last executing test programs: 1m16.480579146s ago: executing program 1 (id=395): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}, {&(0x7f0000004f40)=ANY=[], 0x2440}], 0x2}, 0x0) 1m16.297375876s ago: executing program 1 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) 1m16.275986912s ago: executing program 1 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 1m16.184096967s ago: executing program 1 (id=401): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) read$FUSE(r2, &(0x7f0000001140)={0x2020}, 0x2020) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8bd5, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendto$inet6(r4, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7f, 0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x5, 0x6, 0x603, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0xc010) syz_usb_connect(0x6, 0xad2, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x2b, 0x29, 0x65, 0xff, 0x4a5, 0x3003, 0x8fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac0, 0x4, 0x5, 0x6, 0x60, 0x1, [{{0x9, 0x4, 0x32, 0x6, 0x1, 0x6c, 0x15, 0x79, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x2}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0x1, 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x6, 0x4, [0x8, 0x6, 0xa, 0x6], 0xc}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x4, 0x3, 0x8421, 0xa, 0x9}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0xfff7, 0x3, "52a5aef0"}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x2, 0x2, [0x7, 0x3], 0x4}]}, @uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x1, 0x1, 0xeb, "994a1d07c6a3243f"}]}], [{{0x9, 0x5, 0xf, 0x8, 0x40, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf, 0x7}]}}]}}, {{0x9, 0x4, 0x6d, 0x8, 0x4, 0x30, 0x77, 0xb4, 0x7f, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "b0efd005"}, {0x5, 0x24, 0x0, 0x8e}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0xd53, 0x2}, [@dmm={0x7, 0x24, 0x14, 0xb4, 0x9}, @country_functional={0xc, 0x24, 0x7, 0x1, 0x8001, [0x93d6, 0x5, 0x10]}, @ncm={0x6, 0x24, 0x1a, 0x6d, 0x20}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x7ff, 0x7, 0xc, 0x1, 0x2}, @obex={0x5, 0x24, 0x15, 0x2}, @country_functional={0xe, 0x24, 0x7, 0x21, 0x5, [0x8000, 0x5, 0x5, 0x9]}]}], [{{0x9, 0x5, 0xc81bc68eb62eae70, 0xc, 0x3ff, 0x6, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3f9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x3, 0x1, 0x3, [@generic={0xa7, 0xe, "385cb2da81a213756d054c0d7881ed631126b73fa49b340cb4709e2ebee2d7927d2da78abc33e1725f07ec6df011e1476ae6a9a11d3703d741e442142a524800e8741ad9cef6b33e409240b63168e45771c761459b7f2a7a612874c7e741697a35ccefea3967ec924355aed4210a51db0782364acdbde753b5750d34232bb59719186ede84fe4949c5a33563170556db0aba406f90c5ae29c4a786533521bcca65418149b4"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x8, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x45, 0x8, [@generic={0xaa, 0x21, "96eee1e2c99a7a25bc4baeb28586c0224fd9256352bdd3b33b434d0c708b0702278f7bb69ebf4cfb7cd8482627f9005ffc0c2d03dc6c924dca4db7aa70d4466b3e594c38f6da92d2931472935c9ef0e9c9ab28350bb503f47ab1bb1abd638b566c8764a9ad94008e9843eb38d042e1e12e26046e5cd7d78ea7d423a8d4f7bff2e5db6a322dcc9c45dd30ad7bbf215c72412e21ce7470d7b6473cdd238af78c024c6e8d23170931c8"}]}}]}}, {{0x9, 0x4, 0xe2, 0x6, 0x9, 0x62, 0x2f, 0x81, 0xcb, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x3, 0x7, 0x7, "45c7", "f8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5c, 0x2, 0x10, 0x96, "d0d4", '_'}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0xd0, 0x0, "6fee1e481c32de"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, "122953", "7a17"}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0xfd}, [@processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x0, "44d039c9"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x1, 0x4, 0x9, 0x5b, 0x10}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x5, 0x3, [0x1, 0x4, 0x1], 0x22}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x3, "4aa1"}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x2, "154faefedd"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x7, "094b82fb42"}]}], [{{0x9, 0x5, 0xe, 0x1, 0x400, 0x5, 0x7, 0x2, [@generic={0x44, 0x23, "8b7bdaac6b730e04eb77864f642b38d13125c291e402bbe58a83d863df6d442cc9a8a1e6ff35d12c8269a61fd4f1a179aa510e9daeb0d338e5e1d15ad4e1dab75c85"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x80, 0x3f, [@generic={0x6e, 0x10, "94c6621fc9cea462be69fef8c79713b1e100849f09bd0f212412a8636baf2ee3d14d4bd242e4f3be41894aeebaf4f7651ee90cd541c34059fc6bb9cce0eb4ffe9b183e37006438d0f4bdb44c03b920f2ab373fca987ecf8d42086e49d28c918fcd273886927ca15c8102335f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6c4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x4, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xff}, @generic={0xa6, 0x1c, "86c52f7ac18509ba4c0938334b99c6a3af161b434cfbbd03a4690d15778d4c5dc69ff88c5050ac3f33db5054aa23c1b61b7d40c9fb5d2a858e1b1d0b2ff78357a4b718d8372e03c5e512aef38d98829c3be37b479b0d83dd4dc14168b0a3eb1563ba65c125680a72c7253fe4b2a48429363471c2665887e404424d8f67a6ca86c65d525f559e1548476390476dd7947efb0349314a1f848e687341e77e2a1535dc608965"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x74, 0x5}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}, @generic={0x54, 0x5, "160175bd31d797e703535fc869c7d715a14f1a8a294838724452099545e7a9b30eeeaba2b471dbd385a21248948174cb629c1bb211f67dc7d0a5630cbe84da4892f45267eb101d0fd520b9f388aae91ea6f3"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x2, 0x2, 0x8e, [@generic={0x40, 0x3, "34ca643485be24ea72078016cde76d4e568efba6275f6ef9602ef0d2da3ab625da3c6c9f7fcb1a7d5c43d09ab265a4d1118227c4c223d42b01ba3c47210b"}, @generic={0x9c, 0xb, "d8e70a2b3ebdd341028a3acf741e237a4b0f9f1d1596b5a493617ab6486e597b52c16091584d2bc985f4aaf781e664a9caf60a2e805d0380199bba4d48fb02e08364ac8a4fbb4592f2d2bd183a51053e661d558761843828a2ea03671066c8279b454a98a7e45695a114c2b89ce01648cae2914f32dd9499667e0871684123bcf1e81cd76b02a7f198574edf2bce5824cd29711ad75cde58ed3f"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x7, 0xe6, [@generic={0xc0, 0xe, "88466913ea767b69642f3b12b82208eb9d965c1876cc65287bdafae7d92b378aa2a60a06e30c3e941ba366c9c652cf59e48d40e567b598bff24a577696ac5ef834e63b84889f408a6e9b31b4e1ab628f31de2e861f74862164886f62ce4e70216dab962e24ac7d0af78c118c90ec24cfe2e030731137e8b0399bae1f0301d9dba45a87973a105527ad5f6d432e777ad030cabcf6321ec62551fd3504d2cd6aca894cf364c4047f861d01fcb06f8d2c582c156baf6ac4dba5a19f8ef0d664"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x0, 0x5f, 0x8, 0x3c, [@generic={0xb6, 0x22, "2abca7c1b4163712dce84838bb77ff7e97b0c40ca92014d4909171c8349d2b8694711c89a9d21feb2af83c993de6dabb1bde7523b3155b4a175b5388a779274cec1f1c0385e3057f1e667c33234c08aac6ea93ee1daae8f56e07cbece0f3115f5a6c7322122e37a2f4db66eaa62b70d6e664958acffc18153120b41b50350635416d8eb2dffe5e7575d090660cc51ff686b8c01d664ef92f6bf0ea603d7344abe94e550aad3147c7c3fcb0d05c42d4823261f1bb"}]}}]}}, {{0x9, 0x4, 0x12, 0xe4, 0xb, 0xe5, 0x9a, 0x1c, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x10}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0x5, "a52b95"}]}], [{{0x9, 0x5, 0x3, 0x1, 0x3ff, 0xd6, 0x9, 0x9, [@generic={0x78, 0x1, "fb6aa933ab2c21dd55535f91c41c269dda04838d83531fe3d42c51d9cf62bdf5ebd85b535984d0091a2ed89a911b3a600fe6e924b61452dd630c76cd72934029a33b287cf9c151842a450c5c25f66fd33c2dd9bbbf5d91afd98dac0b4fe34bcdc582ca8d43e1e670324e95d1759bbc142c7c22cffd91"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xae8c}, @generic={0x69, 0xc, "43dea6c0f8e3ec54e4e1140ca0fc2370583e41f087d7d79ef35cbb105590973e0753ea115f91adc711bef766b1b02c0c0c9f1daeca87db608733f0682940dab54d864b986e5de827f92ef2fc2aee6ac341176a2eef4adcced3cc348c4e1bdaba5d2ba84084b79d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x7, 0x1, [@generic={0x50, 0xf, "d1fddeedff872a42f3d7d9fc81da0d4261ccdd9046dabcd096886d6db892ce3d51df7c40d206c0725c094cbc84659533bfdc28609e9a562c64b8dc5e364bff2b6f687be24ed83fa39487e60c6815"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x101}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0xed, 0x3e, 0x0, [@generic={0x92, 0x21, "bbc879a22acb1f896d6f62a4a3280da4299e299f086f959d7dc8baa2c59d72e60844af27ce177b053b0b0d982ac44fa5331d3fbe34ed0bfd154a48483eb92afb7b6053eee565fda3a26e63d7071ec403c2be3bb32a54df334d1d8d561ca4ae11cbeac57ef3d00f3a1391faa0f490ea44a509a0b40b16653c629018ed144b680da67a6ce97f9acb315096591c597bbcb0"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0xdd, 0x3, 0x80}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x4, 0xe0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xe}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x9d, 0x8, 0xd}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2, 0xce, 0xba}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x27, 0x40, 0x6, [@generic={0xb8, 0x10, "63ec88fbff76d53b4596ffa2a55a5443dce29c7e85a3f8274f88e454171710b6c245b54c088fb483ad2b0092a923fca50087ecf0eb6a2d4fd6014d2c27219241108000e4274205fa7681d9658230e52a5d32b8f118a704cf2d40e545f6a5fe537763948f2e04730da2005820103a584942cd272ff9db6c6ccad5a28612c04b564514fafa1fdd990defa87faa83ab1e5407ce7fd97a6403acb769777db082555ac0257427c29479403203fe9b021b3f94425f0830f92b"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x9, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x200}, @generic={0x4b, 0xa, "bfe8721c3be006d8fad80141bb77cbbeb2b959698c250417ba65598646ccfa4b3b74cc67ce9abe7937d1433d2fff36c0f753918bbf51e77e5000568cc2bd2b11462007416befe90f62"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x11, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f}, @generic={0x20, 0x7, "27c1740635e23cb1786f0cc455be6e86f7388a2a04409fb8afb5a9831d09"}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x200, 0x3, 0x3, 0x8, 0xff, 0x59}, 0x3f, &(0x7f0000000c80)={0x5, 0xf, 0x3f, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0xa, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d3db16f11df6ae457dea344c371d0083"}, @ssp_cap={0x1c, 0x10, 0xa, 0xde, 0x4, 0x7ffffa7, 0xf0f, 0x3, [0x30, 0xffff5f, 0x3f30, 0xc000]}]}, 0x1, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x443}}]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io(r9, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r9, 0x80, 0x3c, &(0x7f0000000d40)=""/60) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) 1m14.90056082s ago: executing program 1 (id=403): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0c223edc04a6a770f5dbbd0b0bd17b480240438ece397736ec0268208f7d"}}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) r4 = syz_open_dev$video(&(0x7f0000000180), 0xfffffffffffffff7, 0x103040) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000001c0)={0x6, 0x0, 0x2}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bc2a, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xce}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m14.841001375s ago: executing program 1 (id=404): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) (async, rerun: 32) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xe, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x20004010) (async) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local}}, 0xff8, 0x4001}, 0x90) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xe4, 0x0, 0x42, 0x5c}) (async) syz_usb_disconnect(r0) 59.799942694s ago: executing program 32 (id=404): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001d40)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) (async, rerun: 32) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x2) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xe, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x20004010) (async) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local}}, 0xff8, 0x4001}, 0x90) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xe4, 0x0, 0x42, 0x5c}) (async) syz_usb_disconnect(r0) 7.940032495s ago: executing program 4 (id=779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x189800, 0xa0, 0x9}, 0x18) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)={r0, 0x8, 0x40, "4b565a9d7751406de685f69b35a1009978bd0b9c619dbcef40247aff76cb2afa7917d2b70beb17ec00fa623412b3ca65a5dbe20e45c4e42e320c70d96acd5898a632f165d0029337a9118655c0c6bbd6f6264f73e4"}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x10, 0x8}, {0x8, 0x8}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x100}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x0) 4.8631546s ago: executing program 4 (id=797): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0x100000001, 0x4, 0x8000, 0x15c, 0x155, 0x7, 0xb, 0x80, 0xabbb, 0x3, 0x1, 0xf156, 0x1, 0x0, 0x41a0, 0x7fff, 0xc, 0x3, 0xffffffffffffffc8, 0xffff, 0x987, 0x6, 0x2, 0x3}) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='j', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0xffffffff}, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r0, 0x20800) dup3(r4, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000001060300000000010000ed1e9813966997aa01000721000005000100070000000500010007200000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040804}, 0x8000) io_setup(0x6, &(0x7f0000000540)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x81, r7, 0x0}]) 4.272325777s ago: executing program 4 (id=803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0xe000200b}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x8, 0x9, 0x0, 0x0, 0x2, 0x2, 0x4, 0x40, 0x7, 0xd0, 0x3, 0x0, 0x101, 0x5, 0xf9, 0xf9, 0x8, 0x4, '\x00', 0x3, 0x10001}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.138956392s ago: executing program 4 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) 4.066525756s ago: executing program 4 (id=807): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000004018000780050003001f0000000c00018008000140ffffffff0500050002000000050001"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000040)=0x1000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4) read$snapshot(r4, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000140)) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905dd"], 0x0) 3.175778868s ago: executing program 0 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x17b}]}) r3 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000280)={0x9, 0x4}) 3.033489038s ago: executing program 0 (id=816): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) futimesat(r1, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 2.94188277s ago: executing program 0 