16189] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1098.264609][T16189] ? __pfx_hci_event_packet+0x10/0x10 [ 1098.264631][T16189] ? rt_spin_unlock+0x157/0x200 [ 1098.264653][T16189] ? hci_send_to_monitor+0xe2/0x590 [ 1098.264683][T16189] hci_rx_work+0x3ee/0x1020 [ 1098.264708][T16189] ? process_one_work+0x7fd/0x1480 [ 1098.264728][T16189] process_one_work+0xaaf/0x1480 [ 1098.264757][T16189] ? __pfx_process_one_work+0x10/0x10 [ 1098.264775][T16189] ? do_raw_spin_lock+0x12b/0x2f0 [ 1098.264803][T16189] ? assign_work+0x3cf/0x5d0 [ 1098.264822][T16189] worker_thread+0xb05/0x10d0 [ 1098.264848][T16189] ? __kthread_parkme+0x71/0x1f0 [ 1098.264873][T16189] kthread+0x388/0x470 [ 1098.264899][T16189] ? __pfx_worker_thread+0x10/0x10 [ 1098.264918][T16189] ? __pfx_kthread+0x10/0x10 [ 1098.264942][T16189] ret_from_fork+0x514/0xb70 [ 1098.264978][T16189] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.265004][T16189] ? __switch_to+0xc89/0x1420 [ 1098.265027][T16189] ? __pfx_kthread+0x10/0x10 [ 1098.265053][T16189] ret_from_fork_asm+0x1a/0x30 [ 1098.265087][T16189] [ 1098.265355][T16189] Kernel Offset: disabled