last executing test programs: 3.860637035s ago: executing program 0 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000240)=0x4) 2.717102025s ago: executing program 0 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 2.499891386s ago: executing program 0 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, 0x0, 0x0) 2.499470324s ago: executing program 0 (id=759): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="291896d59dcf5666c590afcbbaa9ca09e4757253c96b4fa2fd892be01c5316f3d86fb6a5a329f955e9476f385bcb85135820073b41d0203362abd2413ecb2527b1d563f51e9130", @ANYBLOB="f32bfb1762a1512aa83e12e22840799e77662c173e127ae9e8e4e192d671baf592c881ad65df8c33b2dba28b0489acd083e6f39dad3fdc40f0b64246103978efeb18e61b38d44af7e807e736006e6258b1593295cc93cd6919955d0b67af22327b88857bfbaca586609da20bb245caef2631d057b0d086b21d7123bbe695cd2f5279deefcfb75a4bd9af8f36e30674fb65c00575ba3a1b5d403f437d273229997d714efdc8fb4262584a2c60bc4528ae0f2c4a1b", @ANYRESOCT=r0], 0x14}}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 2.311400342s ago: executing program 0 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) 2.210961361s ago: executing program 3 (id=761): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) 2.060999363s ago: executing program 2 (id=762): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r1}, 0x38) 1.99005885s ago: executing program 2 (id=763): r0 = socket(0x11, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$BLKTRACESETUP(r2, 0x6804, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r4, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea", 0x12}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98", 0x26}], 0x3}, 0x40011) 1.929984141s ago: executing program 2 (id=764): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.710974843s ago: executing program 3 (id=765): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, 0xffffffffffffffff, 0x0) close_range(r6, r0, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r8, r9+60000000}) 1.589254509s ago: executing program 3 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 1.54066943s ago: executing program 3 (id=767): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r0, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x4000040) 1.540239585s ago: executing program 3 (id=768): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="291896d59dcf5666c590afcbbaa9ca09e4757253c96b4fa2fd892be01c5316f3d86fb6a5a329f955e9476f385bcb85135820073b41d0203362abd2413ecb2527b1d563f51e9130", @ANYBLOB="f32bfb1762a1512aa83e12e22840799e77662c173e127ae9e8e4e192d671baf592c881ad65df8c33b2dba28b0489acd083e6f39dad3fdc40f0b64246103978efeb18e61b38d44af7e807e736006e6258b1593295cc93cd6919955d0b67af22327b88857bfbaca586609da20bb245caef2631d057b0d086b21d7123bbe695cd2f5279deefcfb75a4bd9af8f36e30674fb65c00575ba3a1b5d403f437d273229997d714efdc8fb4262584a2c60bc4528ae0f2c4a1b", @ANYRESOCT=r0], 0x14}}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.45049205s ago: executing program 3 (id=769): syz_usb_connect$midi(0x6, 0x2b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)=@caif, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="9b7336c9ce14ec9387cd956a552f0c96b62a0f9503dd538ce1edc90c896ed6dac594540913567618a22ec968b693e52a2706a0f92211549f73e93d9056bba0817aa47573f3402c2c5ccfe94125ebcfa048f8f3a2996134150b51a1e3cc7dfadf3cdfe4b985fa1762f4a1350c8254cf5ac8d5ad34db08e8b7a44690568ae1f0f0dfe3b3d77e3762e7721779a8af517658f938fe204f49816b48429cd4b0d1d7778f9dc96937dda6677550e5c64efd74d7743de7652fa713c80a4692cdf12299aab8c7a6bb9d317fcb0eabcb96c1", 0xcd}, {&(0x7f0000000280)="ee9911f0c87e5452da03586b97e4151ab917e10d80c702dd27e01e4663299cd74887367221644e88a3e3ec8a0b802519c49d2a1ae4ea8b580bb649652a955b5aa029b2e4bad148546e63d2385f6ee1a1ae432f1c992cc7937522e890e56b5b66903e0b2b6546574a8cca5654d8a3b4b90f0c5ad2ca644dfb4c50b6f45a2a5c6423c94158d8c8fd6f0e360f7b258ce0f2699dacbf038c62e8ee5aeb1a626925660309238db52b7bcbf9d979f9e5cc6b9cf7e603b458fd", 0xb6}, {&(0x7f0000000340)="d763fe1f37354fb2a58c44068044dfd61c779bf9533aaf09c128e035053f6e240e600a4628e57f91ff7e0154f042acf052db1c9356f91fdefc53012981de77efb42171cbb77411c611dcdf48be24cb20884167774f2566d359d75db786be4331a033c828bfb06f", 0x67}], 0x3}}, {{&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="16596989ac25e9a5ea1fd8d3e2ced00a7e1b22014ba36d326b8dec5afb941d94b0983893beb31ea9d8bbc6ca94584504ab26eb0b857fa2743d67c00503639258ddeb746dbd14fb7a2f616ab513c6e569dee3a86566ed02b82b9890c200caf66a7d14f7f7d85a920f6dc45c853ca4a065aa3223961d7932b09d571843d5b86775883843ebfb581236e32b441df9c3412f8ccbf692a297df25c5ac9de401a568b9bac0b9b0f32818808432aca1afbf5d9c86c8f383a8fc64c2416a1b4bbfc6f12d", 0xc0}, {&(0x7f0000000540)="225e76b904fc6b53", 0x8}, {&(0x7f0000000580)="5e5d7162b1c1f58c312f0a113882bd7f0bab53bca754f47ae95a17aba597e29a31f0b9eda71f", 0x26}, {&(0x7f00000005c0)="26a739f10786ce74e3990036400de3dd358e0dff924ca75acdbe8a31ddc6948b194cfde8e219759bc12c17c6dbc9f15f0b63ea59fb06c62bde9f214f262ccfa3e6272d0da1cdecc4dce9c041a423668d223b3f44e7e521a9f58279c2bcf4f4861ddf7ee90e99ff50f1ea04fc6c039008e7a3b7f19c794a3020", 0x79}, {&(0x7f0000000640)="97218b3f4de1b619cae80fdd00d48bd3d1da4c95cbdc64ea8d66be484ce0e49fd42a0783787d3a76d0e750181ad34085069ffd6aaa8a12a7e935b899c2e41625dd793581f14881a2bbd7bf3a832966bb5d2054bc674ea35209a6abe15496aea70c2c81036e2f77364d0fc71f4429dd", 0x6f}, {&(0x7f00000006c0)="f8408a2c7b2aa05a217e2ae3890c5af980beefda5b8b7bb459352b44f39db0e1c6b2af2ce7a81616e6d9bb0c7f7fc7408be43125d0baf0e427c4ee23b7aa0fda1a96b49a2a75d7973ae66778a1298deca6d1a8c988b67983472ea32dc587227f042d5b6ce6703f4101b4ed9b99305b182117f5ba583b067b64e1bf4fec036ee2de9a713cb751cbdc6909ce0d0d06471071c374749012ed3096dfe0b9386b2d4b3f341808a880ad", 0xa7}, {&(0x7f0000000780)="8826bf9759517cc0d2329c69edf0f817263855", 0x13}, {&(0x7f00000007c0)="2582b3d9e7f08996cdb9f6fd7ca6ecf3a2b595431ad4a8b42b2316d7db0efd370b44eeb5a506de607824e5b54cfdd8d6520559be66e727c20d20698dda99a3643eb8e79a7395301151f7ac0f2070a140871e0536c9602c45c3db39eb9c3900821200422187fd3a3b11f6bbf4387745ad4588f419473268dd071361fc15a2de3ef98fe09d7906091642843550d479a09b0c49a0c6d3ad3257a2e63a2420f61e07d500e8536e1f9813b438e791d5e425f4f92bd4955eeef60db6e54eedd1d93d3ef557a503b9ea87aed632a04a80cac9026df7e66f259a6b41782b36e6d3e8cf38707c265fcd8b18b45c", 0xe9}, {&(0x7f00000008c0)='\b_', 0x2}], 0x9, &(0x7f0000000980)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @mark={{0x10, 0x1, 0x24, 0xb}}, @txtime={{0x14, 0x1, 0x3d, 0x88f}}, @txtime={{0x14, 0x1, 0x3d, 0x9}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}], 0x94}}], 0x2, 0x4001) r1 = socket$inet6(0xa, 0x2, 0x0) openat$null(0xffffff9c, &(0x7f0000000ec0), 0x4000c0, 0x0) syz_io_uring_setup(0x7d99, &(0x7f00000001c0)={0x0, 0xf276, 0x20, 0x2, 0x372}, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)) syz_ublk_setup_io_uring(0x43aa, &(0x7f0000000b40)={0x0, 0x930d, 0x100, 0x2, 0xc}, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.279777394s ago: executing program 0 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 1.178920002s ago: executing program 1 (id=772): r0 = socket(0x11, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$BLKTRACESETUP(r2, 0x6804, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r4, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="000302ff3600010000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654f0", 0x35}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea", 0x12}, {&(0x7f0000000540)="d6cbcbd01a9287bce454d54ecea0f66b7367fbf6880d06443c29d1e06a5aa68da2a864699d98", 0x26}], 0x3}, 0x40011) 1.178537796s ago: executing program 1 (id=773): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) fchmod(0xffffffffffffffff, 0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38) 1.080740816s ago: executing program 1 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280), 0x0) 1.08039057s ago: executing program 1 (id=775): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.079781764s ago: executing program 2 (id=776): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 988.426411ms ago: executing program 2 (id=777): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="291896d59dcf5666c590afcbbaa9ca09e4757253c96b4fa2fd892be01c5316f3d86fb6a5a329f955e9476f385bcb85135820073b41d0203362abd2413ecb2527b1d563f51e9130", @ANYBLOB="f32bfb1762a1512aa83e12e22840799e77662c173e127ae9e8e4e192d671baf592c881ad65df8c33b2dba28b0489acd083e6f39dad3fdc40f0b64246103978efeb18e61b38d44af7e807e736006e6258b1593295cc93cd6919955d0b67af22327b88857bfbaca586609da20bb245caef2631d057b0d086b21d7123bbe695cd2f5279deefcfb75a4bd9af8f36e30674fb65c00575ba3a1b5d403f437d273229997d714efdc8fb4262584a2c60bc4528ae0f2c4a1b", @ANYRESOCT=r0], 0x14}}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 894.396µs ago: executing program 2 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) 146.863µs ago: executing program 1 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) 0s ago: executing program 1 (id=780): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): TU to 1532 would solve the problem. [ 49.351471][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.362048][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.365570][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.374688][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.380887][ T5743] team0: Port device team_slave_1 added [ 49.384042][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.434452][ T5754] team0: Port device team_slave_0 added [ 49.454537][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.457982][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.468478][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.473735][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.476500][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.486159][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.491646][ T5754] team0: Port device team_slave_1 added [ 49.497504][ T5749] hsr_slave_0: entered promiscuous mode [ 49.500666][ T5749] hsr_slave_1: entered promiscuous mode [ 49.525717][ T5744] hsr_slave_0: entered promiscuous mode [ 49.528902][ T5744] hsr_slave_1: entered promiscuous mode [ 49.531967][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 49.534096][ T5744] Cannot create hsr debugfs directory [ 49.569978][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.572261][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.580400][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.607109][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.610079][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.620608][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.641571][ T5743] hsr_slave_0: entered promiscuous mode [ 49.644678][ T5743] hsr_slave_1: entered promiscuous mode [ 49.647623][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 49.650177][ T5743] Cannot create hsr debugfs directory [ 49.780236][ T5754] hsr_slave_0: entered promiscuous mode [ 49.783170][ T5754] hsr_slave_1: entered promiscuous mode [ 49.785331][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 49.787567][ T5754] Cannot create hsr debugfs directory [ 49.981469][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.989912][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.997265][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.003923][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.007863][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.013335][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.017064][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.023612][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.084313][ T5749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.090844][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.093986][ T5749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.098571][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.101308][ T5749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.105388][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.109172][ T5749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.116232][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.172468][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.179460][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.192647][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.198668][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.217841][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.222131][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.224816][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.230443][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.267427][ T5751] Bluetooth: hci0: command tx timeout [ 50.274321][ T5754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.276959][ T5751] Bluetooth: hci3: command tx timeout [ 50.277072][ T5758] Bluetooth: hci2: command tx timeout [ 50.277299][ T5759] Bluetooth: hci1: command tx timeout [ 50.287663][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.295793][ T5754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.301642][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.305251][ T5754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.312057][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.316439][ T5754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.322598][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.392582][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.422008][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.428764][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.445521][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.451622][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.454574][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.466335][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.468664][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.473767][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.476114][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.494362][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.496698][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.503442][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.540924][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.549646][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.567351][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.570409][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.583268][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.585585][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.590304][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.605944][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.608227][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.618957][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.622073][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.820964][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.861681][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.875075][ T5744] veth0_vlan: entered promiscuous mode [ 50.884594][ T5744] veth1_vlan: entered promiscuous mode [ 50.907959][ T5744] veth0_macvtap: entered promiscuous mode [ 50.915797][ T5744] veth1_macvtap: entered promiscuous mode [ 50.924571][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.944230][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.949313][ T5749] veth0_vlan: entered promiscuous mode [ 50.956003][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.975287][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.983922][ T5749] veth1_vlan: entered promiscuous mode [ 51.027008][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.035137][ T5749] veth0_macvtap: entered promiscuous mode [ 51.045489][ T5743] veth0_vlan: entered promiscuous mode [ 51.057100][ T5749] veth1_macvtap: entered promiscuous mode [ 51.068697][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.069937][ T5743] veth1_vlan: entered promiscuous mode [ 51.071780][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.080074][ T5754] veth0_vlan: entered promiscuous mode [ 51.087348][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.090981][ T5754] veth1_vlan: entered promiscuous mode [ 51.105865][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.119570][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.123044][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.126374][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.160179][ T5743] veth0_macvtap: entered promiscuous mode [ 51.164845][ T5754] veth0_macvtap: entered promiscuous mode [ 51.178894][ T5744] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.187897][ T5744] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.192117][ T5743] veth1_macvtap: entered promiscuous mode [ 51.196867][ T5754] veth1_macvtap: entered promiscuous mode [ 51.198857][ T5744] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.200815][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.204836][ T5744] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.216285][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.219274][ T5744] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.228833][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.257144][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.268011][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.268687][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.273917][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.277708][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.290416][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.296726][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.307263][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.329529][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.451506][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.571570][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.581571][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.602668][ T5904] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 51.607254][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.608037][ T5899] IPVS: stopping backup sync thread 5904 ... [ 51.654724][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.660573][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.689542][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.704172][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.764571][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.775327][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.779168][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.807182][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.811215][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.928512][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.943143][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.977764][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.986404][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.992273][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.341776][ T5912] Zero length message leads to an empty skb [ 52.352156][ T5758] Bluetooth: hci1: command tx timeout [ 52.357359][ T5758] Bluetooth: hci3: command tx timeout [ 52.360917][ T5758] Bluetooth: hci0: command tx timeout [ 52.363138][ T5758] Bluetooth: hci2: command tx timeout [ 52.662740][ T5917] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 52.666417][ T5916] IPVS: stopping backup sync thread 5917 ... [ 54.427031][ T5759] Bluetooth: hci3: command tx timeout [ 54.427169][ T5751] Bluetooth: hci1: command tx timeout [ 54.435911][ T5758] Bluetooth: hci0: command tx timeout [ 54.438589][ T5759] Bluetooth: hci2: command tx timeout [ 55.783274][ T5946] Illegal XDP return value 98 on prog (id 2) dev N/A, expect packet loss! [ 56.104855][ T5963] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 56.117486][ T5962] IPVS: stopping backup sync thread 5963 ... [ 56.516161][ T5759] Bluetooth: hci2: command tx timeout [ 56.517120][ T5751] Bluetooth: hci3: command tx timeout [ 56.519725][ T5104] Bluetooth: hci1: command tx timeout [ 56.526198][ T5758] Bluetooth: hci0: command tx timeout [ 56.997625][ T5973] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 57.005709][ T5971] IPVS: stopping backup sync thread 5973 ... [ 57.194194][ T5981] IPVS: stopping backup sync thread 5982 ... [ 57.197353][ T5982] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 61.927987][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 64.003244][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 64.172016][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 64.957220][ T6098] tipc: Started in network mode [ 64.959458][ T6098] tipc: Node identity deb76635383a, cluster identity 4711 [ 64.961858][ T6098] tipc: Enabled bearer , priority 0 [ 64.983309][ T6098] syzkaller0: entered promiscuous mode [ 64.985137][ T6098] syzkaller0: entered allmulticast mode [ 64.987616][ T6098] tipc: Resetting bearer [ 65.009201][ T6097] tipc: Resetting bearer [ 65.345998][ T6104] Bluetooth: MGMT ver 1.23 [ 66.019053][ T6113] syz.1.38 uses obsolete (PF_INET,SOCK_PACKET) [ 66.094834][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 66.293869][ T6097] tipc: Disabling bearer [ 66.304502][ T5832] tipc: Node number set to 3868026421 [ 67.387291][ T5758] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.398447][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.360121][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 69.084496][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'. [ 70.219282][ T5937] udevd[5937]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 70.510126][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 70.672086][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 70.912111][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.916410][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.932057][ T6194] ref_ctr_offset mismatch. inode: 0x56 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 71.734649][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 72.038761][ T6216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.042379][ T6216] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.049393][ T6216] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.054276][ T6216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.056247][ T6216] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.062489][ T6216] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.068608][ T6216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.070577][ T6216] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.076814][ T6216] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.677152][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 73.057259][ T6256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.062679][ T6256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.068740][ T6256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.094442][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 73.394214][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 73.467818][ T5839] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.666822][ T5839] usb 8-1: Using ep0 maxpacket: 8 [ 73.671208][ T5839] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 73.682839][ T5839] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.686051][ T5839] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.689455][ T5839] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.693808][ T5839] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.698771][ T5839] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.705229][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.779812][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 74.006346][ T5839] usb 8-1: usb_control_msg returned -32 [ 74.012157][ T5839] usbtmc 8-1:16.0: can't read capabilities [ 74.027108][ T5758] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.031985][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.067567][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.072154][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.146782][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.496711][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 76.274639][ T5839] usb 8-1: USB disconnect, device number 2 [ 77.146755][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.149271][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.226887][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.446250][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'. [ 79.229140][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.231154][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.306737][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.308138][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 79.536226][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 79.716952][ T6341] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 79.723722][ T6341] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.727692][ T6341] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 79.731785][ T6341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.733944][ T6341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.735976][ T6341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.749111][ T6352] tipc: Enabled bearer , priority 0 [ 79.769847][ T6352] syzkaller0: entered promiscuous mode [ 79.772461][ T6352] syzkaller0: entered allmulticast mode [ 79.775144][ T6352] tipc: Resetting bearer [ 79.802254][ T6351] tipc: Resetting bearer [ 79.947862][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 81.214836][ T6351] tipc: Disabling bearer [ 81.426764][ T1494] cfg80211: failed to load regulatory.db [ 81.706669][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 81.709498][ T5104] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.788831][ T5758] Bluetooth: hci3: command 0x0c1a tx timeout [ 81.788888][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.788937][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.171189][ T6399] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 82.172751][ T6397] IPVS: stopping backup sync thread 6399 ... [ 82.582618][ T6416] overlayfs: failed to resolve './file1': -2 [ 82.597367][ T6416] netlink: 156 bytes leftover after parsing attributes in process `syz.1.96'. [ 83.297585][ T6431] tipc: Started in network mode [ 83.299187][ T6431] tipc: Node identity 3e4cab484dee, cluster identity 4711 [ 83.301574][ T6431] tipc: Enabled bearer , priority 0 [ 83.329204][ T6431] syzkaller0: entered promiscuous mode [ 83.331236][ T6431] syzkaller0: entered allmulticast mode [ 83.333495][ T6431] tipc: Resetting bearer [ 83.367629][ T6430] tipc: Resetting bearer [ 83.692861][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 83.786850][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.703021][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 84.742845][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 85.747005][ T6430] tipc: Disabling bearer [ 85.754203][ T41] tipc: Node number set to 1940040520 [ 85.866744][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.991683][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'. [ 87.152712][ T5937] udevd[5937]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 87.186144][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 87.230809][ T6471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.232795][ T6471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.236192][ T6471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.538897][ T6480] tipc: Started in network mode [ 87.540879][ T6480] tipc: Node identity 9e4522359c33, cluster identity 4711 [ 87.545142][ T6480] tipc: Enabled bearer , priority 0 [ 87.578301][ T6480] syzkaller0: entered promiscuous mode [ 87.580531][ T6480] syzkaller0: entered allmulticast mode [ 87.583330][ T6480] tipc: Resetting bearer [ 87.593828][ T6479] tipc: Resetting bearer [ 87.633933][ T6483] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.637985][ T6483] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.641064][ T6483] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.957205][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.960191][ T5104] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.504401][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 88.719703][ T6479] tipc: Disabling bearer [ 88.732314][ T6490] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 88.734432][ T6490] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 88.739261][ T5839] tipc: Node number set to 41296437 [ 88.748557][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.757279][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.821732][ T6490] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 88.827502][ T10] IPVS: starting estimator thread 0... [ 88.849368][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 88.931277][ T6503] IPVS: using max 30 ests per chain, 72000 per kthread [ 89.035788][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.118'. [ 89.072477][ T6509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.074624][ T6509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.076840][ T6509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.292610][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 90.933304][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 91.156694][ T5104] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 91.158852][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.160752][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.162754][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.162999][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.709859][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 91.872386][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 92.029206][ T6574] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 92.032707][ T6573] IPVS: stopping backup sync thread 6574 ... [ 93.227676][ T6585] IPVS: stopping backup sync thread 6584 ... [ 93.496969][ T6582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.502089][ T6582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.506217][ T6582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.989856][ T6590] tipc: Enabled bearer , priority 0 [ 94.011568][ T6590] syzkaller0: entered promiscuous mode [ 94.013284][ T6590] syzkaller0: entered allmulticast mode [ 94.015669][ T6590] tipc: Resetting bearer [ 94.057818][ T6589] tipc: Resetting bearer [ 95.306787][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.414525][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.135'. [ 