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400018006000100fef99c3c084932042e4fbb340200000008000300ac1414aa263de6f5e5e36bd57726fd557e4255590ca4644e9c03f64fd2d5666e5b468d3cc06d50acb0f02bdb6e4e1ea3d9600d8950017884cc9bafe1bf7917edf09e1a1518b0f7982c0a012fe214dcfb12c0c982bddb95d27d17ff770d1c756c5534863621657fb5a02e7a5964516d5e1ec6bca0740ab36d76af6f86a420f2f715f557e62b"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc0c0) 2.844540947s ago: executing program 0 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000500)=0x40000000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000004000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a00340001010101010100007368beb834556bad"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @random="2f89223e4981"}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES16, @ANYBLOB="000128bd7000fcdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f000200"], 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x48041) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r9, @ANYRESDEC], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0xb0}, 0x1, 0x0, 0x0, 0xc094}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000700000000000000000000000001000005"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r10 = socket$caif_seqpacket(0x25, 0x5, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f0000000180)={'pimreg\x00', 0x2}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000001ec0), &(0x7f0000001f00)=0x8) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f0000000340)={r12, r12, 0xfffd, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000000c0)=0xf) 2.512944624s ago: executing program 3 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="90a8589654e280f6f8829b19bbee5271cd141186a8b66c78162f874b57bc293e4ce8e95b3e37cebfc2f5f62585fb44dee258581b0d4053e876cc1efc3ddb37841adeb3d1144ac5f04f9fac7a1ad3fd1a0f97460fa5601c6a36488f57264fb3081c79642531c10d97860349c6d041b55ab3ef898397b5c3b9759b80c8f92dde8e869b0dce8db41c681c0053c90c9e90ccb5e9b5c21448e32e07230ad75cd6e3808823a4927c94f96c1bbb7c2169bb262183598a0a7f514b67879d0c6847dd5e1020f8e1d3ce0133a1814c7c3835c67e0630", 0xd1}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f0000002300)=[{0xb8, 0x84, 0x28b, "fb3e22caa4f9e2225d47c009e3daaa6f0214ac5fdb578ab978c6d545a13d2c3d3b702d0e16be729bddcb337842a20df83dbf923109bfb0e8af0e34ae03572be5d1acf859d51e7e7bcb7d4ded55fe59ab72c1ef465e35c6a8e3741e94d1a5e42faf7278a8e6f51330adb59f39c0a0bfc9a29a3310398bc91c5101f2f517ae435b336cc8ba014dc47fba6fb2d22e0a227f4f5d1de923e8e7a7ec157f0c9a1d374712d1ce5d8e"}, {0xc8, 0x113, 0x7ff, "b46e14378a20614264df57b7ef379b75031cf6af9231b0e752a0693c2eadb670ed314326b870b8b47b381bdfd6d0a99a62bbe480c29c98b7452210f7c8c4c25208f58aca7207ef25219a9b948b23423e4e5034bc1f080d247d7dfc2544011a4839a33ca4bb18caacb1c4674eadc6b0edf3a1054e29e991629c82cbfa6aacf65a5098546ed81cb0a4a7100eee6e26a674a6de2aabbe54cdf98535ca0590edb07fdde56b973603f1a11deb802830ffff16a878b9"}], 0x180}}], 0x1, 0x24040010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x600080, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0xfffffffd, 0x80, 0x0, 'queue0\x00'}) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r1, 0x6f000) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 1.845469401s ago: executing program 0 (id=827): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.794980664s ago: executing program 0 (id=828): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) rt_tgsigqueueinfo(r4, r4, 0x6, &(0x7f0000000200)={0x10, 0x6, 0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f0000000100)) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000292966085e04840263f8010203010902240001000000090904"], 0x0) r5 = socket(0x40000000015, 0x5, 0xffffffff) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) getsockname$packet(r5, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0xc0049364, &(0x7f00000000c0)=0x1) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000080)=0x7f) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049e1002100c9a7befe6f6d645a1a11b81b2c4b100fd57c06db1a75df432a9ed32d3b475663c0d236fd000000000000000000000000000000267f49eb82b962d81db29f0b47df47351f"], 0x184}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303920422c021240ffff0203010902240001000010000904810202c17f0c00090502020002020000090582020002000000"], 0x0) 1.272879657s ago: executing program 2 (id=830): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x164, &(0x7f0000000200)=ANY=[]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x6, 0xbd8, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0xce, 0xf5, 0x72, 0x40, 0x12d1, 0x2ee5, 0xc8d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc6, 0x4, 0x0, 0x1, 0xc0, 0x1d, [{{0x9, 0x4, 0x92, 0xe6, 0x2, 0xff, 0x3, 0x7b, 0xc, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5f, 0x0, 0x5, "f48d"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x2, 0x10, '2/', '1>V'}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x2}]}], [{{0x9, 0x5, 0x5, 0x10, 0x400, 0x8, 0xf9, 0x3, [@generic={0x99, 0xd, "2212e24d6ba884ec9cdd8ddbc5b396bf265a71fde06bf439afc26e81dcfe66ee2cbb4066d9b2c52ee267074551e300e0eced0fd6aed00ed5e84e0a348bff3671fd97d1a8dd96d34d7005e2f104cbd94f20409f8505b30262a8fef43cd2a42779de88325ddbaa5020f93590ce2c57e2e5f04330cbb1e2ebb13cf6cf61db239ba352a29e8b5591eb8ca6a00a73e3754caf8ae1a3addfe782"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x4, 0x3, 0x4, [@generic={0xa0, 0x23, "975cb6da5417f688bd66080801fd5998d226701b94c33839a78cc807150ddf39b5fafac31db00b21fdd18efef22a9ca1873665b76de42e4e78a78e7abdf4f0588b73339a6143df3c766f2f8c7c31abeb971fa075c624ced001dee4a55db022c0c9cf3f1a87d2fe6fee67ce8d04bbb983665fca32a94eb51dab78eb4d28b79170f04a039e0f0aec91cc7fdda2d75b1bfec219df07002be42d8dc4d5479cd5"}]}}]}}, {{0x9, 0x4, 0x67, 0x8, 0x4, 0x60, 0xa8, 0xc7, 0xfe, [@hid_hid={0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x15d}}], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x9, 0x40, 0xf, [@generic={0xe3, 0x20, "1ba592001929f347138412d4b7d47e036a9f9beb07cb026f6fdd023e3e8d3953290010b9e05af2ff2cb17ba906d847230b826e31cca618908b9faba69b8b2b3f3b16c6f90dac66d2430669f1e30ea7ad79dd63a54f64b868afb00fd83d3e505798060257ad00422c0230e636248fee79791744ae1ce30f4235fcc81214ec6edc2edc51e19ae94b584aa3798080a1333f3db7c7534aba9115eeb95126a7947831eae705f855233ec67af96d593338b2b8333fea1f406f28e9f13c7b5b588ffc444dd7dd3b50d2785fe129b30998ee77062ca8079ccf9ab3c2430c27d1a09b19c2de"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x5, 0x64, 0x1, [@generic={0x35, 0x4, "48fd75e6096c2412c466fd85f3cb4e6545c2378e596ea1fac56fedcbe42e43c70d755d696a3b95ad0b98fdc950feda807c3507"}, @generic={0xc7, 0x21, "97ae3ed6c302a7ec171196aa5e21701ab305b83f0a2fb8b8bc45ed76ceb7b811d697d6227e0822961be63aeab8cb37fb4304c9a47474da615f27040c13c3faba3db08df5139394bec6c937c400d91e377471fabfb27152299729f607851e45cd58527f10518b5dcc1d23f33fa55f9ecb0955f87c88735a71f13edf1650bfca7f16111262a41709878a05ef24d8cc77dbc1295e6751304717a7bb2c804221aefe2cbc9adcdcbdbf02a329d52e6277fa4dcb15359fdd7d2e397b45223f4d8cb39f84c41e15f0"}]}}, {{0x9, 0x5, 0xb, 0xe, 0x10, 0x3, 0x3f, 0x4, [@generic={0xa7, 0x665798bd588d6e58, "8fe7d6689b8b83ff080bcba1f5984219e7f6a30025b0f5a9181cbc26f01bfcfddc17597c5502c0150a58a92e70f527ef320822dea51bbf84bfb45d53d1f6f79e0fea00228ec202f10de6679c33743ed38b27d426e2a5a60878b88fabbf6a964669efc90bd98da16a2c9b7bca6aca02461c1f739c1617a18e4f92a5b894f6830ca8aa171653e30bcd6050f6708b95c35af8ce7293cd2276540080151319d2de6b85ee413ef5"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0xd1, 0x97, 0x10, 0x94, 0xe4, 0xcb, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0xa}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x200, 0x4, 0x2, 0x400, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x3, 0x3}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0xfffa, 0x10, "65a8"}]}], [{{0x9, 0x5, 0x5, 0x8, 0x40, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}, @generic={0x38, 0x22, "d3108ff97a02d4d2b4bf6da89a5e13e68ac16977b31b0d71421bbbc84056398060a0a812b63f1021aed438192195afc69ada837ef956"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xe3, 0x1, 0x9, [@generic={0x4d, 0x2, "73709cdc84a0d3ed4dc0db396e54c287eb105b6bf2bddf61f1d31359b291c49dd32193be1400c44bb44ae990f23c7c2bac4c87c0873be5396b0dad20da250781404ba941feae38b8b9b1d1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x65, 0x82e9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0xfc, 0x1, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xe05d}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xa}, @generic={0xe1, 0x8, "88eb4f312513d06a4e6ef8eb30036c49522acc93f32c7b3488109121458af5d352f18d23feb08e8d2f9dcd98a523b4830d8221a17d9ac5528c6eef581313443344f880808b35ec50958eab3024da3379dbd284bdf0837aa4773c382b3c20435d2f5bb2dbf5223a68cce79c5ca6202e44532036b7831a817f58a6f0723d3a3adf4f4269b090e26bf7dcfb224be82e621bb835602334de25fffe5f2f8de1cf5b0087a0271397f0cdcd7aaa58a6c9920c7f1e5d8f30bf60e565225b1997da029ced91a98036d3b73d5dde771a9bd90d7d2e327f88dbab682c45f44bfadcf11643"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x3, 0x4, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x10}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0xa, 0xf4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x2, 0x4f, 0x7, [@generic={0xad, 0xe, "9641b64a0ccaa7a6de6879d7a7ecbc1bb0db936fce78f765110f59cb214ac1304cd49bf9daa55c8ea1ef0e686ca68ddec1c907ee826d3b8b92b2a91ba1d3bf3b07fa3eca5b5bdb397da988b8184911c637e0039409eac86d987c12197e7cbe6707b6ea0688a08e422000f4f3ec93b79af9a32f664b72a21817d2ab547d727e24457b763a5dac7cb632ccc96d5302c10d02f072804db7538c962449e121d1d6d8243201322d4059fef4f165"}]}}, {{0x9, 0x5, 0x3, 0x1a, 0x400, 0x0, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x6}]}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0xfb, 0x7, 0x1, [@generic={0xb5, 0x2, "b6f73c6c13a9fb811f35f78260516051f39bdc4d488507418e1e5fa78676effde0c55a888c6a0e8dd4d231e1ffbf719deebbe439a21c59db0d9f8b4963ef5a3dc6d21579cbd4a047ab2d7e6c4127c9e710c76bf7aba0fa4dd8bfeea7defe9e796e5bbcca599bbc7fa036b857336026ac58083a72ec432e7f0e6cb6effcac0e14eada94aae764466080f03f81794e2bb6e49881e21f26d33715e807dd2386d53ce862ae5fd2813a7e95314cdc5a53caa818b0b9"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0xf9, 0x80, 0x0, [@generic={0xee, 0x21, "f44d4d2251bb012cc9ef6a78d5788fd74fddd4598a8ae0fcb7ea8babc3d7ca5014b807275b493df75ed04140c1a46b99559c3a96b996b3f97d336b8828343e3ac1056565126606bd240d8860e939474c1ee55075e5df718b72cda3e7a6426e10b3cc44f931862ccc72e6a36142a6ae55d6f0a4e0419470b902e4a43a8f5072c05c635b0812dc10a0c04d21d7c5c3ccebbb7d24948aa1b8a3fb080f4aca33c5414a5d6100c046b6ce6238ebbbe48e8d17eebb1666f5b95707e94e67831d62ffad5827b8d143168239f4247c1594fb9da2929e1d9ef1e3ac27637e0863a353bf15f2188fd57b43a6c66dc02f83"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8, 0x8, 0x5, [@generic={0x40, 0x23, "cf11c53ecd72802384e84185c7e45bdea381afdbd220e58d45edf18531905dffdb9249d542ea77ac4602a66c88e1d39375042b4d07a2e2cb4ac2b98c8e72"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0x3, 0xa0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x3}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x6, 0x7f, 0xe, [@generic={0xf7, 0x22, "ca0e79daddcc1a0090b683c06398d7354152161d8f43007fb853bc1d1c245d01e768248d4660cae41495cebc64e04ef103465985a524126adf6a49bc8f74c034f6ea7a528dc57cef812696bf3bd3bc3e103eb529d0e609db6a521e75fba270a905746beedc9e9a0cab7056e30b6d491ac80676b40836edac643b767e337923b1a348db27d54fa4aa59242ae876442e5fdeff440d1efd3fe10f950936eb13d5e9df93b2f82b4d756cd2c3360275f5268677bfddd0f25b19a5dce7b96cd06080056722bb85f12c9063ec06c80f9527a646f0baafdc62658e3a8bcdf7bb2f90dca0dbb52d7103737f80cb07c4e1057d6b62927c6b0e1c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0xe, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x4f}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x9, 0x1, 0x2, [@generic={0x2, 0x30}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x38, 0x6, 0x7, [@generic={0x39, 0x21, "c8212d2f864b4c70e5595ff393c774c05435e7f8c5c63350d1bda3324b1997ee74d118d3e39a40e5a77c5639ba50ebca4760b961978bea"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}]}}, {{0x9, 0x4, 0x66, 0x5, 0x1, 0xea, 0x70, 0xd8, 0x3, [@generic={0xe5, 0xc, "ff87182e6c6feab1f817e8b0b98226388fa6b598f26f8edf830ef0e74e8c0ffd75576b954873f9aadcd41b592c8247c67ec14a712c123a9ff1cecda951c299bb86512c7d957cbab0d1379059947121eceff5267658f2da2b44a4fd10ff5eec0c119b85442b7db592f20493f71b3d849ffae1d9b4a0029c988c456c0018f7eb173c923ee13c48d596772b5a2910e51266eaa72e8ee11866e58175e21fb56c87e251229fb51ad39021a6d35399b62bda2e15ef6754fb6aabcf8774be42b6b476687cdf060857a72c2afae9baec75ab37c6f252dc2afaf03eb34e95ff329796422ebf4667"}], [{{0x9, 0x5, 0x6, 0x8, 0x200, 0x8, 0xf, 0x94, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}, @generic={0x46, 0x5, "645e1c8c455d3b049bdc1e692f6cb076690a8d2b73c96a46b8eb9ab096b530cd01acbc188810d614e8f0b81ccce97c54345be3dc909177b5e1091d7132e721d4aa10d960"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x7, 0x9, 0x7, 0x10}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "104cc76906f99b38d6bfafeffdd65a53"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3826}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}]}}) syz_usb_ep_read(r3, 0x4, 0x1b, &(0x7f0000000340)=""/27) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xfffffffffffffd39, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r10 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) r11 = socket$packet(0x11, 0x2, 0x300) r12 = getpgrp(0xffffffffffffffff) fcntl$lock(r7, 0x5, &(0x7f0000000380)={0x0, 0x4, 0x4, 0x2, r12}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r11, 0x0, 0x0, 0x4000002, &(0x7f0000000200)={0x11, 0x8137, r14, 0x1, 0x1, 0x6, @link_local}, 0x14) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) 1.184474002s ago: executing program 3 (id=831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 1.122039977s ago: executing program 3 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0xfffffd2f) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000100)={0x30, r3, 0x0, 0x0, 0x3, 0x861, 0x8, &(0x7f0000000300)=""/209}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xd) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.013460978s ago: executing program 3 (id=833): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000004100), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000004140)={0x14, r2, 0x601, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x800) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000180)="2d6360accc", 0x5}], 0x2, 0x0, 0xfffffffffffffff5}, 0x41) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r5 = eventfd(0x80000) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r6 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r6, 0x10}], 0x1, 0x8000db3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)) shutdown(r7, 0x0) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0x40101) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x2000200b}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000080015"], 0x3e0}}, 0x20010000) 993.110242ms ago: executing program 4 (id=834): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000a00204f045db60011000000010902240001ba2000000904001005030001000921000036012205000905810300002cfd0700"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022050000008bf507ba16"], 0x0}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10021, 0x0) 372.146746ms ago: executing program 2 (id=835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000f9b000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x63, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x901}], 0x1, 0x4023, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x40, 0x77}, {@rand_addr=0x64010102, 0x4e24, 0x2, 0x80000000, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}}, 0x90) 261.364884ms ago: executing program 2 (id=836): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 204.885611ms ago: executing program 2 (id=837): r0 = fsopen(&(0x7f0000000180)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "846c658589f7c96e", "d80ac912324edf4dad82cb163c081be8", "2b8b559e", "e1063bb8a17f71e0"}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000050000a43ed2923bf90000000000000a72000000060a09140000000000000000020000070900020073797a32000000000900010073797a300000000028090480240001800b000100657874686472000014000280080006400000000108000540000000011400000011000100000000000000"], 0x7c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r4, 0x0, 0x0, 0x2000080, &(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_int(r5, 0x101, 0xa45ac6ceb54dcf80, &(0x7f0000000040)=0x371, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x303}, "ed900430adffd7b1", "397ed6a5377490fa08000000000000000000000000000000000000000400", "02009ca4", "0c3c2a96b8c0f608"}, 0x38) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 132.198266ms ago: executing program 3 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x14, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006300)={0x14, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2b, 0x28}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x840) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x8000, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="7365537572697401000080657300"]) 25.380086ms ago: executing program 2 (id=839): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xe, 0x101201) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f00000000c0)=@usbdevfs_driver={0x2, 0x9, 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100"}) 17.677113ms ago: executing program 2 (id=840): pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="6a3873ce130bc99a582b1f3a24c2147bc97092578ee1fc175b2509c494faa9f5baba491455c6c68514efe034", 0x2c}], 0x1, 0xc6bb, 0xff) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be12020506050e0204094300090007000c", 0x23, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000580)=[@wr_drn={0x6e, 0x20, {0x5, 0x6}}, @wr_drn={0x6e, 0x20, {0x5, 0x401}}, @code={0xa, 0x58, {"440f070fc7280fc7792d66baf80cb8d6c24082ef66bafc0c66ed8f49d091c9b96b080000b87a000000ba000000000f306766410f2a3a0f01c3440f30672e660f3881937f960000"}}, @in_dx={0x82, 0x20, {0xc47a, 0x8}}, @code={0xa, 0x4e, {"c42105647e00b9ff0a00000f320f01c4430fc730c4c1f877420fe7aaef000000b9800000c00f3235000100000f3066ba2000b8ce000000ef268ce60f07"}}, @wr_crn={0x46, 0x20, {0xa, 0x7ff}}, @out_dx={0xaa, 0x28, {0xf47e, 0x1, 0x5}}, @in_dx={0x82, 0x20, {0x8494, 0x2}}, @rdmsr={0x32, 0x18, {0x88}}, @out_dx={0xaa, 0x28, {0x2691, 0x2, 0x80}}, @uexit={0x0, 0x18, 0x2}], 0x1c6}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={0x0, 0x20, 0x3}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000d00)={r2, 0x4, 0x10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r3], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c020002"], 0x0) sendto$inet(r7, &(0x7f0000001480)=';', 0x1, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/150, 0x96, 0x12040, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772aed408680070bb917980203011b02e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009ab17a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000193bb02010205240401050c24020cd2ca0bbb51c6953c320a92b044ee401fd22c3c80e415a81ea72e35ed4bc456a1ea223f4e1be70080cd00"], 0x0) 0s ago: executing program 3 (id=841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020000140", 0x38}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) kernel console output (not intermixed with test programs): a way that may be insecure [ 146.681235][ T7132] netlink: 'syz.0.319': attribute type 27 has an invalid length. [ 146.736181][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.743825][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.823851][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.837110][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.990539][ T1152] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.005871][ T1152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.021157][ T1152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.046289][ T1152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.307025][ T5912] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 147.456816][ T5919] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 147.464639][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 147.473115][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 147.484644][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 147.495634][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.507858][ T5912] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 147.517382][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.525369][ T5912] usb 2-1: Product: syz [ 147.529700][ T5912] usb 2-1: Manufacturer: syz [ 147.534316][ T5912] usb 2-1: SerialNumber: syz [ 147.541627][ T5912] usb 2-1: config 0 descriptor?? [ 147.547843][ T7136] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.557984][ T5912] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 147.619078][ T5919] usb 1-1: config index 0 descriptor too short (expected 45, got 38) [ 147.627407][ T5919] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 147.638225][ T5919] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.653623][ T5919] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 147.663007][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.671273][ T5919] usb 1-1: Product: syz [ 147.675463][ T5919] usb 1-1: Manufacturer: syz [ 147.680180][ T5919] usb 1-1: SerialNumber: syz [ 147.765112][ T5919] usb 2-1: USB disconnect, device number 47 [ 148.636842][ T5868] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 148.786828][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 148.794078][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.802354][ T5868] usb 2-1: config 0 has no interface number 0 [ 148.810966][ T5868] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 148.820202][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.828274][ T5868] usb 2-1: Product: syz [ 148.832435][ T5868] usb 2-1: Manufacturer: syz [ 148.837105][ T5868] usb 2-1: SerialNumber: syz [ 148.843549][ T5868] usb 2-1: config 0 descriptor?? [ 148.851218][ T5868] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 148.860096][ T5868] usb 2-1: selecting invalid altsetting 1 [ 148.865828][ T5868] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 148.875464][ T5868] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.886917][ T5868] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 148.895212][ T5868] usb 2-1: media controller created [ 148.912236][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.050429][ T7145] netlink: 'syz.1.324': attribute type 5 has an invalid length. [ 149.058434][ T7145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 149.070262][ T7145] fuse: Bad value for 'fd' [ 149.079414][ T7145] qnx6: unable to read the first superblock [ 149.085899][ T7145] qnx6: unable to read the first superblock [ 149.093367][ T7145] qnx6: unable to read the first superblock [ 149.104420][ T5868] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 149.126190][ T5868] zl10353_read_register: readreg error (reg=127, ret==-71) [ 149.134604][ T5868] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 149.168443][ T5868] usb 2-1: USB disconnect, device number 48 [ 149.292757][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 149.836439][ T7194] netlink: 596 bytes leftover after parsing attributes in process `syz.3.337'. [ 149.882143][ T30] audit: type=1326 audit(1759305798.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7195 comm="syz.3.338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840dd8eec9 code=0x0 [ 149.904021][ T5952] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 150.005411][ T7203] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 150.019072][ T7203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.082330][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.105478][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.117150][ T5952] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 150.126250][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.138331][ T5952] usb 2-1: config 0 descriptor?? [ 150.144552][ T7182] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.235492][ T5919] usb 1-1: USB disconnect, device number 37 [ 150.727024][ T5919] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 150.774449][ T5952] usbhid 2-1:0.0: can't add hid device: -71 [ 150.781766][ T5952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 150.792165][ T5952] usb 2-1: USB disconnect, device number 49 [ 150.878626][ T5919] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.887837][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.897649][ T5919] usb 1-1: config 0 descriptor?? [ 151.308438][ T5919] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.323618][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 151.371803][ T5919] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 151.379744][ T5919] [drm] Initialized udl on minor 2 [ 151.388806][ T5919] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.417919][ T5919] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 151.430832][ T5912] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.449112][ T5919] usb 1-1: USB disconnect, device number 38 [ 151.451613][ T7232] netlink: 104 bytes leftover after parsing attributes in process `syz.2.350'. [ 151.467643][ T5912] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 151.714648][ T30] audit: type=1326 audit(1759305799.833:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.737750][ T30] audit: type=1326 audit(1759305799.833:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.761310][ T30] audit: type=1326 audit(1759305799.833:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.783900][ T30] audit: type=1326 audit(1759305799.833:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.806551][ T30] audit: type=1326 audit(1759305799.833:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.829359][ T30] audit: type=1326 audit(1759305799.833:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.851909][ T5912] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 151.859532][ T30] audit: type=1326 audit(1759305799.833:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.859577][ T30] audit: type=1326 audit(1759305799.833:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 151.905420][ T30] audit: type=1326 audit(1759305799.833:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7240 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4429b8eec9 code=0x7fc00000 [ 152.053533][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 152.063420][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.071552][ T5912] usb 2-1: Product: syz [ 152.075984][ T5912] usb 2-1: Manufacturer: syz [ 152.080728][ T5912] usb 2-1: SerialNumber: syz [ 152.149159][ T7256] warning: `syz.2.357' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.256888][ T5868] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 152.406816][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 152.414446][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 152.426120][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.444007][ T5868] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.453176][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.461345][ T5868] usb 1-1: Product: syz [ 152.465942][ T5868] usb 1-1: Manufacturer: syz [ 152.471333][ T5868] usb 1-1: SerialNumber: syz [ 152.479606][ T5868] usb 1-1: config 0 descriptor?? [ 152.489023][ T5868] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.498474][ T5868] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 153.093726][ T5868] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 153.107577][ T5868] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 153.191094][ T7270] 9pnet_fd: Insufficient options for proto=fd [ 153.251722][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.261418][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.519342][ T5912] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 153.723886][ T5868] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 153.733340][ T5868] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 153.740454][ T5868] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 153.933321][ T5912] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 153.945803][ T5912] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 153.959686][ T5912] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 153.969539][ T5912] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.980672][ T5912] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 153.997702][ T5912] usb 2-1: USB disconnect, device number 50 [ 154.362803][ T5868] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 154.371316][ T5868] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 154.381766][ T5868] usb 1-1: USB disconnect, device number 39 [ 154.878311][ T7303] netlink: 'syz.2.374': attribute type 44 has an invalid length. [ 155.271425][ T7328] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 155.696836][ T5912] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 155.849903][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.861532][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.871805][ T5912] usb 2-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 155.880972][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.895919][ T5912] usb 2-1: config 0 descriptor?? [ 156.233806][ T7347] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.388'. [ 156.311594][ T5912] betop 0003:8380:1850.0007: item fetching failed at offset 0/2 [ 156.324694][ T5912] betop 0003:8380:1850.0007: parse failed [ 156.332217][ T5912] betop 0003:8380:1850.0007: probe with driver betop failed with error -22 [ 156.378778][ T7334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.385170][ T7334] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 156.394965][ T7334] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 156.407157][ T7334] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.414030][ T7334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 156.424672][ T7334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 156.433806][ T7334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.460960][ T7334] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.471493][ T7334] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.481848][ T7334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.489288][ T7334] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 156.498862][ T7334] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 156.508070][ T7332] netlink: 10 bytes leftover after parsing attributes in process `syz.1.381'. [ 156.535350][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.554608][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.609648][ T5868] usb 2-1: USB disconnect, device number 51 [ 156.673635][ T7365] tmpfs: Bad value for 'mpol' [ 156.818778][ T5952] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 156.958166][ T7377] hub 9-0:1.0: USB hub found [ 156.963322][ T7377] hub 9-0:1.0: 1 port detected [ 156.986999][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 156.993982][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.011780][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.026051][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.037984][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.051687][ T5952] usb 1-1: Product: syz [ 157.055901][ T5952] usb 1-1: Manufacturer: syz [ 157.062922][ T5952] usb 1-1: SerialNumber: syz [ 157.070089][ T7384] futex_wake_op: syz.3.397 tries to shift op by -1; fix this program [ 157.082040][ T5952] usb 1-1: config 0 descriptor?? [ 157.094832][ T5952] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.129584][ T5952] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 157.376822][ T5868] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 157.541032][ T5868] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 157.550224][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.558414][ T5868] usb 2-1: Product: syz [ 157.562594][ T5868] usb 2-1: Manufacturer: syz [ 157.567244][ T5868] usb 2-1: SerialNumber: syz [ 157.574436][ T5868] usb 2-1: config 0 descriptor?? [ 157.582751][ T5868] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 157.595441][ T5868] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 157.609307][ T5868] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 157.646886][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.696600][ T5952] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 157.703704][ T5952] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 157.792643][ T5919] IPVS: starting estimator thread 0... [ 157.822365][ T5868] usb 2-1: USB disconnect, device number 52 [ 157.887016][ T7394] IPVS: using max 36 ests per chain, 86400 per kthread [ 158.313889][ T5952] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 158.321590][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 158.328731][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 158.436818][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.436915][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.517416][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.666804][ T5919] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 158.938033][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 158.945095][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 158.955496][ T5952] usb 1-1: USB disconnect, device number 40 [ 159.487227][ T7403] ======================================================= [ 159.487227][ T7403] WARNING: The mand mount option has been deprecated and [ 159.487227][ T7403] and is ignored by this kernel. Remove the mand [ 159.487227][ T7403] option from the mount to silence this warning. [ 159.487227][ T7403] ======================================================= [ 159.522078][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.716852][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.836789][ T5932] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 160.007234][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 160.015313][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 160.024492][ T5932] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.034228][ T5932] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 160.046743][ T5932] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 160.056618][ T5932] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 160.066734][ T5932] usb 1-1: config 1 interface 0 has no altsetting 0 [ 160.073403][ T5932] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 160.082477][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.095827][ T5932] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 160.349103][ T5932] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 160.377877][ T5932] usb 1-1: USB disconnect, device number 41 [ 160.517052][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.518279][ T5186] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.598092][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.849366][ T7443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 161.237018][ T5912] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 161.386831][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 161.395148][ T5912] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 161.404502][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.412592][ T5912] usb 1-1: Product: syz [ 161.416847][ T5912] usb 1-1: Manufacturer: syz [ 161.421659][ T5912] usb 1-1: SerialNumber: syz [ 161.428686][ T5912] usb 1-1: config 0 descriptor?? [ 161.436618][ T5912] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 161.445529][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 161.454256][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.464187][ T5912] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 161.473257][ T5912] usb 1-1: media controller created [ 161.492565][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.636286][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 161.671817][ T5912] DVB: Unable to find symbol mt352_attach() [ 161.678808][ T5912] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 161.746902][ T5912] rc_core: IR keymap rc-dvico-portable not found [ 161.753434][ T5912] Registered IR keymap rc-empty [ 161.759862][ T5912] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 161.772342][ T5912] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input17 [ 161.785756][ T5912] dvb-usb: schedule remote query interval to 100 msecs. [ 161.792891][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 161.806916][ T5186] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.850010][ T5932] usb 1-1: USB disconnect, device number 42 [ 161.901192][ T7453] netlink: 188 bytes leftover after parsing attributes in process `syz.2.419'. [ 161.935945][ T5932] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 161.976647][ T7455] netlink: 'syz.2.420': attribute type 142 has an invalid length. [ 162.590192][ T5952] IPVS: starting estimator thread 0... [ 162.597010][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.597128][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.676879][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.677875][ T7467] IPVS: using max 29 ests per chain, 69600 per kthread [ 162.836887][ T5868] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 162.996888][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 163.003737][ T5868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 163.014949][ T5868] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 163.029482][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.036131][ T5868] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 163.045236][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.056144][ T5868] usb 1-1: config 0 descriptor?? [ 163.397775][ T7478] netlink: 'syz.2.430': attribute type 6 has an invalid length. [ 163.476026][ T5868] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x2 [ 163.504551][ T5868] gt683r_led 0003:1770:FF00.0008: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 163.673017][ T5952] usb 1-1: USB disconnect, device number 43 [ 163.688509][ T5973] gt683r_led 0003:1770:FF00.0008: failed to send set report request: -19 [ 163.814508][ T7492] GUP no longer grows the stack in syz.3.434 (7492): 200000004000-20000000a000 (200000002000) [ 163.825444][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.3.434 Not tainted syzkaller #0 PREEMPT(full) [ 163.825471][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.825490][ T7492] Call Trace: [ 163.825498][ T7492] [ 163.825506][ T7492] dump_stack_lvl+0x189/0x250 [ 163.825544][ T7492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.825575][ T7492] ? __pfx__printk+0x10/0x10 [ 163.825599][ T7492] ? find_vma+0xe7/0x160 [ 163.825640][ T7492] __get_user_pages+0x2470/0x2a00 [ 163.825709][ T7492] get_user_pages_remote+0x2f1/0xac0 [ 163.825735][ T7492] ? __pfx_mtree_load+0x10/0x10 [ 163.825764][ T7492] ? __pfx_get_user_pages_remote+0x10/0x10 [ 163.825793][ T7492] ? __access_remote_vm+0x367/0x7d0 [ 163.825827][ T7492] __access_remote_vm+0x211/0x7d0 [ 163.825865][ T7492] ? __pfx___access_remote_vm+0x10/0x10 [ 163.825897][ T7492] ? alloc_pages_noprof+0xbe/0x190 [ 163.825923][ T7492] proc_pid_cmdline_read+0x430/0x810 [ 163.825961][ T7492] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 163.825993][ T7492] ? rw_verify_area+0x2a6/0x4d0 [ 163.826017][ T7492] vfs_readv+0x5aa/0x850 [ 163.826042][ T7492] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 163.826073][ T7492] ? __pfx_vfs_readv+0x10/0x10 [ 163.826114][ T7492] ? __fget_files+0x2a/0x420 [ 163.826142][ T7492] ? __fget_files+0x3a0/0x420 [ 163.826165][ T7492] ? __fget_files+0x2a/0x420 [ 163.826197][ T7492] __x64_sys_preadv+0x197/0x2a0 [ 163.826220][ T7492] ? __pfx___se_sys_futex+0x10/0x10 [ 163.826239][ T7492] ? __pfx___x64_sys_preadv+0x10/0x10 [ 163.826266][ T7492] ? do_syscall_64+0xbe/0xfa0 [ 163.826294][ T7492] do_syscall_64+0xfa/0xfa0 [ 163.826315][ T7492] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.826338][ T7492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.826356][ T7492] ? clear_bhb_loop+0x60/0xb0 [ 163.826380][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.826399][ T7492] RIP: 0033:0x7f840dd8eec9 [ 163.826421][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.826438][ T7492] RSP: 002b:00007f840ecd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 163.826460][ T7492] RAX: ffffffffffffffda RBX: 00007f840dfe5fa0 RCX: 00007f840dd8eec9 [ 163.826476][ T7492] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.826489][ T7492] RBP: 00007f840de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 163.826501][ T7492] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 163.826513][ T7492] R13: 00007f840dfe6038 R14: 00007f840dfe5fa0 R15: 00007ffef4f89238 [ 163.826547][ T7492] [ 164.080759][ T5919] usb 2-1: device descriptor read/64, error -110 [ 164.103390][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 164.103408][ T30] audit: type=1400 audit(1759305812.223:83): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7491 comm="syz.3.434" [ 164.326825][ T5919] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 164.466940][ T5919] usb 2-1: device descriptor read/64, error -32 [ 164.580651][ T5919] usb usb2-port1: attempt power cycle [ 164.697814][ T7510] netlink: 'syz.2.439': attribute type 3 has an invalid length. [ 164.719787][ T7510] 9pnet_fd: Insufficient options for proto=fd [ 164.946834][ T5919] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 164.967317][ T5919] usb 2-1: device descriptor read/8, error -32 [ 164.988519][ T7527] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 164.988519][ T7527] The task syz.2.443 (7527) triggered the difference, watch for misbehavior. [ 165.012709][ T7527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.020706][ T7527] overlayfs: failed to set xattr on upper [ 165.026530][ T7527] overlayfs: ...falling back to redirect_dir=nofollow. [ 165.033753][ T7527] overlayfs: ...falling back to index=off. [ 165.050833][ T7527] overlayfs: ...falling back to uuid=null. [ 165.064770][ T7527] overlayfs: failed to clone lowerpath [ 165.079433][ T5919] raw-gadget.0 gadget.1: failed to queue suspend event [ 165.087099][ T5919] raw-gadget.0 gadget.1: failed to queue reset event [ 165.198859][ T5919] raw-gadget.0 gadget.1: failed to queue resume event [ 165.266824][ T5919] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 165.289705][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 165.297454][ T5919] usb 2-1: device descriptor read/8, error -32 [ 165.408363][ T5919] raw-gadget.0 gadget.1: failed to queue suspend event [ 165.415509][ T5919] usb usb2-port1: unable to enumerate USB device [ 165.696817][ T5868] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 165.871090][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.880542][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.889624][ T5868] usb 1-1: Product: syz [ 165.893897][ T5868] usb 1-1: Manufacturer: syz [ 165.898619][ T5868] usb 1-1: SerialNumber: syz [ 166.917886][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 166.931460][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 166.943759][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 166.953986][ T5868] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 166.968191][ T5868] usb 1-1: USB disconnect, device number 44 [ 167.786814][ T5868] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 167.950182][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.961052][ T5868] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 167.970254][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.984086][ T5868] usb 1-1: config 0 descriptor?? [ 168.198358][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.214176][ T5868] wacom 0003:056A:00BA.0009: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 168.231702][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.234387][ T5868] wacom 0003:056A:00BA.0009: hidraw0: USB HID v0.00 Device [HID 056a:00ba] on usb-dummy_hcd.0-1/input0 [ 168.342184][ T5868] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BA.0009/input/input18 [ 168.432144][ T5868] usb 1-1: USB disconnect, device number 45 [ 169.001241][ T7555] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 169.009342][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 169.296866][ T5952] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 169.446778][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 169.455662][ T5952] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 169.464815][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.472891][ T5952] usb 1-1: Product: syz [ 169.477092][ T5952] usb 1-1: Manufacturer: syz [ 169.481690][ T5952] usb 1-1: SerialNumber: syz [ 169.489010][ T5952] usb 1-1: config 0 descriptor?? [ 169.902082][ T5952] airspy 1-1:0.0: Board ID: 00 [ 169.907292][ T5952] airspy 1-1:0.0: Firmware version: `U_I> [ 169.907292][ T5952] K l?