95.466789][ T5751] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.468747][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.548078][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 95.556724][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.559193][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.672388][ T6612] fuse: Unknown parameter '0x0000000000000003' [ 95.824304][ T6589] tipc: Disabling bearer [ 96.004465][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 96.130585][ T6634] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 96.134350][ T6632] IPVS: stopping backup sync thread 6634 ... [ 96.410781][ T6650] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 96.412577][ T6649] IPVS: stopping backup sync thread 6650 ... [ 97.967418][ T6676] fuse: Unknown parameter '0x0000000000000003' [ 98.026723][ T5751] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 98.030123][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.096930][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 98.214019][ T6686] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 98.218699][ T6685] IPVS: stopping backup sync thread 6686 ... [ 99.190428][ T6691] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.202410][ T6691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.229857][ T6691] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.511542][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 99.685039][ T6706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.689134][ T6706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.692650][ T6706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.695509][ T6706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.701917][ T6701] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 99.707225][ T6701] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 99.713865][ T6701] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 99.761667][ T6701] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.864176][ T6701] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.951050][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'. [ 101.048858][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.058059][ T6721] fuse: Unknown parameter '0x0000000000000003' [ 101.255218][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.158'. [ 101.491824][ T6733] IPVS: stopping backup sync thread 6734 ... [ 101.520640][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 101.632173][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.640872][ T6730] ref_ctr_offset mismatch. inode: 0xc6 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 101.707170][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.709473][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.711424][ T5751] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.713680][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.816956][ T6740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.819862][ T6740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.822038][ T6740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.824063][ T6740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.773897][ T6752] fuse: Unknown parameter 'fd0x0000000000000003' [ 103.558512][ T6778] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 103.558985][ T6777] IPVS: stopping backup sync thread 6778 ... [ 103.621038][ T6780] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 103.626675][ T6780] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 103.716266][ T6784] tipc: Enabled bearer , priority 0 [ 103.742860][ T6784] syzkaller0: entered promiscuous mode [ 103.744752][ T6784] syzkaller0: entered allmulticast mode [ 103.747524][ T6784] tipc: Resetting bearer [ 103.755071][ T6783] tipc: Resetting bearer [ 103.878735][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.880721][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.883019][ T5759] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.884961][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.137136][ T6791] fuse: Unknown parameter 'fd0x0000000000000003' [ 104.217290][ T6794] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 104.219580][ T6794] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 104.300119][ T6798] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 104.302877][ T6798] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 104.496760][ T1494] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 104.698755][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.839344][ T6800] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.844845][ T5894] IPVS: starting estimator thread 0... [ 104.946710][ T6802] IPVS: using max 43 ests per chain, 103200 per kthread [ 104.978713][ T6804] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.045516][ T6783] tipc: Disabling bearer [ 105.052929][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.058723][ T1494] usb 8-1: unable to get BOS descriptor or descriptor too short [ 105.064733][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 105.067857][ T10] usb 5-1: can't read configurations, error -71 [ 105.071099][ T1494] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 105.077023][ T1494] usb 8-1: can't read configurations, error -71 [ 105.141388][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 105.442973][ T6813] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 105.446210][ T6813] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 105.634957][ T6818] fuse: Unknown parameter 'fd0x0000000000000003' [ 105.696734][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.774098][ T6823] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 105.775474][ T6822] IPVS: stopping backup sync thread 6823 ... [ 106.099675][ T6830] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 106.103403][ T6829] IPVS: stopping backup sync thread 6830 ... [ 106.752942][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 106.756842][ T5853] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 106.759259][ T5853] usb 6-1: can't read configurations, error -71 [ 107.268219][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 107.870863][ T6858] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 107.873732][ T6858] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 108.028801][ T6864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 108.127946][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 108.149426][ T5894] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.177177][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 108.201944][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 108.484957][ T6893] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 108.491257][ T6893] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 108.543973][ T6895] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 108.549259][ T6894] IPVS: stopping backup sync thread 6895 ... [ 108.746747][ T5846] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 108.901747][ T6893] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 108.916473][ T5846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 108.926296][ T5846] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 108.929817][ T5846] usb 8-1: can't read configurations, error -71 [ 109.077332][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.212'. [ 109.698318][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.704200][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 110.385517][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 110.440443][ T6934] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 110.444704][ T6934] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.447479][ T6934] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.450249][ T6934] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.636561][ T6949] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 110.641942][ T6949] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 110.808779][ T6957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 110.919997][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.037311][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.305564][ T6949] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.378553][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.389196][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 111.397584][ T5853] usb 5-1: can't read configurations, error -71 [ 111.737812][ T6974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.741162][ T6974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.744042][ T6974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.918652][ T6985] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 111.920871][ T6985] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 112.088554][ T6989] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 112.277016][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.452395][ T6985] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.506785][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.509770][ T5104] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.427268][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.433146][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 113.437221][ T5853] usb 5-1: can't read configurations, error -71 [ 113.439515][ T5853] usb usb5-port1: attempt power cycle [ 113.514815][ T6995] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 113.515322][ T6994] IPVS: stopping backup sync thread 6995 ... [ 113.664784][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.233'. [ 113.787624][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.790011][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.792348][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.598069][ T5751] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.650351][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.698793][ T7008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.701805][ T7008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.704698][ T7008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.872609][ T1494] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 115.066744][ T5846] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 115.196677][ T5846] usb 7-1: device descriptor read/64, error -71 [ 115.456727][ T5846] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 115.586708][ T5846] usb 7-1: device descriptor read/64, error -71 [ 115.634625][ T1494] usb 6-1: Using ep0 maxpacket: 8 [ 115.638869][ T1494] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 115.644149][ T1494] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.648901][ T1494] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.651906][ T1494] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.654942][ T1494] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.659106][ T1494] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.661922][ T1494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.698658][ T5846] usb usb7-port1: attempt power cycle [ 115.877478][ T1494] usb 6-1: usb_control_msg returned -32 [ 115.879353][ T1494] usbtmc 6-1:16.0: can't read capabilities [ 116.036801][ T5846] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 116.059508][ T5846] usb 7-1: device descriptor read/8, error -71 [ 116.136812][ T7022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.139607][ T7022] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.142237][ T7022] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.200670][ T7002] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 116.217096][ T7024] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 116.296959][ T5846] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 116.320168][ T5846] usb 7-1: device descriptor read/8, error -71 [ 116.333577][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.244'. [ 116.403813][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 116.410886][ T7033] nbd: nbd64 already in use [ 116.427190][ T5846] usb usb7-port1: unable to enumerate USB device [ 116.617633][ T5846] usb 6-1: USB disconnect, device number 4 [ 116.746806][ T5751] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.746837][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.070575][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 117.378291][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.245'. [ 117.437839][ T7047] IPVS: stopping backup sync thread 6989 ... [ 118.198163][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.200205][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.202280][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.277141][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 118.354301][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 118.516301][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.524415][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 118.547589][ T7065] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 118.553623][ T7065] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 118.817528][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 118.966106][ T7087] fuse: Bad value for 'fd' [ 118.976864][ T1349] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.132532][ T7065] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.141976][ T1349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.146324][ T1349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 119.149104][ T1349] usb 5-1: can't read configurations, error -71 [ 119.246687][ T7039] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.365605][ T7096] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 119.369082][ T7096] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 119.396732][ T7039] usb 6-1: Using ep0 maxpacket: 8 [ 119.399607][ T7039] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 119.402276][ T7039] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 119.405513][ T7039] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.408508][ T7039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.617455][ T5846] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 119.750160][ T7108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.759976][ T7108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.769952][ T7108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.827740][ T7108] syz.0.261: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.832107][ T7108] CPU: 2 UID: 0 PID: 7108 Comm: syz.0.261 Not tainted syzkaller #0 PREEMPT(full) [ 119.832126][ T7108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.832143][ T7108] Call Trace: [ 119.832155][ T7108] [ 119.832161][ T7108] dump_stack_lvl+0x100/0x190 [ 119.832197][ T7108] warn_alloc.cold+0x94/0xa8 [ 119.832212][ T7108] ? __pfx_warn_alloc+0x10/0x10 [ 119.832232][ T7108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.832252][ T7108] ? __pfx_get_page_from_freelist+0x10/0x10 [ 119.832270][ T7108] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 119.832295][ T7108] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.832311][ T7108] ? stack_trace_save+0x8e/0xc0 [ 119.832328][ T7108] ? __pfx_stack_trace_save+0x10/0x10 [ 119.832350][ T7108] ? kasan_save_track+0x14/0x30 [ 119.832364][ T7108] ? __kasan_kmalloc+0xaa/0xb0 [ 119.832376][ T7108] ? __kmalloc_noprof+0x322/0x820 [ 119.832389][ T7108] ? comedi_isadma_alloc+0xc6/0x620 [ 119.832407][ T7108] ? pcl816_attach+0x909/0xb30 [ 119.832428][ T7108] __alloc_pages_noprof+0xb/0x110 [ 119.832441][ T7108] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 119.832460][ T7108] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 119.832476][ T7108] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 119.832495][ T7108] dma_direct_alloc+0x8f/0x590 [ 119.832510][ T7108] dma_alloc_attrs+0x182/0x3a0 [ 119.832524][ T7108] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 119.832537][ T7108] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.832549][ T7108] ? dma_direct_supported+0xca/0x220 [ 119.832566][ T7108] comedi_isadma_alloc+0x331/0x620 [ 119.832584][ T7108] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 119.832602][ T7108] ? request_threaded_irq+0x27b/0x3e0 [ 119.832621][ T7108] pcl816_attach+0x909/0xb30 [ 119.832636][ T7108] comedi_device_attach+0x40e/0x6b0 [ 119.832657][ T7108] do_devconfig_ioctl+0x1b3/0x6d0 [ 119.832673][ T7108] ? comedi_unlocked_ioctl+0x180/0x3310 [ 119.832692][ T7108] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 119.832714][ T7108] ? tomoyo_path_number_perm+0x46d/0x580 [ 119.832730][ T7108] ? kasan_save_stack+0x3f/0x50 [ 119.832743][ T7108] ? kasan_save_stack+0x30/0x50 [ 119.832756][ T7108] ? kasan_save_track+0x14/0x30 [ 119.832769][ T7108] ? kasan_save_free_info+0x3b/0x70 [ 119.832782][ T7108] comedi_unlocked_ioctl+0x860/0x3310 [ 119.832803][ T7108] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 119.832832][ T7108] ? kasan_quarantine_put+0x104/0x240 [ 119.832845][ T7108] ? lockdep_hardirqs_on+0x78/0x100 [ 119.832861][ T7108] ? find_held_lock+0x2b/0x80 [ 119.832874][ T7108] ? tomoyo_path_number_perm+0x28f/0x580 [ 119.832888][ T7108] ? tomoyo_path_number_perm+0x28f/0x580 [ 119.832904][ T7108] ? tomoyo_path_number_perm+0x188/0x580 [ 119.832922][ T7108] comedi_compat_ioctl+0x438/0xe20 [ 119.832933][ T7108] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 119.832951][ T7108] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.832969][ T7108] ? do_vfs_ioctl+0x226/0x13e0 [ 119.832985][ T7108] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.833004][ T7108] ? find_held_lock+0x2b/0x80 [ 119.833017][ T7108] ? __fget_files+0x215/0x3d0 [ 119.833027][ T7108] ? hook_file_ioctl_common+0x140/0x440 [ 119.833045][ T7108] ? __fget_files+0x21f/0x3d0 [ 119.833057][ T7108] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 119.833075][ T7108] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 119.833093][ T7108] __do_fast_syscall_32+0xe7/0x970 [ 119.833109][ T7108] ? lockdep_hardirqs_on+0x78/0x100 [ 119.833124][ T7108] do_fast_syscall_32+0x32/0x70 [ 119.833139][ T7108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.833153][ T7108] RIP: 0023:0xf7f68fec [ 119.833168][ T7108] Code: Unable to access opcode bytes at 0xf7f68fc2. [ 119.833182][ T7108] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 119.833193][ T7108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 119.833200][ T7108] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.833206][ T7108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.833213][ T7108] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.833219][ T7108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.833232][ T7108] [ 119.833274][ T7108] Mem-Info: [ 119.857972][ T7096] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.868337][ T5901] IPVS: starting estimator thread 0... [ 119.877290][ T7108] active_anon:5033 inactive_anon:126 isolated_anon:0 [ 119.877290][ T7108] active_file:2 inactive_file:53708 isolated_file:0 [ 119.877290][ T7108] unevictable:1768 dirty:107 writeback:0 [ 119.877290][ T7108] slab_reclaimable:9827 slab_unreclaimable:51450 [ 119.877290][ T7108] mapped:23751 shmem:2296 pagetables:1129 [ 119.877290][ T7108] sec_pagetables:299 bounce:0 [ 119.877290][ T7108] kernel_misc_reclaimable:0 [ 119.877290][ T7108] free:43235 free_pcp:94 free_cma:0 [ 119.989292][ T7108] Node 0 active_anon:4kB inactive_anon:12kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8320kB pagetables:1152kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 119.996680][ T7119] IPVS: using max 43 ests per chain, 103200 per kthread [ 119.999557][ T7108] Node 0 DMA free:2140kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:376kB local_pcp:176kB free_cma:0kB [ 119.999593][ T7108] lowmem_reserve[]: 0 280 280 280 280 [ 119.999616][ T7108] Node 0 DMA: 18*4kB (U) 4*8kB (U) 15*16kB (UE) 8*32kB (UE) 6*64kB (UE) 1*128kB (U) 2*256kB (UE) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2136kB [ 119.999755][ T7108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.999765][ T7108] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.999774][ T7108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.999782][ T7108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.999791][ T7108] 56169 total pagecache pages [ 119.999795][ T7108] 169 pages in swap cache [ 119.999800][ T7108] Free swap = 118452kB [ 119.999804][ T7108] Total swap = 124996kB [ 119.999809][ T7108] 524155 pages RAM [ 119.999859][ T7108] 0 pages HighMem/MovableOnly [ 119.999864][ T7108] 211540 pages reserved [ 119.999868][ T7108] 0 pages cma reserved [ 120.094907][ T5846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 120.100875][ T7122] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 120.103571][ T7122] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 120.106696][ T5846] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 120.109308][ T5846] usb 7-1: can't read configurations, error -71 [ 120.540553][ T7039] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.806267][ T7122] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.832522][ T7039] usb 5-1: unable to get BOS descriptor or descriptor too short [ 120.851515][ T7039] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 120.854181][ T7039] usb 5-1: can't read configurations, error -71 [ 121.550115][ T7142] siw: device registration error -23 [ 121.692941][ T7148] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 121.695344][ T7147] IPVS: stopping backup sync thread 7148 ... [ 121.787565][ T5104] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 121.790551][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.793233][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.795849][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.798405][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.822978][ T7150] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 121.825294][ T7150] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 122.256692][ T1349] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.421771][ T5894] usb 6-1: USB disconnect, device number 5 [ 122.429980][ T7150] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 122.522968][ T1349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.529796][ T1349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 122.535471][ T1349] usb 5-1: can't read configurations, error -71 [ 122.607848][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 122.957918][ T7171] siw: device registration error -23 [ 123.515280][ T7182] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 123.520611][ T7182] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 123.551928][ T7186] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 123.554179][ T7186] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 123.786898][ T5901] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 123.876775][ T1349] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 124.033076][ T7182] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.035615][ T7039] IPVS: starting estimator thread 0... [ 124.055736][ T7186] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 124.067649][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 124.082363][ T5901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 124.090237][ T5901] usb 6-1: can't read configurations, error -71 [ 124.127156][ T7196] IPVS: using max 24 ests per chain, 57600 per kthread [ 124.176339][ T7200] siw: device registration error -23 [ 124.231036][ T1349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 124.241297][ T1349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 124.246337][ T1349] usb 5-1: can't read configurations, error -71 [ 124.749200][ T7202] tipc: Enabled bearer , priority 0 [ 124.778751][ T7202] syzkaller0: entered promiscuous mode [ 124.780585][ T7202] syzkaller0: entered allmulticast mode [ 124.782884][ T7202] tipc: Resetting bearer [ 124.798021][ T7201] tipc: Resetting bearer [ 125.137253][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 125.326723][ T5894] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 125.597360][ T7219] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.855145][ T7201] tipc: Disabling bearer [ 125.873232][ T7206] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 125.876843][ T7206] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 125.898032][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 125.901388][ T5894] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 125.903750][ T5894] usb 6-1: can't read configurations, error -71 [ 126.362982][ T7230] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 126.365264][ T7230] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 126.471565][ T7234] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 126.476176][ T7234] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 126.646664][ T61] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 126.777572][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.828972][ T7230] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.898936][ T61] usb 8-1: unable to get BOS descriptor or descriptor too short [ 126.906204][ T61] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 126.910634][ T61] usb 8-1: can't read configurations, error -71 [ 126.916057][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 126.942812][ T7234] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.950531][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.955186][ T5894] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 126.958089][ T5894] usb 6-1: can't read configurations, error -71 [ 126.963707][ T5894] usb usb6-port1: attempt power cycle [ 127.486992][ T7244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.488820][ T7244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.490996][ T7244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.503019][ T7246] tipc: Started in network mode [ 127.517125][ T7246] tipc: Node identity f28d23b7beba, cluster identity 4711 [ 127.519423][ T7246] tipc: Enabled bearer , priority 0 [ 127.552029][ T7246] syzkaller0: entered promiscuous mode [ 127.555497][ T7246] syzkaller0: entered allmulticast mode [ 127.558335][ T7246] tipc: Resetting bearer [ 127.568633][ T7245] tipc: Resetting bearer [ 128.046873][ T5894] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 128.196738][ T7270] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.695209][ T7245] tipc: Disabling bearer [ 128.709309][ T7253] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 128.712575][ T7253] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 128.719951][ T5901] tipc: Node number set to 1278682039 [ 128.747293][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.755803][ T5894] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 128.758536][ T5894] usb 6-1: can't read configurations, error -71 [ 129.556814][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.556876][ T5758] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.562100][ T5751] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.854407][ T7293] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 129.856684][ T7293] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 130.041333][ T7302] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 130.043118][ T7301] IPVS: stopping backup sync thread 7302 ... [ 130.216488][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 130.362101][ T7311] UDC core: g1: couldn't find an available UDC or it's busy [ 130.608796][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.619077][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.621209][ T61] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 130.627018][ T5816] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 130.739675][ T7316] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 130.741505][ T7315] IPVS: stopping backup sync thread 7316 ... [ 130.863900][ T7311] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.080725][ T7293] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 131.086942][ T61] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.090265][ T61] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 131.092662][ T61] usb 5-1: can't read configurations, error -71 [ 131.138076][ T5816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.140740][ T7323] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 131.142884][ T7323] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 131.149125][ T5816] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 131.156388][ T5816] usb 6-1: can't read configurations, error -71 [ 131.386773][ T1349] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 131.634354][ T1349] usb 7-1: unable to get BOS descriptor or descriptor too short [ 131.641501][ T1349] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 131.643854][ T1349] usb 7-1: can't read configurations, error -71 [ 131.748666][ T7327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.751749][ T7327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.754325][ T7327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.756829][ T7327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.776936][ T7327] warn_alloc: 1 callbacks suppressed [ 131.776949][ T7327] syz.1.332: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.783197][ T7327] CPU: 3 UID: 0 PID: 7327 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(full) [ 131.783212][ T7327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.783219][ T7327] Call Trace: [ 131.783224][ T7327] [ 131.783229][ T7327] dump_stack_lvl+0x100/0x190 [ 131.783252][ T7327] warn_alloc.cold+0x94/0xa8 [ 131.783272][ T7327] ? __pfx_warn_alloc+0x10/0x10 [ 131.783300][ T7327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.783328][ T7327] ? __pfx_get_page_from_freelist+0x10/0x10 [ 131.783358][ T7327] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 131.783385][ T7327] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.783399][ T7327] ? stack_trace_save+0x8e/0xc0 [ 131.783414][ T7327] ? __pfx_stack_trace_save+0x10/0x10 [ 131.783433][ T7327] ? kasan_save_track+0x14/0x30 [ 131.783446][ T7327] ? __kasan_kmalloc+0xaa/0xb0 [ 131.783459][ T7327] ? __kmalloc_noprof+0x322/0x820 [ 131.783471][ T7327] ? comedi_isadma_alloc+0xc6/0x620 [ 131.783487][ T7327] ? pcl816_attach+0x909/0xb30 [ 131.783505][ T7327] __alloc_pages_noprof+0xb/0x110 [ 131.783518][ T7327] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 131.783536][ T7327] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 131.783552][ T7327] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 131.783570][ T7327] dma_direct_alloc+0x8f/0x590 [ 131.783585][ T7327] dma_alloc_attrs+0x182/0x3a0 [ 131.783598][ T7327] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 131.783612][ T7327] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 131.783626][ T7327] ? dma_direct_supported+0xca/0x220 [ 131.783642][ T7327] comedi_isadma_alloc+0x331/0x620 [ 131.783660][ T7327] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 131.783677][ T7327] ? request_threaded_irq+0x27b/0x3e0 [ 131.783696][ T7327] pcl816_attach+0x909/0xb30 [ 131.783712][ T7327] comedi_device_attach+0x40e/0x6b0 [ 131.783729][ T7327] do_devconfig_ioctl+0x1b3/0x6d0 [ 131.783744][ T7327] ? comedi_unlocked_ioctl+0x180/0x3310 [ 131.783763][ T7327] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 131.783785][ T7327] ? tomoyo_path_number_perm+0x46d/0x580 [ 131.783801][ T7327] ? kasan_save_stack+0x3f/0x50 [ 131.783813][ T7327] ? kasan_save_stack+0x30/0x50 [ 131.783831][ T7327] ? kasan_save_track+0x14/0x30 [ 131.783844][ T7327] ? kasan_save_free_info+0x3b/0x70 [ 131.783857][ T7327] comedi_unlocked_ioctl+0x860/0x3310 [ 131.783879][ T7327] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 131.783907][ T7327] ? kasan_quarantine_put+0x104/0x240 [ 131.783920][ T7327] ? lockdep_hardirqs_on+0x78/0x100 [ 131.783935][ T7327] ? find_held_lock+0x2b/0x80 [ 131.783948][ T7327] ? tomoyo_path_number_perm+0x28f/0x580 [ 131.783962][ T7327] ? tomoyo_path_number_perm+0x28f/0x580 [ 131.783978][ T7327] ? tomoyo_path_number_perm+0x188/0x580 [ 131.783995][ T7327] comedi_compat_ioctl+0x438/0xe20 [ 131.784007][ T7327] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 131.784025][ T7327] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.784043][ T7327] ? do_vfs_ioctl+0x226/0x13e0 [ 131.784066][ T7327] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.784094][ T7327] ? find_held_lock+0x2b/0x80 [ 131.784113][ T7327] ? __fget_files+0x215/0x3d0 [ 131.784129][ T7327] ? hook_file_ioctl_common+0x140/0x440 [ 131.784153][ T7327] ? __fget_files+0x21f/0x3d0 [ 131.784166][ T7327] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 131.784184][ T7327] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 131.784202][ T7327] __do_fast_syscall_32+0xe7/0x970 [ 131.784218][ T7327] ? lockdep_hardirqs_on+0x78/0x100 [ 131.784233][ T7327] do_fast_syscall_32+0x32/0x70 [ 131.784248][ T7327] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.784263][ T7327] RIP: 0023:0xf7f85fec [ 131.784278][ T7327] Code: Unable to access opcode bytes at 0xf7f85fc2. [ 131.784283][ T7327] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 131.784295][ T7327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 131.784302][ T7327] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.784308][ T7327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.784314][ T7327] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.784322][ T7327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.784335][ T7327] [ 131.784341][ T7327] Mem-Info: [ 131.923957][ T7327] active_anon:5101 inactive_anon:124 isolated_anon:0 [ 131.923957][ T7327] active_file:2 inactive_file:53712 isolated_file:0 [ 131.923957][ T7327] unevictable:1768 dirty:275 writeback:0 [ 131.923957][ T7327] slab_reclaimable:9902 slab_unreclaimable:51465 [ 131.923957][ T7327] mapped:23789 shmem:2294 pagetables:1071 [ 131.923957][ T7327] sec_pagetables:299 bounce:0 [ 131.923957][ T7327] kernel_misc_reclaimable:0 [ 131.923957][ T7327] free:42203 free_pcp:54 free_cma:0 [ 131.941135][ T7327] Node 0 active_anon:32kB inactive_anon:4kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1152kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 131.953934][ T7327] Node 0 DMA free:2376kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:40kB free_cma:0kB [ 131.963504][ T7327] lowmem_reserve[]: 0 280 280 280 280 [ 131.965338][ T7327] Node 0 DMA: 22*4kB (UE) 6*8kB (U) 20*16kB (UE) 12*32kB (UE) 6*64kB (UE) 1*128kB (U) 2*256kB (UE) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2376kB [ 131.970080][ T7327] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.973052][ T7327] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.975943][ T7327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.979100][ T7327] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.981921][ T7327] 56171 total pagecache pages [ 131.983688][ T7327] 167 pages in swap cache [ 131.985477][ T7327] Free swap = 118460kB [ 131.986898][ T7327] Total swap = 124996kB [ 131.988265][ T7327] 524155 pages RAM [ 131.989513][ T7327] 0 pages HighMem/MovableOnly [ 131.990984][ T7327] 211540 pages reserved [ 131.992291][ T7327] 0 pages cma reserved [ 132.086526][ T7340] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 132.089722][ T7340] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 132.348789][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.350892][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.625226][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 132.632954][ T5816] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 132.668684][ T7347] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 132.671515][ T7347] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 132.694420][ T7351] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 132.699464][ T7351] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 132.792256][ T7340] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.808042][ T7357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.811033][ T7357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.813695][ T7357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.858058][ T5816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 132.867341][ T5816] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 132.870050][ T5816] usb 6-1: can't read configurations, error -71 [ 132.954041][ T7362] siw: device registration error -23 [ 132.997125][ T1349] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 133.096756][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 133.153639][ T7347] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 133.160697][ T1349] usb 7-1: unable to get BOS descriptor or descriptor too short [ 133.165378][ T1349] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 133.169669][ T1349] usb 7-1: can't read configurations, error -71 [ 133.275432][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.282414][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 133.287801][ T10] usb 5-1: can't read configurations, error -71 [ 133.500292][ T7387] Config c/1 of g1 needs at least one function. [ 133.502364][ T7387] udc dummy_udc.0: failed to start g1: -22 [ 133.504313][ T7387] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 133.509058][ T7387] UDC core: g1: couldn't find an available UDC or it's busy [ 133.698970][ T7389] Config c/1 of g1 needs at least one function. [ 133.701030][ T7389] udc dummy_udc.0: failed to start g1: -22 [ 133.702873][ T7389] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 133.707714][ T7389] UDC core: g1: couldn't find an available UDC or it's busy [ 133.749128][ T7393] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 133.757292][ T7393] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 133.777565][ T7391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.779881][ T7391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.781952][ T7391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.796731][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.799385][ T5751] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.823087][ T7396] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 133.825895][ T7396] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 134.156727][ T5816] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.156728][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 134.323264][ T7396] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.391300][ T5816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 134.396258][ T5816] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 134.398612][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.399043][ T5816] usb 6-1: can't read configurations, error -71 [ 134.407192][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 134.409779][ T10] usb 5-1: can't read configurations, error -71 [ 134.411950][ T10] usb usb5-port1: attempt power cycle [ 134.987590][ T7410] Config c/1 of g1 needs at least one function. [ 134.989672][ T7410] udc dummy_udc.0: failed to start g1: -22 [ 134.991475][ T7410] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 134.997192][ T7410] UDC core: g1: couldn't find an available UDC or it's busy [ 135.009927][ T7414] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 135.016547][ T7414] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 135.072373][ T7418] UDC core: g1: couldn't find an available UDC or it's busy [ 135.317323][ T5894] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 135.458879][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 135.486310][ T5894] usb 8-1: unable to get BOS descriptor or descriptor too short [ 135.489767][ T7414] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.492871][ T5894] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 135.495570][ T5894] usb 8-1: can't read configurations, error -71 [ 135.503670][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.509502][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 135.512501][ T10] usb 5-1: can't read configurations, error -71 [ 135.786748][ T5751] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.788778][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.788847][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.866728][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.071074][ T7425] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 136.073936][ T7425] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 136.111676][ T7429] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 136.111993][ T7428] IPVS: stopping backup sync thread 7429 ... [ 136.546773][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 136.739401][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.745854][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 136.749318][ T10] usb 5-1: can't read configurations, error -71 [ 136.751496][ T10] usb usb5-port1: unable to enumerate USB device [ 136.983068][ T7448] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 136.985368][ T7448] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 137.043641][ T7455] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 137.045916][ T7455] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 137.236767][ T6366] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 137.333139][ T7470] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 137.336184][ T7470] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 137.470031][ T6366] usb 7-1: unable to get BOS descriptor or descriptor too short [ 137.477470][ T6366] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 137.480358][ T6366] usb 7-1: can't read configurations, error -71 [ 137.512860][ T1349] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 137.786670][ T5894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 137.962856][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.967630][ T5894] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 137.970022][ T5894] usb 5-1: can't read configurations, error -71 [ 138.113405][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 138.192681][ T7455] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 138.198456][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 138.205338][ T1349] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 138.208030][ T1349] usb 6-1: can't read configurations, error -71 [ 138.304156][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 139.196179][ T7497] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 139.208858][ T7497] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 139.414815][ T7506] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 139.418546][ T7505] IPVS: stopping backup sync thread 7506 ... [ 139.587867][ T1349] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 140.443944][ T7510] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.446072][ T7510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.448539][ T7510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.484542][ T7516] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 140.492138][ T7516] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 140.529031][ T7497] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.538441][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 140.542542][ T1349] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 140.546081][ T1349] usb 6-1: can't read configurations, error -71 [ 140.574673][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 140.747707][ T1494] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 140.902568][ T1494] usb 7-1: unable to get BOS descriptor or descriptor too short [ 140.907199][ T1494] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 140.909775][ T1494] usb 7-1: can't read configurations, error -71 [ 141.138607][ T7536] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 141.142322][ T7530] IPVS: stopping backup sync thread 7536 ... [ 141.450174][ T7541] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 141.452498][ T7541] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 141.496711][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 141.646691][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 141.650218][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 141.653461][ T24] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 141.657382][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.662076][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.664854][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.671201][ T24] usbtmc 8-1:16.0: bulk endpoints not found [ 141.716822][ T5104] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 141.719113][ T5758] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.719151][ T5751] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.766810][ T1494] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 141.927000][ T7543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.930532][ T7543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.932860][ T7543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.004760][ T1494] usb 7-1: unable to get BOS descriptor or descriptor too short [ 142.012963][ T1494] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 142.015994][ T1494] usb 7-1: can't read configurations, error -71 [ 142.018815][ T1494] usb usb7-port1: attempt power cycle [ 142.621182][ T7559] IPVS: stopping backup sync thread 7560 ... [ 142.623666][ T7560] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 142.717358][ T7562] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 142.723304][ T7562] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 143.046737][ T1349] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 