{6|E¥kT0FN, UtQx=-apZ(Q85 KЫْnAOda [ 170.103487][ T5952] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 170.112671][ T5952] airspy 1-1:0.0: Registered as swradio24 [ 170.118582][ T5952] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 170.131334][ T5952] usb 1-1: USB disconnect, device number 46 [ 170.762583][ T7563] nfs: Bad value for 'source' [ 171.008978][ T7565] pimreg: entered allmulticast mode [ 171.015814][ T7565] pimreg: left allmulticast mode [ 171.572949][ T7570] loop7: detected capacity change from 0 to 7 [ 171.585887][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.595284][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.603800][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.612996][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.621096][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.630283][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.641051][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.650375][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.658922][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.668124][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.676448][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.685645][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.693993][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.703286][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.711403][ T7570] ldm_validate_partition_table(): Disk read failed. [ 171.723995][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.733251][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.741469][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.750660][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.758978][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.768187][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.783137][ T7570] Dev loop7: unable to read RDB block 0 [ 171.790638][ T7570] loop7: unable to read partition table [ 171.796586][ T7570] loop7: partition table beyond EOD, truncated [ 171.803115][ T7570] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 171.843086][ T5236] ldm_validate_partition_table(): Disk read failed. [ 171.852175][ T5236] Dev loop7: unable to read RDB block 0 [ 171.858653][ T5236] loop7: unable to read partition table [ 171.864453][ T5236] loop7: partition table beyond EOD, truncated [ 171.957858][ T7580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.306868][ T5952] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 172.466844][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 172.473774][ T5952] usb 1-1: config 15 has an invalid interface number: 112 but max is 0 [ 172.482328][ T5952] usb 1-1: config 15 has no interface number 0 [ 172.491436][ T5952] usb 1-1: New USB device found, idVendor=19d2, idProduct=1136, bcdDevice=25.87 [ 172.500837][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.509000][ T5952] usb 1-1: Product: syz [ 172.513259][ T5952] usb 1-1: Manufacturer: syz [ 172.517911][ T5952] usb 1-1: SerialNumber: syz [ 173.328779][ T7603] tipc: Started in network mode [ 173.333697][ T7603] tipc: Node identity 7f000001, cluster identity 4711 [ 173.341770][ T7603] tipc: Enabled bearer , priority 10 [ 173.354256][ T7603] tipc: Enabling of bearer rejected, failed to enable media [ 173.363568][ T7604] tipc: Enabling of bearer rejected, failed to enable media [ 173.536295][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 173.764539][ T5186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.775044][ T5186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.783234][ T5186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.793030][ T5186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.802338][ T5186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.003469][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 174.096428][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.103738][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.111595][ T7621] bridge_slave_0: entered allmulticast mode [ 174.119914][ T7621] bridge_slave_0: entered promiscuous mode [ 174.128580][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.135843][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.144256][ T7621] bridge_slave_1: entered allmulticast mode [ 174.152099][ T7621] bridge_slave_1: entered promiscuous mode [ 174.189609][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.204189][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.254511][ T7621] team0: Port device team_slave_0 added [ 174.262926][ T7621] team0: Port device team_slave_1 added [ 174.298720][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.305732][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.332116][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.344821][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.351862][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.377760][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.383912][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.440833][ T7621] hsr_slave_0: entered promiscuous mode [ 174.448552][ T7621] hsr_slave_1: entered promiscuous mode [ 174.454922][ T7621] debugfs: 'hsr0' already exists in 'hsr' [ 174.461243][ T7621] Cannot create hsr debugfs directory [ 174.468398][ T5912] tipc: Node number set to 2130706433 [ 174.658127][ T7621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.670504][ T7621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.682333][ T7621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.694104][ T7621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.728376][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.735687][ T7621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.743517][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.750885][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.819152][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.838410][ T1009] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.847884][ T1009] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.866384][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.885518][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.892805][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.910326][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.917540][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.953293][ T5952] usb 1-1: bad CDC descriptors [ 174.988573][ T5952] usb 1-1: USB disconnect, device number 47 [ 175.329433][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.670596][ T7660] tmpfs: Group quota inode hardlimit too large. [ 175.824308][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 175.839663][ T7662] hfsplus: unable to find HFS+ superblock [ 175.842299][ T7621] veth0_vlan: entered promiscuous mode [ 175.876962][ T5186] Bluetooth: hci4: command tx timeout [ 175.884997][ T7621] veth1_vlan: entered promiscuous mode [ 175.976616][ T7621] veth0_macvtap: entered promiscuous mode [ 175.994333][ T7621] veth1_macvtap: entered promiscuous mode [ 176.043291][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.113984][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.153069][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.165127][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.189175][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.191181][ T7675] netlink: 'syz.3.484': attribute type 83 has an invalid length. [ 176.212583][ T2962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.309499][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.318452][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.364074][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.374270][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.397422][ T5973] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 176.453038][ T7689] binder: 7688:7689 ioctl c0306201 200000000540 returned -14 [ 176.528636][ T5973] usb 1-1: device descriptor read/64, error -71 [ 176.819917][ T5973] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 176.957108][ T5973] usb 1-1: device descriptor read/64, error -71 [ 176.976997][ T5932] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 177.067193][ T5973] usb usb1-port1: attempt power cycle [ 177.128713][ T5932] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 177.138069][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.151145][ T5932] usb 5-1: config 0 descriptor?? [ 177.417242][ T5973] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 177.437427][ T5973] usb 1-1: device descriptor read/8, error -71 [ 177.677455][ T5973] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 177.697492][ T5973] usb 1-1: device descriptor read/8, error -71 [ 177.807191][ T5973] usb usb1-port1: unable to enumerate USB device [ 177.967445][ T5186] Bluetooth: hci4: command tx timeout [ 178.776177][ T5932] usb 5-1: Cannot set autoneg [ 178.781968][ T5932] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 178.810734][ T5932] usb 5-1: USB disconnect, device number 2 [ 178.998299][ T5949] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 179.013598][ T5949] dvb_usb_az6027 4-1:0.244: probe with driver dvb_usb_az6027 failed with error -110 [ 179.026219][ T5949] usb 4-1: USB disconnect, device number 23 [ 179.326971][ T5949] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 179.456787][ T5949] usb 4-1: device descriptor read/64, error -71 [ 179.490651][ T7741] ieee802154 phy0 wpan0: encryption failed: -90 [ 179.536779][ T5912] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 179.542710][ T7751] netlink: 'syz.2.505': attribute type 2 has an invalid length. [ 179.554003][ T7751] netlink: 'syz.2.505': attribute type 6 has an invalid length. [ 179.696866][ T5949] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 179.721185][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.736752][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.935394][ T5912] usb 1-1: Product: syz [ 179.946820][ T5912] usb 1-1: Manufacturer: syz [ 179.953841][ T5912] usb 1-1: SerialNumber: syz [ 179.986883][ T5949] usb 4-1: device descriptor read/64, error -71 [ 180.037311][ T5186] Bluetooth: hci4: command tx timeout [ 180.097106][ T5949] usb usb4-port1: attempt power cycle [ 180.437715][ T5949] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 180.458402][ T5949] usb 4-1: device descriptor read/8, error -71 [ 180.512807][ T7762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.533798][ T7762] tipc: Started in network mode [ 180.539239][ T7762] tipc: Node identity f2c0c648797c, cluster identity 4711 [ 180.546543][ T7762] tipc: Enabled bearer , priority 0 [ 180.555955][ T7762] tipc: Disabling bearer [ 180.706996][ T5949] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 180.737191][ T5949] usb 4-1: device descriptor read/8, error -71 [ 180.858677][ T5949] usb usb4-port1: unable to enumerate USB device [ 180.945905][ T7772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 181.184255][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.197415][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.281696][ T7796] IPVS: length: 4096 != 24 [ 181.287492][ T5949] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 181.416052][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 181.420697][ T7803] netlink: 'syz.2.521': attribute type 33 has an invalid length. [ 181.435705][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.521'. [ 181.477075][ T5932] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 181.487291][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.499841][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.512036][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.523937][ T5949] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 181.533493][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.545335][ T5949] usb 4-1: config 0 descriptor?? [ 181.648751][ T5932] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 181.662155][ T5932] usb 5-1: config 0 has no interface number 0 [ 181.670467][ T5932] usb 5-1: config 0 interface 54 has no altsetting 0 [ 181.680333][ T5932] usb 5-1: New USB device found, idVendor=1608, idProduct=030a, bcdDevice=4e.0a [ 181.691291][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.699408][ T5932] usb 5-1: Product: syz [ 181.703806][ T5932] usb 5-1: Manufacturer: syz [ 181.713071][ T5932] usb 5-1: SerialNumber: syz [ 181.723848][ T5932] usb 5-1: config 0 descriptor?? [ 181.736015][ T5932] io_ti 5-1:0.54: required endpoints missing [ 181.830938][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 181.847961][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 181.860318][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 181.871153][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.882707][ T5912] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 181.901635][ T5912] usb 1-1: USB disconnect, device number 52 [ 182.116983][ T5186] Bluetooth: hci4: command tx timeout [ 182.220532][ T7813] netlink: 5 bytes leftover after parsing attributes in process `syz.2.523'. [ 183.862875][ T5932] usb 4-1: USB disconnect, device number 28 [ 184.041813][ T7831] mmap: syz.3.530 (7831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.250432][ T5868] usb 5-1: USB disconnect, device number 3 [ 184.366900][ T5932] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 184.520267][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 184.530130][ T5932] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.542723][ T5932] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.551870][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.559953][ T5932] usb 4-1: Product: syz [ 184.564119][ T5932] usb 4-1: Manufacturer: syz [ 184.569029][ T5932] usb 4-1: SerialNumber: syz [ 184.575679][ T5932] usb 4-1: config 0 descriptor?? [ 184.581431][ T7836] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.589352][ T7836] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.596955][ T5868] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 184.761741][ T5868] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 184.771197][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.779370][ T5868] usb 5-1: Product: syz [ 184.783661][ T5868] usb 5-1: Manufacturer: syz [ 184.788546][ T5868] usb 5-1: SerialNumber: syz [ 184.811185][ T7836] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.819465][ T7836] program syz.3.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.831915][ T7836] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.839528][ T7836] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.050315][ T5932] Error reading MAC address [ 185.062497][ T5932] usb 4-1: USB disconnect, device number 29 [ 185.306353][ T7842] netlink: 'syz.2.534': attribute type 10 has an invalid length. [ 185.333206][ T7842] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.343340][ T7842] netlink: 'syz.2.534': attribute type 4 has an invalid length. [ 185.351727][ T7842] netlink: 152 bytes leftover after parsing attributes in process `syz.2.534'. [ 185.363818][ T7842] wlan1: mtu less than device minimum [ 185.416561][ T7845] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 185.427014][ T7845] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.535'. [ 185.660441][ T7851] overlay: Unknown parameter 'pcr' [ 185.672821][ T7851] overlayfs: overlapping lowerdir path [ 186.227270][ T5868] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 186.586846][ T5949] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 186.616794][ T5871] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 186.643588][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.652574][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.661849][ T5868] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 186.674868][ T5868] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 186.687724][ T5868] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 186.699193][ T5868] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 186.711363][ T5868] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 186.723860][ T5868] usb 5-1: USB disconnect, device number 4 [ 186.736862][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 186.745259][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.756507][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.767711][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.772175][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 186.777190][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.780637][ T5949] usb 4-1: config 0 descriptor?? [ 186.798969][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 186.813091][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.816159][ T5949] hub 4-1:0.0: USB hub found [ 186.833625][ T5871] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 186.843427][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.851888][ T5871] usb 1-1: Product: syz [ 186.856062][ T5871] usb 1-1: Manufacturer: syz [ 186.860714][ T5871] usb 1-1: SerialNumber: syz [ 186.867962][ T5871] usb 1-1: config 0 descriptor?? [ 186.876111][ T5871] port100 1-1:0.0: NFC: Could not get supported command types [ 187.036283][ T5949] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 187.058564][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 187.064593][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 187.269845][ T5949] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 187.280362][ T5949] usb 4-1: device reset changed ep0 maxpacket size! [ 187.291108][ T5949] usb 4-1: USB disconnect, device number 30 [ 187.379834][ T7881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.547'. [ 187.626848][ T5949] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 187.776794][ T5949] usb 4-1: Using ep0 maxpacket: 8 [ 187.783375][ T5949] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 187.791722][ T5949] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.801569][ T5949] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.811486][ T5949] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.821587][ T5949] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.834659][ T5949] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.843859][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.073457][ T5949] usb 4-1: usb_control_msg returned -32 [ 188.079293][ T5949] usbtmc 4-1:16.0: can't read capabilities [ 188.114327][ T7893] netlink: 64 bytes leftover after parsing attributes in process `syz.4.551'. [ 188.196197][ T7897] netlink: 57 bytes leftover after parsing attributes in process `syz.4.553'. [ 188.486865][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.639184][ T5871] usb 5-1: config 0 has an invalid interface number: 27 but max is 2 [ 188.647419][ T5871] usb 5-1: config 0 has an invalid interface number: 203 but max is 2 [ 188.655701][ T5871] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.665843][ T5871] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 188.674846][ T5871] usb 5-1: config 0 has no interface number 0 [ 188.681794][ T5871] usb 5-1: config 0 has no interface number 1 [ 188.688166][ T5871] usb 5-1: config 0 interface 203 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 188.701919][ T5871] usb 5-1: config 0 interface 27 has no altsetting 0 [ 188.709557][ T5871] usb 5-1: config 0 interface 203 has no altsetting 0 [ 188.716401][ T5871] usb 5-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice=1d.f5 [ 188.728636][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.740463][ T5871] usb 5-1: config 0 descriptor?? [ 188.783125][ T7904] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 0 [ 188.793074][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.802783][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.949510][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.958369][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.967763][ T5871] usb 5-1: string descriptor 0 read error: -71 [ 188.979307][ T5871] snd-usb-caiaq 5-1:0.27: can't set alt interface. [ 188.986002][ T5871] usb 5-1: unable to init card! (ret=-5) [ 188.992407][ T5871] snd-usb-caiaq 5-1:0.27: probe with driver snd-usb-caiaq failed with error -5 [ 189.005395][ T5871] snd-usb-caiaq 5-1:0.203: can't set alt interface. [ 189.012585][ T5871] usb 5-1: unable to init card! (ret=-5) [ 189.014026][ T5949] usb 4-1: USB disconnect, device number 31 [ 189.018861][ T5871] snd-usb-caiaq 5-1:0.203: probe with driver snd-usb-caiaq failed with error -5 [ 189.044185][ T5871] usb 5-1: USB disconnect, device number 5 [ 189.377372][ T5912] usb 1-1: USB disconnect, device number 53 [ 189.509598][ T7914] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 189.515580][ T7914] syzkaller1: linktype set to 776 [ 189.572083][ T7916] netlink: 763 bytes leftover after parsing attributes in process `syz.3.560'. [ 189.642235][ T7918] netlink: 'syz.3.562': attribute type 2 has an invalid length. [ 189.768642][ T5912] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 189.874134][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 189.885849][ T7932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.564'. [ 189.900967][ T5949] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 189.909240][ T5912] usb 1-1: device descriptor read/64, error -71 [ 190.068581][ T5949] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 190.084755][ T5949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.094935][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.103658][ T5949] usb 4-1: Product: syz [ 190.108084][ T5949] usb 4-1: Manufacturer: syz [ 190.112677][ T5949] usb 4-1: SerialNumber: syz [ 190.146825][ T5912] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 190.278154][ T5912] usb 1-1: device descriptor read/64, error -71 [ 190.324319][ T5949] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 190.326913][ T5868] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 190.333341][ T5949] cdc_ncm 4-1:1.0: bind() failure [ 190.351380][ T5949] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 190.358599][ T5949] cdc_ncm 4-1:1.1: bind() failure [ 190.368025][ T5949] usb 4-1: USB disconnect, device number 32 [ 190.397421][ T5912] usb usb1-port1: attempt power cycle [ 190.489298][ T5868] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 190.497973][ T5868] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 190.506075][ T5868] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 190.517833][ T5868] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 190.528864][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 190.539613][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 190.561977][ T5868] usb 5-1: string descriptor 0 read error: -22 [ 190.568728][ T5868] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 190.578994][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.589660][ T5868] usb 5-1: config 0 descriptor?? [ 190.595468][ T7936] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 190.604248][ T5868] hub 5-1:0.0: bad descriptor, ignoring hub [ 190.610330][ T5868] hub 5-1:0.0: probe with driver hub failed with error -5 [ 190.619983][ T5868] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 190.746910][ T5912] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 190.767373][ T5912] usb 1-1: device descriptor read/8, error -71 [ 190.817885][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 190.831550][ T7936] netlink: 52 bytes leftover after parsing attributes in process `syz.4.566'. [ 190.842880][ T5868] usb 5-1: USB disconnect, device number 6 [ 190.947315][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 191.017028][ T5912] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 191.037845][ T5912] usb 1-1: device descriptor read/8, error -71 [ 191.116168][ T7955] sctp: [Deprecated]: syz.2.572 (pid 7955) Use of int in max_burst socket option. [ 191.116168][ T7955] Use struct sctp_assoc_value instead [ 191.157363][ T5912] usb usb1-port1: unable to enumerate USB device [ 191.987371][ T7991] binder: 7990:7991 ioctl c0046209 0 returned -22 [ 192.457135][ T5912] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.618847][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.631046][ T5912] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.643337][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.673506][ T5912] usb 5-1: config 0 descriptor?? [ 192.700344][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 192.789484][ T5949] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 192.848667][ T8015] netlink: 'syz.2.590': attribute type 25 has an invalid length. [ 192.857524][ T8015] netlink: 'syz.2.590': attribute type 25 has an invalid length. [ 192.896801][ T5871] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 192.957827][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.969102][ T5949] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 192.969603][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'. [ 192.988270][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.008839][ T5949] usb 1-1: config 0 descriptor?? [ 193.027460][ T5949] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 193.039511][ T5949] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 193.061926][ T8022] netlink: 'syz.2.592': attribute type 12 has an invalid length. [ 193.079742][ T5871] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 193.088128][ T5871] usb 4-1: config 0 has no interface number 1 [ 193.094253][ T5871] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 193.104772][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.117062][ T5871] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 193.126608][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.142631][ T5871] usb 4-1: SerialNumber: syz [ 193.149843][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 193.157403][ T5871] usb 4-1: config 0 descriptor?? [ 193.166903][ T5871] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 193.174876][ T5871] uvcvideo 4-1:0.199: No valid video chain found. [ 193.220632][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.230272][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.241638][ T5949] usb 1-1: USB disconnect, device number 58 [ 193.381553][ T5871] usb 4-1: USB disconnect, device number 33 [ 193.418375][ T5912] pwc: recv_control_msg error -71 req 02 val 2c00 [ 193.431830][ T5912] pwc: recv_control_msg error -71 req 04 val 1000 [ 193.440184][ T5912] pwc: recv_control_msg error -71 req 04 val 1300 [ 193.450308][ T5912] pwc: recv_control_msg error -71 req 04 val 1400 [ 193.457570][ T5912] pwc: recv_control_msg error -71 req 02 val 2000 [ 193.464438][ T5912] pwc: recv_control_msg error -71 req 02 val 2100 [ 193.473242][ T5912] pwc: recv_control_msg error -71 req 04 val 1500 [ 193.481829][ T5912] pwc: recv_control_msg error -71 req 02 val 2500 [ 193.489021][ T5912] pwc: recv_control_msg error -71 req 02 val 2400 [ 193.495957][ T5912] pwc: recv_control_msg error -71 req 02 val 2600 [ 193.504060][ T5912] pwc: recv_control_msg error -71 req 02 val 2900 [ 193.511381][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 193.518821][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 193.525779][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 193.540305][ T5912] pwc: Registered as video103. [ 193.564775][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 193.608114][ T5912] usb 5-1: USB disconnect, device