143.203961][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 143.208885][ T1349] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 143.212113][ T1349] usb 6-1: can't read configurations, error -71 [ 143.505354][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 143.631499][ T7573] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 143.634785][ T7573] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 143.906690][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 143.946750][ T5751] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 143.946788][ T5104] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.946809][ T5759] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.949213][ T5759] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.951173][ T5758] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.155427][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 144.162723][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 144.165515][ T34] usb 7-1: can't read configurations, error -71 [ 144.263580][ T24] usb 8-1: USB disconnect, device number 11 [ 144.516436][ T7585] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 144.523450][ T7585] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 144.832889][ T7593] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 144.836041][ T7592] IPVS: stopping backup sync thread 7593 ... [ 144.845805][ T7595] UDC core: g1: couldn't find an available UDC or it's busy [ 145.136747][ T1349] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 145.493639][ T7597] UDC core: g1: couldn't find an available UDC or it's busy [ 145.596681][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 145.737142][ T6366] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 145.833402][ T7585] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.837149][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 145.840479][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 145.842812][ T34] usb 7-1: can't read configurations, error -71 [ 145.845641][ T34] usb usb7-port1: attempt power cycle [ 145.893259][ T7597] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.897204][ T1349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.899029][ T6366] usb 8-1: unable to get BOS descriptor or descriptor too short [ 145.902957][ T1349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 145.904315][ T6366] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 145.905552][ T1349] usb 5-1: can't read configurations, error -71 [ 145.908155][ T6366] usb 8-1: can't read configurations, error -71 [ 145.956746][ T5894] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 146.106963][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 146.110786][ T5894] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 146.114294][ T5894] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 146.118663][ T5894] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.122526][ T5894] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.126471][ T5894] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.131829][ T5894] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.135521][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.143383][ T5894] usbtmc 6-1:16.0: bulk endpoints not found [ 146.461615][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 146.537465][ T7613] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 146.540010][ T7613] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 146.956733][ T1349] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 147.114317][ T7613] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.175617][ T1349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.179016][ T1349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 147.181514][ T1349] usb 5-1: can't read configurations, error -71 [ 147.183796][ T1349] usb usb5-port1: attempt power cycle [ 147.252442][ T7618] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 147.260432][ T7618] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 147.477738][ T7626] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 147.480765][ T7626] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 147.526789][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 147.726780][ T34] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 147.762623][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 147.765974][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 147.769021][ T10] usb 8-1: can't read configurations, error -71 [ 147.854352][ T7635] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 147.854424][ T7634] IPVS: stopping backup sync thread 7635 ... [ 147.879614][ T7626] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.884670][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 147.888244][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 147.890612][ T34] usb 7-1: can't read configurations, error -71 [ 148.312210][ T7637] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 148.315297][ T7637] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 148.655523][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 148.669537][ T7641] siw: device registration error -23 [ 148.718702][ T7039] usb 6-1: USB disconnect, device number 24 [ 148.780932][ T7649] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 148.783531][ T7649] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 148.786744][ T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 148.922707][ T7658] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 148.923705][ T7657] IPVS: stopping backup sync thread 7658 ... [ 149.037044][ T5846] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 149.128989][ T7664] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 149.132399][ T7663] IPVS: stopping backup sync thread 7664 ... [ 149.408224][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 149.775258][ T7660] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.835565][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 149.842624][ T10] usb 8-1: can't read configurations, error -71 [ 149.845685][ T10] usb usb8-port1: attempt power cycle [ 149.947238][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 149.996427][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 150.010981][ T5846] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 150.014170][ T5846] usb 5-1: can't read configurations, error -71 [ 150.110995][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 150.308065][ T7681] Config c/1 of g1 needs at least one function. [ 150.310253][ T7681] udc dummy_udc.0: failed to start g1: -22 [ 150.312628][ T7681] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 150.317807][ T7681] UDC core: g1: couldn't find an available UDC or it's busy [ 150.337682][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 150.397093][ T7039] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 150.560486][ T7039] usb 7-1: Using ep0 maxpacket: 8 [ 150.566759][ T7039] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 150.572253][ T7039] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 150.577042][ T7039] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.580592][ T7039] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.585669][ T7039] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.590224][ T7039] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.593062][ T7039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.598793][ T7039] usbtmc 7-1:16.0: bulk endpoints not found [ 150.941463][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 151.051297][ T7692] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 151.061785][ T7692] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 151.134245][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 151.139036][ T7696] siw: device registration error -23 [ 151.306817][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 151.346775][ T5846] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 151.460912][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 151.464099][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 151.466917][ T10] usb 8-1: can't read configurations, error -71 [ 151.568660][ T5846] usb 6-1: unable to get BOS descriptor or descriptor too short [ 151.575611][ T5846] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 151.578562][ T5846] usb 6-1: can't read configurations, error -71 [ 152.978241][ T7714] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 152.982784][ T7711] IPVS: stopping backup sync thread 7714 ... [ 153.062643][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 153.173978][ T5846] usb 7-1: USB disconnect, device number 22 [ 153.245748][ T7723] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 153.247973][ T7723] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 153.380635][ T7727] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 153.383053][ T7727] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 153.606711][ T5846] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 153.614533][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 153.617751][ T7729] siw: device registration error -23 [ 153.638829][ T29] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 153.770625][ T7723] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 153.863103][ T5846] usb 7-1: unable to get BOS descriptor or descriptor too short [ 153.868743][ T5846] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 153.875648][ T5846] usb 7-1: can't read configurations, error -71 [ 153.911012][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.953917][ T7741] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 153.957653][ T7739] IPVS: stopping backup sync thread 7741 ... [ 154.306880][ T5853] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 154.456828][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 154.462020][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 154.462557][ T5853] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 154.469053][ T5853] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 154.473254][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.477056][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.480163][ T5853] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.484040][ T5853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.487330][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.493380][ T5853] usbtmc 5-1:16.0: bulk endpoints not found [ 154.542455][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 154.705047][ T29] usb 6-1: can't read configurations, error -71 [ 155.002250][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 155.005544][ T7759] siw: device registration error -23 [ 155.390275][ T7767] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 155.395315][ T7765] IPVS: stopping backup sync thread 7767 ... [ 155.587703][ T7769] UDC core: g1: couldn't find an available UDC or it's busy [ 155.668531][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 155.825211][ T7775] UDC core: g1: couldn't find an available UDC or it's busy [ 155.827560][ T5816] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 155.995651][ T5816] usb 7-1: unable to get BOS descriptor or descriptor too short [ 155.999934][ T5816] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 156.003104][ T5816] usb 7-1: can't read configurations, error -71 [ 156.076780][ T5901] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 156.238949][ T5901] usb 8-1: unable to get BOS descriptor or descriptor too short [ 156.242770][ T5901] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 156.245767][ T5901] usb 8-1: can't read configurations, error -71 [ 156.951287][ T7789] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 156.954454][ T7787] IPVS: stopping backup sync thread 7789 ... [ 157.077948][ T5853] usb 5-1: USB disconnect, device number 29 [ 157.444337][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 157.511057][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 157.514328][ T7796] siw: device registration error -23 [ 157.558495][ T7798] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 157.561369][ T7798] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 157.653258][ T7807] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 157.655900][ T7807] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 157.802045][ T7813] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 157.805213][ T7812] IPVS: stopping backup sync thread 7813 ... [ 157.870965][ T5853] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 157.906749][ T5901] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 158.074812][ T5853] usb 7-1: unable to get BOS descriptor or descriptor too short [ 158.094435][ T34] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 158.111918][ T5853] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 158.124789][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 158.132472][ T5901] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 158.139375][ T5901] usb 6-1: can't read configurations, error -71 [ 158.146009][ T5853] usb 7-1: can't read configurations, error -71 [ 158.308040][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 158.331303][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 158.335336][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.338904][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.341981][ T34] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.345791][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.351138][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.354479][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.420680][ T34] usbtmc 5-1:16.0: bulk endpoints not found [ 158.833458][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 158.839756][ T7822] siw: device registration error -23 [ 159.792519][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 159.973243][ T7836] UDC core: g1: couldn't find an available UDC or it's busy [ 159.994744][ T7838] UDC core: g1: couldn't find an available UDC or it's busy [ 160.216688][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 160.236684][ T5816] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 160.372883][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.380672][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 160.383513][ T10] usb 6-1: can't read configurations, error -71 [ 160.398046][ T5816] usb 7-1: unable to get BOS descriptor or descriptor too short [ 160.404508][ T5816] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 160.407955][ T5816] usb 7-1: can't read configurations, error -71 [ 160.420384][ T7842] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 160.420620][ T7841] IPVS: stopping backup sync thread 7842 ... [ 160.731673][ T5901] usb 5-1: USB disconnect, device number 30 [ 161.544833][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 161.549546][ T7860] siw: device registration error -23 [ 161.846756][ T1349] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 161.997084][ T1349] usb 8-1: Using ep0 maxpacket: 8 [ 162.001430][ T1349] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 162.004958][ T1349] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.009263][ T1349] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.013198][ T1349] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.018116][ T1349] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.023385][ T1349] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.028326][ T1349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.043319][ T1349] usbtmc 8-1:16.0: bulk endpoints not found [ 163.086250][ T7905] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 163.089826][ T7905] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 163.516705][ T1349] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 163.549019][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.533'. [ 163.624159][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 163.820409][ T1349] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.824778][ T1349] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 163.828713][ T1349] usb 5-1: can't read configurations, error -71 [ 164.619110][ T7039] usb 8-1: USB disconnect, device number 21 [ 165.828760][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.542'. [ 166.495964][ T7956] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 166.499793][ T7955] IPVS: stopping backup sync thread 7956 ... [ 166.640405][ T5937] udevd[5937]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 166.645853][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 166.936009][ T7967] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 166.940606][ T7967] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 166.987306][ T5846] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 167.136786][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 167.140758][ T5846] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 167.144251][ T5846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.148574][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.152625][ T5846] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.156750][ T5846] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.160631][ T5846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.163432][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.173008][ T5846] usbtmc 6-1:16.0: bulk endpoints not found [ 167.186767][ T7039] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 167.363536][ T7039] usb 7-1: unable to get BOS descriptor or descriptor too short [ 167.367737][ T7039] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 167.370597][ T7039] usb 7-1: can't read configurations, error -71 [ 167.515338][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 167.518411][ T7971] siw: device registration error -23 [ 168.164480][ T7988] IPVS: stopping backup sync thread 7990 ... [ 168.897135][ T7992] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 168.899704][ T7992] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 169.053850][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 169.057074][ T7994] siw: device registration error -23 [ 169.159403][ T29] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 169.255326][ T8004] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 169.258312][ T8004] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 169.379601][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 169.385336][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 169.388012][ T29] usb 8-1: can't read configurations, error -71 [ 169.516785][ T34] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 169.672529][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 169.678179][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 169.680773][ T34] usb 7-1: can't read configurations, error -71 [ 169.816889][ T9] usb 6-1: USB disconnect, device number 33 [ 170.985982][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 170.995514][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 170.999659][ T8033] siw: device registration error -23 [ 171.106806][ T7039] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 171.169542][ T8037] UDC core: g1: couldn't find an available UDC or it's busy [ 171.406743][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 171.565872][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 171.573213][ T9] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 171.576793][ T9] usb 8-1: can't read configurations, error -71 [ 171.875297][ T8042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'. [ 171.906757][ T7039] usb 5-1: Using ep0 maxpacket: 8 [ 171.925350][ T7039] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 171.930825][ T7039] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.939568][ T7039] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.945446][ T7039] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 171.949749][ T7039] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 171.953919][ T7039] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.960826][ T7039] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.964458][ T7039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.072678][ T7039] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 172.714476][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 172.725435][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 173.074299][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 173.079561][ T8071] siw: device registration error -23 [ 173.925800][ T5894] usb 5-1: USB disconnect, device number 33 [ 174.035127][ T8091] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 174.043033][ T8091] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 174.090521][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.590'. [ 174.309925][ T29] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 174.509486][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 174.609711][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 174.658129][ T8103] Config c/1 of g1 needs at least one function. [ 174.660596][ T8103] udc dummy_udc.0: failed to start g1: -22 [ 174.662595][ T8103] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 174.677192][ T8103] UDC core: g1: couldn't find an available UDC or it's busy [ 174.976699][ T34] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 175.083612][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 175.088146][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 175.090756][ T29] usb 8-1: can't read configurations, error -71 [ 175.134023][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 175.145042][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 175.150453][ T34] usb 7-1: can't read configurations, error -71 [ 175.466681][ T5853] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 175.616787][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 175.620932][ T5853] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 175.624221][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.627758][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.630749][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 175.633695][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 175.637884][ T5853] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.663972][ T5853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.667808][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.676961][ T5853] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 175.918711][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.604'. [ 176.322212][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 176.339491][ T8170] UDC core: g1: couldn't find an available UDC or it's busy [ 176.357006][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 176.596856][ T29] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 176.767850][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 176.777271][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 176.783091][ T29] usb 8-1: can't read configurations, error -71 [ 176.818347][ T8177] UDC core: g1: couldn't find an available UDC or it's busy [ 177.097477][ T7039] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 177.209651][ T8187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.614'. [ 177.252279][ T7039] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.261183][ T7039] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 177.265487][ T7039] usb 6-1: can't read configurations, error -71 [ 177.429602][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.208061][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 178.212058][ T8223] siw: device registration error -23 [ 178.243891][ T29] usb 5-1: USB disconnect, device number 34 [ 178.298992][ T8231] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 178.301799][ T8231] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 178.322044][ T8234] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 178.324142][ T8234] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 178.384405][ T8236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.625'. [ 178.566661][ T34] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 178.566927][ T7039] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 178.602316][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.613777][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 178.743754][ T7039] usb 8-1: unable to get BOS descriptor or descriptor too short [ 178.757817][ T7039] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 178.765915][ T7039] usb 8-1: can't read configurations, error -71 [ 178.841403][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.856769][ T34] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 178.880022][ T34] usb 7-1: can't read configurations, error -71 [ 178.928885][ T8252] IPVS: stopping backup sync thread 8251 ... [ 179.218989][ T8256] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 179.221182][ T8256] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 179.631023][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 179.634231][ T8267] siw: device registration error -23 [ 179.668814][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 179.830563][ T8256] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.835029][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.839405][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 179.841899][ T9] usb 5-1: can't read configurations, error -71 [ 180.006687][ T34] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 180.099891][ T8284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.635'. [ 180.329216][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.331335][ T8294] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 180.334363][ T8294] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 180.343276][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 180.522012][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 180.526639][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 180.909511][ T34] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 180.912724][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.915745][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.918952][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 180.922189][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 180.925234][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.929426][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.932241][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.943991][ T34] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 181.288256][ T8315] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 181.296713][ T8315] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 181.480836][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 182.141012][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 182.285193][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 182.333833][ T8351] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 182.336128][ T8351] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 182.346342][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 182.559374][ T8368] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 182.561656][ T8368] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 182.596779][ T7039] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 182.718503][ T1349] usb 7-1: USB disconnect, device number 38 [ 182.746175][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 182.749394][ T8351] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.749560][ T8376] siw: device registration error -23 [ 182.754509][ T7039] usb 6-1: unable to get BOS descriptor or descriptor too short [ 182.759131][ T7039] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 182.762879][ T7039] usb 6-1: can't read configurations, error -71 [ 182.806845][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 182.851203][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.662'. [ 182.981166][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 182.984876][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 182.987341][ T34] usb 8-1: can't read configurations, error -71 [ 183.024873][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 183.521574][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 184.046858][ T34] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 184.152007][ T8432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 184.216710][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 184.220109][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 184.222808][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.225960][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.229369][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.233884][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.240584][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.243458][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.333365][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 184.440073][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 184.449262][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 184.473698][ T34] usb 8-1: usb_control_msg returned -32 [ 184.475561][ T34] usbtmc 8-1:16.0: can't read capabilities [ 184.644535][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 184.649842][ T8443] siw: device registration error -23 [ 184.782680][ T8414] usbtmc 8-1:16.0: INITIATE_CLEAR returned 0 [ 184.786309][ T8446] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 184.870470][ T8452] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 184.875003][ T8452] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 184.984241][ T1349] usb 8-1: USB disconnect, device number 33 [ 185.126699][ T7039] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 185.282185][ T7039] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.287692][ T7039] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 185.292005][ T7039] usb 7-1: can't read configurations, error -71 [ 185.408528][ T8462] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 185.413985][ T8459] IPVS: stopping backup sync thread 8462 ... [ 186.310559][ T8471] siw: device registration error -23 [ 186.380706][ T5937] udevd[5937]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.387683][ T5931] udevd[5931]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.753653][ T8491] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 186.756179][ T8491] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 187.216743][ T34] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 187.380941][ T8491] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.497018][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.511747][ T34] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 187.516764][ T34] usb 5-1: can't read configurations, error -71 [ 187.608436][ T8498] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 187.609410][ T8497] IPVS: stopping backup sync thread 8498 ... [ 187.682382][ T8500] __nla_validate_parse: 4 callbacks suppressed [ 187.682402][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 187.691027][ T8500] siw: device registration error -23 [ 188.461034][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 188.532557][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 188.612448][ T8511] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 188.615333][ T8511] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 188.622826][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 188.792908][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 188.799063][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 188.955738][ T8527] Config c/1 of g1 needs at least one function. [ 188.957973][ T8527] udc dummy_udc.0: failed to start g1: -22 [ 188.959880][ T8527] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 188.964025][ T8527] UDC core: g1: couldn't find an available UDC or it's busy [ 188.967814][ T8528] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 188.973340][ T8528] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 189.009161][ T8530] fuse: Bad value for 'fd' [ 189.134869][ T8537] UDC core: g1: couldn't find an available UDC or it's busy [ 189.376685][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 189.539835][ T8528] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.637302][ T8545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 189.710480][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.254308][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 190.683122][ T9] usb 5-1: can't read configurations, error -71 [ 190.723627][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 190.776367][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 191.261313][ T8566] Config c/1 of g1 needs at least one function. [ 191.263495][ T8566] udc dummy_udc.0: failed to start g1: -22 [ 191.265387][ T8566] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 191.269281][ T8566] UDC core: g1: couldn't find an available UDC or it's busy [ 191.325413][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 191.365559][ T8575] siw: device registration error -23 [ 191.383716][ T8574] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 191.387171][ T8574] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 191.502612][ T8584] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 191.506071][ T8584] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 191.666683][ T7039] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 191.806744][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 191.822803][ T7039] usb 7-1: unable to get BOS descriptor or descriptor too short [ 191.826954][ T7039] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 191.829922][ T7039] usb 7-1: can't read configurations, error -71 [ 191.959699][ T8584] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.039645][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 192.045489][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 192.051048][ T9] usb 5-1: can't read configurations, error -71 [ 192.056741][ T9] usb usb5-port1: attempt power cycle [ 192.482546][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 193.397041][ T8602] Config c/1 of g1 needs at least one function. [ 193.399224][ T8602] udc dummy_udc.0: failed to start g1: -22 [ 193.401094][ T8602] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 193.410729][ T8602] UDC core: g1: couldn't find an available UDC or it's busy [ 193.438891][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 193.508742][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 193.578202][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 193.606469][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 193.638125][ T8615] siw: device registration error -23 [ 193.806434][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.813849][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.002355][ T8626] fuse: Bad value for 'fd' [ 194.094137][ T8630] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 194.096654][ T8630] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 194.357132][ T61] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 194.511306][ T8630] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.590709][ T61] usb 8-1: unable to get BOS descriptor or descriptor too short [ 194.596264][ T61] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 194.598874][ T61] usb 8-1: can't read configurations, error -71 [ 194.630852][ T8633] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 194.633534][ T8633] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 194.712020][ T8640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'. [ 194.886211][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 194.896821][ T6366] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 194.902583][ T8647] siw: device registration error -23 [ 194.978942][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 195.041568][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 195.080857][ T5745] udevd[5745]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 195.097398][ T6366] usb 5-1: Dual-Role OTG device on HNP port [ 195.099521][ T6366] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 195.102498][ T6366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.118128][ T6366] gspca_main: spca501-2.14.0 probing 0000:0000 [ 195.120775][ T6366] gspca_spca501: reg write: error -32 [ 195.122482][ T6366] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 195.124639][ T6366] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 195.174315][ T9] usb 5-1: USB disconnect, device number 42 [ 195.793431][ T8668] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 195.795689][ T8668] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 196.077104][ T1349] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 196.235277][ T1349] usb 6-1: unable to get BOS descriptor or descriptor too short [ 196.239951][ T1349] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 196.243160][ T1349] usb 6-1: can't read configurations, error -71 [ 196.796958][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 196.801633][ T8676] siw: device registration error -23 [ 196.895528][ T8684] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 196.903617][ T8684] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 197.016544][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 197.060160][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.754'. [ 197.163067][ T6366] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 197.458320][ T8684] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.036229][ T6366] usb 7-1: unable to get BOS descriptor or descriptor too short [ 198.060996][ T6366] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 198.063445][ T6366] usb 7-1: can't read configurations, error -71 [ 198.230574][ T8705] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 198.232906][ T8705] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 198.360813][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 198.367095][ T8711] siw: device registration error -23 [ 198.417509][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 198.451066][ T6198] udevd[6198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 198.482660][ T8713] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 198.484938][ T8713] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 198.826797][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 198.987418][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.994801][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 198.998533][ T9] usb 5-1: can't read configurations, error -71 [ 199.068170][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 199.198846][ T8727] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 199.201205][ T8727] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 199.288563][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 199.291715][ T8731] siw: device registration error -23 [ 199.541015][ T8736] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 199.543205][ T8736] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 199.743678][ T8748] UDC core: g1: couldn't find an available UDC or it's busy [ 199.826049][ T8752] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 199.827228][ T8751] IPVS: stopping backup sync thread 8752 ... [ 199.845026][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 199.850527][ T8753] siw: device registration error -23 [ 200.066677][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 200.779549][ T8736] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.840783][ T8762] ------------[ cut here ]------------ [ 200.844568][ T8762] refcount_t: addition on 0; use-after-free. [ 200.847179][ T8762] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x111/0x130, CPU#1: syz.2.778/8762 [ 200.851156][ T8762] Modules linked in: [ 200.853828][ T8762] CPU: 1 UID: 0 PID: 8762 Comm: syz.2.778 Not tainted syzkaller #0 PREEMPT(full) [ 200.857266][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.861296][ T8762] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 200.863791][ T8762] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 200.871481][ T8762] RSP: 0018:ffffc90025067c78 EFLAGS: 00010283 [ 200.873956][ T8762] RAX: 0000000000000f23 RBX: ffff88802a3d0e1c RCX: ffffc90025e39000 [ 200.876898][ T8762] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 200.880138][ T8762] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 200.883299][ T8762] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802a3d0e1c [ 200.886491][ T8762] R13: ffff888013a872d8 R14: ffffc90025067d28 R15: ffff888025124000 [ 200.889759][ T8762] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f5475b40 [ 200.892902][ T8762] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 200.895578][ T8762] CR2: 00000000f5474ff4 CR3: 000000004df80000 CR4: 0000000000352ef0 [ 200.898874][ T8762] Call Trace: [ 200.900191][ T8762] [ 200.901341][ T8762] config_item_get+0x8c/0xb0 [ 200.903133][ T8762] configfs_symlink+0x390/0x11f0 [ 200.905159][ T8762] ? bpf_lsm_inode_permission+0x9/0x10 [ 200.907415][ T8762] ? security_inode_permission+0xbf/0x250 [ 200.909710][ T8762] ? __pfx_configfs_symlink+0x10/0x10 [ 200.911863][ T8762] vfs_symlink+0x178/0x4d0 [ 200.913648][ T8762] filename_symlinkat+0x2a6/0x560 [ 200.915679][ T8762] ? __pfx_filename_symlinkat+0x10/0x10 [ 200.917966][ T8762] ? strncpy_from_user+0x19d/0x2d0 [ 200.920005][ T8762] ? do_getname+0x191/0x390 [ 200.921857][ T8762] __ia32_sys_symlinkat+0x9b/0xe0 [ 200.923919][ T8762] __do_fast_syscall_32+0xe7/0x970 [ 200.925335][ T8764] UDC core: g1: couldn't find an available UDC or it's busy [ 200.926071][ T8762] do_fast_syscall_32+0x32/0x70 [ 200.931020][ T8762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.933707][ T8762] RIP: 0023:0xf7fd3fec [ 200.935443][ T8762] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 200.938294][ T8762] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 200.941767][ T8762] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 200.945047][ T8762] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.948419][ T8762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.951714][ T8762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.955033][ T8762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.958271][ T8762] [ 200.959466][ T8762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 200.962396][ T8762] CPU: 1 UID: 0 PID: 8762 Comm: syz.2.778 Not tainted syzkaller #0 PREEMPT(full) [ 200.965959][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.969682][ T8762] Call Trace: [ 200.970949][ T8762] [ 200.972078][ T8762] dump_stack_lvl+0x100/0x190 [ 200.973882][ T8762] vpanic+0x552/0x970 [ 200.975187][ T8762] ? __pfx_vpanic+0x10/0x10 [ 200.976623][ T8762] panic+0xd1/0xe0 [ 200.977952][ T8762] ? __pfx_panic+0x10/0x10 [ 200.979506][ T8762] check_panic_on_warn.cold+0x19/0x34 [ 200.981202][ T8762] ? refcount_warn_saturate+0x111/0x130 [ 200.982948][ T8762] __warn.cold+0x191/0x318 [ 200.984354][ T8762] __report_bug+0x30f/0x440 [ 200.985817][ T8762] ? refcount_warn_saturate+0x111/0x130 [ 200.987552][ T8762] ? __pfx___report_bug+0x10/0x10 [ 200.989153][ T8762] ? refcount_warn_saturate+0x10a/0x130 [ 200.990932][ T8762] report_bug_entry+0xe1/0x290 [ 200.992454][ T8762] ? refcount_warn_saturate+0x111/0x130 [ 200.994148][ T8762] handle_bug+0x1cd/0x2a0 [ 200.995459][ T8762] exc_invalid_op+0x17/0x50 [ 200.996836][ T8762] asm_exc_invalid_op+0x1a/0x20 [ 200.998294][ T8762] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 201.000225][ T8762] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 201.006181][ T8762] RSP: 0018:ffffc90025067c78 EFLAGS: 00010283 [ 201.008080][ T8762] RAX: 0000000000000f23 RBX: ffff88802a3d0e1c RCX: ffffc90025e39000 [ 201.010541][ T8762] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 201.013028][ T8762] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 201.015518][ T8762] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802a3d0e1c [ 201.017982][ T8762] R13: ffff888013a872d8 R14: ffffc90025067d28 R15: ffff888025124000 [ 201.020449][ T8762] ? refcount_warn_saturate+0x10a/0x130 [ 201.022197][ T8762] ? refcount_warn_saturate+0x10a/0x130 [ 201.023949][ T8762] config_item_get+0x8c/0xb0 [ 201.025462][ T8762] configfs_symlink+0x390/0x11f0 [ 201.027029][ T8762] ? bpf_lsm_inode_permission+0x9/0x10 [ 201.028731][ T8762] ? security_inode_permission+0xbf/0x250 [ 201.030531][ T8762] ? __pfx_configfs_symlink+0x10/0x10 [ 201.032223][ T8762] vfs_symlink+0x178/0x4d0 [ 201.033648][ T8762] filename_symlinkat+0x2a6/0x560 [ 201.035263][ T8762] ? __pfx_filename_symlinkat+0x10/0x10 [ 201.036998][ T8762] ? strncpy_from_user+0x19d/0x2d0 [ 201.038635][ T8762] ? do_getname+0x191/0x390 [ 201.040094][ T8762] __ia32_sys_symlinkat+0x9b/0xe0 [ 201.041691][ T8762] __do_fast_syscall_32+0xe7/0x970 [ 201.043313][ T8762] do_fast_syscall_32+0x32/0x70 [ 201.044867][ T8762] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.046871][ T8762] RIP: 0023:0xf7fd3fec [ 201.048175][ T8762] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 201.050261][ T8762] RSP: 002b:00000000f547550c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 201.052862][ T8762] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 201.055355][ T8762] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.057854][ T8762] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.060194][ T8762] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.062652][ T8762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.065160][ T8762] [ 201.066833][ T8762] Kernel Offset: disabled [ 201.068204][ T8762] Rebooting in 86400 seconds..