number 7 [ 193.956904][ T12] wlan1: Trigger new scan to find an IBSS to join [ 194.124786][ T8028] syzkaller1: entered promiscuous mode [ 194.130918][ T8028] syzkaller1: entered allmulticast mode [ 194.277366][ T5871] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 194.346823][ T5868] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 194.362164][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369809][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.451223][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.462595][ T5871] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.471886][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.487408][ T5871] usb 1-1: config 0 descriptor?? [ 194.508928][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.522422][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.532689][ T5868] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 194.542857][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.567174][ T5868] usb 5-1: config 0 descriptor?? [ 194.707580][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 194.713649][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.725792][ T5871] usb 1-1: USB disconnect, device number 59 [ 194.837970][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 194.991219][ T5868] bigben 0003:146B:0902.000A: unexpected rdesc, please submit for review [ 194.997876][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 195.007805][ T5868] bigben 0003:146B:0902.000A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 195.009726][ T5912] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 195.029926][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.030930][ T5868] bigben 0003:146B:0902.000A: missing HID_OUTPUT_REPORT 0 [ 195.038303][ T5912] usb 4-1: Product: syz [ 195.049917][ T5912] usb 4-1: Manufacturer: syz [ 195.054526][ T5912] usb 4-1: SerialNumber: syz [ 195.059619][ T5868] bigben 0003:146B:0902.000A: no output report found [ 195.067895][ T5912] usb 4-1: config 0 descriptor?? [ 195.077917][ T5912] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 195.157826][ T5949] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 195.231303][ T5912] usb 5-1: USB disconnect, device number 8 [ 195.287388][ T5868] usb 4-1: USB disconnect, device number 34 [ 195.306781][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 195.313264][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.325432][ T5949] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 195.335762][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.347274][ T5949] usb 1-1: config 0 descriptor?? [ 195.355273][ T5949] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 195.367399][ T5949] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 195.765582][ T5949] usb 1-1: USB disconnect, device number 60 [ 195.797238][ T5949] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 195.883404][ T8076] netlink: 'syz.4.610': attribute type 10 has an invalid length. [ 195.891633][ T8076] netlink: 152 bytes leftover after parsing attributes in process `syz.4.610'. [ 195.902077][ T8076] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 196.166794][ T5868] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 196.316947][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 196.324111][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 196.336415][ T5868] usb 4-1: string descriptor 0 read error: -22 [ 196.342762][ T5868] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 196.352085][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.538048][ T5871] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 196.707317][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 196.720315][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.732399][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.749156][ T5871] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.762808][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.771208][ T5871] usb 1-1: Product: syz [ 196.775510][ T5871] usb 1-1: Manufacturer: syz [ 196.780472][ T5871] usb 1-1: SerialNumber: syz [ 196.792553][ T5871] usb 1-1: config 0 descriptor?? [ 196.802637][ T5871] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 196.816261][ T5871] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 196.853781][ T8102] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.619'. [ 196.917367][ T2962] wlan1: Trigger new scan to find an IBSS to join [ 197.402048][ T5871] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 197.405768][ T8110] netlink: 68 bytes leftover after parsing attributes in process `syz.4.621'. [ 197.415856][ T5871] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 197.656843][ T5949] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 197.819327][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.828451][ T5949] usb 5-1: config 1 has an invalid interface number: 61 but max is 0 [ 197.836885][ T5949] usb 5-1: config 1 has no interface number 0 [ 197.843076][ T5949] usb 5-1: config 1 interface 61 has no altsetting 0 [ 198.035845][ T5871] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 198.044570][ T5871] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 198.054075][ T5871] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 198.878965][ T5868] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 198.890006][ T5871] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 198.896561][ T5868] asix 4-1:7.0: probe with driver asix failed with error -71 [ 198.910836][ T5871] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 198.922560][ T5868] usb 4-1: USB disconnect, device number 35 [ 198.949301][ T5871] usb 1-1: USB disconnect, device number 61 [ 199.256888][ T5868] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 199.409050][ T5868] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.418404][ T5868] usb 4-1: config 114 has an invalid interface number: 227 but max is 0 [ 199.427225][ T5868] usb 4-1: config 114 has no interface number 0 [ 199.433629][ T5868] usb 4-1: config 114 interface 227 altsetting 4 endpoint 0x1 has an invalid bInterval 126, changing to 10 [ 199.453621][ T5868] usb 4-1: config 114 interface 227 has no altsetting 0 [ 199.464223][ T5868] usb 4-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=69.2d [ 199.475339][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.490869][ T5868] usb 4-1: Product: syz [ 199.495081][ T5868] usb 4-1: Manufacturer: syz [ 199.500412][ T5868] usb 4-1: SerialNumber: syz [ 199.683050][ T8127] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 199.692034][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.628'. [ 199.701391][ T5952] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 199.701706][ T8127] dummy0: entered promiscuous mode [ 199.713445][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.725362][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.733496][ T8127] bridge0: port 3(dummy0) entered blocking state [ 199.744156][ T8127] bridge0: port 3(dummy0) entered disabled state [ 199.751297][ T8127] dummy0: entered allmulticast mode [ 199.754683][ T5868] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.760746][ T8127] bridge0: port 3(dummy0) entered blocking state [ 199.764221][ T5868] usb 4-1: invalid MIDI in EP 0 [ 199.770055][ T8127] bridge0: port 3(dummy0) entered forwarding state [ 199.830882][ T5868] snd-usb-audio 4-1:114.227: probe with driver snd-usb-audio failed with error -22 [ 199.848923][ T5868] usb 4-1: USB disconnect, device number 36 [ 199.861985][ T5952] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 199.873162][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.899796][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:114.227/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.919206][ T5952] usb 1-1: config 0 descriptor?? [ 199.958445][ T13] wlan1: Trigger new scan to find an IBSS to join [ 200.331111][ T5952] usb 1-1: Cannot set MAC address [ 200.336580][ T5952] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 200.355601][ T5952] usb 1-1: USB disconnect, device number 62 [ 200.362372][ T8132] input: syz0 as /devices/virtual/input/input24 [ 200.431031][ T5949] usb 5-1: New USB device found, idVendor=12d1, idProduct=3605, bcdDevice=e4.b0 [ 200.464701][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.502237][ T5949] usb 5-1: can't set config #1, error -71 [ 200.521572][ T5949] usb 5-1: USB disconnect, device number 9 [ 200.617583][ T8140] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 200.633474][ T8145] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 200.641472][ T8145] netlink: 232 bytes leftover after parsing attributes in process `syz.3.634'. [ 200.941745][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.967771][ T5186] Bluetooth: hci2: ACL packet too small [ 201.096829][ T5952] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 201.105892][ T8159] netlink: 'syz.2.639': attribute type 29 has an invalid length. [ 201.117301][ T8159] netlink: 'syz.2.639': attribute type 29 has an invalid length. [ 201.130603][ T8159] netlink: 500 bytes leftover after parsing attributes in process `syz.2.639'. [ 201.176792][ T982] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 201.247205][ T5952] usb 5-1: device descriptor read/64, error -71 [ 201.338547][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 201.349601][ T982] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 201.359827][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.369558][ T982] usb 4-1: config 0 descriptor?? [ 201.375931][ T8155] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 201.446814][ T5868] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 201.486772][ T5952] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.596875][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 201.604327][ T5868] usb 1-1: config 0 has no interfaces? [ 201.612942][ T5868] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 201.616888][ T5952] usb 5-1: device descriptor read/64, error -71 [ 201.622661][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.636537][ T5868] usb 1-1: Product: syz [ 201.641568][ T5868] usb 1-1: Manufacturer: syz [ 201.646207][ T5868] usb 1-1: SerialNumber: syz [ 201.653245][ T5868] usb 1-1: config 0 descriptor?? [ 201.699568][ T8166] tmpfs: Unknown parameter '' [ 201.737822][ T5952] usb usb5-port1: attempt power cycle [ 201.745523][ T8171] netlink: 176 bytes leftover after parsing attributes in process `syz.2.643'. [ 201.754677][ T8171] ip6gretap0: entered promiscuous mode [ 201.760839][ T8171] netlink: 176 bytes leftover after parsing attributes in process `syz.2.643'. [ 201.873762][ T5912] usb 1-1: USB disconnect, device number 63 [ 202.038952][ T982] usbhid 4-1:0.0: can't add hid device: -71 [ 202.044991][ T982] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 202.055682][ T982] usb 4-1: USB disconnect, device number 37 [ 202.077724][ T5952] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.097382][ T5952] usb 5-1: device descriptor read/8, error -71 [ 202.336824][ T5952] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.358294][ T5952] usb 5-1: device descriptor read/8, error -71 [ 202.468271][ T5952] usb usb5-port1: unable to enumerate USB device [ 202.707006][ T982] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 202.877339][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 202.884663][ T982] usb 4-1: config 150 has an invalid interface number: 59 but max is 0 [ 202.900030][ T982] usb 4-1: config 150 has no interface number 0 [ 202.918288][ T982] usb 4-1: config 150 interface 59 has no altsetting 0 [ 202.930734][ T982] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=36.86 [ 202.941988][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.958226][ T982] usb 4-1: Product: syz [ 202.964134][ T982] usb 4-1: Manufacturer: syz [ 202.969554][ T982] usb 4-1: SerialNumber: syz [ 203.176884][ T5952] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 203.205814][ T982] mvusb_mdio 4-1:150.59: probe with driver mvusb_mdio failed with error -5 [ 203.220322][ T982] usb 4-1: USB disconnect, device number 38 [ 203.326817][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 203.333580][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 203.345384][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.358864][ T5952] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 203.368230][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.376280][ T5952] usb 1-1: Product: syz [ 203.380481][ T5952] usb 1-1: Manufacturer: syz [ 203.385097][ T5952] usb 1-1: SerialNumber: syz [ 203.391828][ T5952] usb 1-1: config 0 descriptor?? [ 203.400359][ T5952] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 203.409777][ T5952] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 203.986812][ T982] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 204.004130][ T5952] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 204.011320][ T5952] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 204.164507][ T982] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.179100][ T982] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 204.189323][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.200676][ T982] usb 4-1: config 0 descriptor?? [ 204.234332][ T8218] netlink: 124 bytes leftover after parsing attributes in process `syz.2.658'. [ 204.612028][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.623615][ T5952] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 204.631792][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.650148][ T982] kye 0003:0458:5014.000B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 204.682185][ T982] kye 0003:0458:5014.000B: hidraw0: USB HID v1.01 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 204.706802][ T982] kye 0003:0458:5014.000B: tablet-enabling feature report not found [ 204.714922][ T982] kye 0003:0458:5014.000B: tablet enabling failed [ 204.847260][ T5912] usb 4-1: USB disconnect, device number 39 [ 204.909478][ T8228] netlink: 'syz.2.661': attribute type 21 has an invalid length. [ 204.917540][ T8228] netlink: 'syz.2.661': attribute type 30 has an invalid length. [ 205.067011][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.216812][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 205.224384][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 205.233624][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.245326][ T10] usb 5-1: config 0 descriptor?? [ 205.256772][ T5952] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 205.265500][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 205.444222][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 205.462513][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.464460][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 205.473817][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.485477][ T5952] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 205.500780][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.513133][ T5952] usb 1-1: USB disconnect, device number 64 [ 205.517162][ T10] usb 5-1: media controller created [ 205.560475][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.673425][ T10] az6027: usb out operation failed. (-71) [ 205.690795][ T10] az6027: usb out operation failed. (-71) [ 205.696565][ T10] stb0899_attach: Driver disabled by Kconfig [ 205.704749][ T10] az6027: no front-end attached [ 205.704749][ T10] [ 205.713809][ T10] az6027: usb out operation failed. (-71) [ 205.721863][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 205.746918][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 205.767997][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 205.775580][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 205.792392][ T10] usb 5-1: USB disconnect, device number 14 [ 205.825313][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 205.997134][ T5952] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 206.127873][ T5952] usb 4-1: device descriptor read/64, error -71 [ 206.377305][ T5952] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 206.506941][ T5952] usb 4-1: device descriptor read/64, error -71 [ 206.617226][ T5952] usb usb4-port1: attempt power cycle [ 206.796792][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.946819][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 206.963334][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 206.975504][ T5952] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 206.983344][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.999962][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 207.010136][ T5952] usb 4-1: device descriptor read/8, error -71 [ 207.017149][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.025708][ T5912] usb 5-1: Product: syz [ 207.030385][ T5912] usb 5-1: Manufacturer: syz [ 207.035075][ T5912] usb 5-1: SerialNumber: syz [ 207.043863][ T5912] usb 5-1: config 0 descriptor?? [ 207.058901][ T5912] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 207.070174][ T5912] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 207.257241][ T5952] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 207.277491][ T5952] usb 4-1: device descriptor read/8, error -71 [ 207.316861][ T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 207.387387][ T5952] usb usb4-port1: unable to enumerate USB device [ 207.466819][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 207.473337][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 207.481711][ T24] usb 1-1: config 0 has no interface number 0 [ 207.487911][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 207.498722][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 207.510564][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.521630][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.534677][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 207.543790][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.555376][ T24] usb 1-1: config 0 descriptor?? [ 207.568673][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 207.657986][ T5912] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 207.665592][ T5912] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 207.825806][ T10] usb 1-1: USB disconnect, device number 65 [ 207.826677][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 207.841575][ T8276] ldusb 1-1:0.55: Write buffer overflow, 12 bytes dropped [ 207.850186][ T8276] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 207.858465][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 208.679929][ T5912] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 208.890231][ T5912] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 208.901157][ T5912] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 208.908410][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 208.927643][ T5912] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 208.937038][ T5912] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 208.957496][ T5912] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 208.979993][ T5912] usb 5-1: USB disconnect, device number 15 [ 209.365503][ T8306] netlink: 'syz.0.690': attribute type 83 has an invalid length. [ 209.380435][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.389277][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.611542][ T5186] Bluetooth: hci3: unexpected event for opcode 0x041c [ 209.618519][ T5912] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 209.976927][ T8334] overlayfs: failed to resolve './file0': -2 [ 210.033257][ T8336] trusted_key: encrypted_key: insufficient parameters specified [ 210.486829][ T5912] usb 1-1: device descriptor read/64, error -71 [ 210.646820][ T5952] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.726850][ T5912] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 210.796796][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 210.807722][ T5952] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 210.816912][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.829155][ T5952] usb 5-1: config 0 descriptor?? [ 210.867039][ T5912] usb 1-1: device descriptor read/64, error -71 [ 210.979002][ T5912] usb usb1-port1: attempt power cycle [ 211.039419][ T5952] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 211.052026][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.063185][ T5952] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 211.073372][ T5952] usb 5-1: media controller created [ 211.098821][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.242057][ T5952] az6027: usb out operation failed. (-71) [ 211.251992][ T5952] az6027: usb out operation failed. (-71) [ 211.258509][ T5952] stb0899_attach: Driver disabled by Kconfig [ 211.264670][ T5952] az6027: no front-end attached [ 211.264670][ T5952] [ 211.272526][ T5952] az6027: usb out operation failed. (-71) [ 211.279068][ T5952] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 211.296598][ T5952] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 211.317055][ T5912] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 211.326762][ T5952] dvb-usb: schedule remote query interval to 400 msecs. [ 211.345147][ T5952] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 211.367574][ T5912] usb 1-1: device descriptor read/8, error -71 [ 211.375493][ T5952] usb 5-1: USB disconnect, device number 16 [ 211.436176][ T5952] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 211.617731][ T5912] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 211.637739][ T5912] usb 1-1: device descriptor read/8, error -71 [ 211.747179][ T5912] usb usb1-port1: unable to enumerate USB device [ 212.046872][ T5912] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.211179][ T5912] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 212.221069][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.229765][ T5912] usb 5-1: Product: syz [ 212.233928][ T5912] usb 5-1: Manufacturer: syz [ 212.238627][ T5912] usb 5-1: SerialNumber: syz [ 212.245163][ T5912] usb 5-1: config 0 descriptor?? [ 212.416874][ T5952] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 212.593103][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.602133][ T5952] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 212.616580][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.625932][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.635362][ T5952] usb 4-1: Product: syz [ 212.642633][ T5952] usb 4-1: Manufacturer: syz [ 212.647445][ T5952] usb 4-1: SerialNumber: syz [ 212.718402][ T5912] usb-storage 5-1:0.0: USB Mass Storage device detected [ 212.801444][ T5912] usb 5-1: USB disconnect, device number 17 [ 213.436943][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 213.516912][ T5912] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.588701][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.598739][ T10] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 213.608591][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.619101][ T10] usb 1-1: config 0 descriptor?? [ 213.681700][ T5912] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 213.690894][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.699263][ T5912] usb 5-1: Product: syz [ 213.703474][ T5912] usb 5-1: Manufacturer: syz [ 213.708537][ T5912] usb 5-1: SerialNumber: syz [ 214.043041][ T10] zydacron 0003:13EC:0006.000C: item fetching failed at offset 4/5 [ 214.043835][ T10] zydacron 0003:13EC:0006.000C: parse failed [ 214.043943][ T10] zydacron 0003:13EC:0006.000C: probe with driver zydacron failed with error -22 [ 214.127424][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.128441][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.148070][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 214.500023][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.509213][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.519561][ T8399] syz.0.720 uses old SIOCAX25GETINFO [ 214.528000][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.539471][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.549872][ T10] usb 1-1: USB disconnect, device number 70 [ 214.565203][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 214.595281][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 214.608068][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 214.619071][ T5952] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 214.633819][ T5952] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 214.650952][ T5952] usb 4-1: USB disconnect, device number 44 [ 214.748896][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 214.762843][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 214.852087][ T8421] netlink: 'syz.2.727': attribute type 2 has an invalid length. [ 214.860387][ T8421] netlink: 'syz.2.727': attribute type 8 has an invalid length. [ 214.868920][ T8421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.727'. [ 215.376875][ T5952] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 215.526858][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 215.539381][ T5952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.552601][ T5952] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.563306][ T5952] usb 4-1: can't read configurations, error -71 [ 216.353034][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 216.365591][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 216.378375][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 216.390510][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 216.400899][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 216.411540][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 216.421731][ T5912] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 216.433698][ T5912] usb 5-1: USB disconnect, device number 18 [ 216.467243][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 216.616795][ T5952] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 216.627015][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 216.633509][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 216.641936][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.652170][ T10] usb 1-1: config 0 has no interface number 0 [ 216.660921][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 216.670265][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.678856][ T10] usb 1-1: Product: syz [ 216.683086][ T10] usb 1-1: Manufacturer: syz [ 216.687748][ T10] usb 1-1: SerialNumber: syz [ 216.694354][ T10] usb 1-1: config 0 descriptor?? [ 216.702127][ T10] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 216.768225][ T5952] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 216.777597][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.787709][ T5952] usb 4-1: config 0 descriptor?? [ 216.795971][ T5952] usb 4-1: selecting invalid altsetting 1 [ 216.801855][ T5952] flexcop_usb: set interface failed. [ 216.807317][ T5952] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 216.901666][ T8460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'. [ 216.911745][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 216.955952][ T5952] usb 1-1: USB disconnect, device number 71 [ 217.018220][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.037197][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.060954][ T10] usb 4-1: USB disconnect, device number 46 [ 217.356762][ T5952] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 217.436783][ T5912] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 217.506754][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 217.513445][ T5952] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.523290][ T5952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.533058][ T5952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.543032][ T5952] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.556088][ T5952] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.565262][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.589082][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.606273][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 217.617940][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 217.630446][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 217.653212][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.668491][ T5912] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 217.678015][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 217.686138][ T5912] usb 5-1: Product: syz [ 217.694581][ T5912] usb 5-1: Manufacturer: syz [ 217.699678][ T5912] usb 5-1: SerialNumber: syz [ 217.717583][ T5912] usb 5-1: config 0 descriptor?? [ 217.778332][ T5952] usb 1-1: GET_CAPABILITIES returned 0 [ 217.783920][ T5952] usbtmc 1-1:16.0: can't read capabilities [ 217.885877][ T5186] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 217.924739][ T5912] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 217.934442][ T5912] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 217.935393][ T8496] tmpfs: Bad value for 'mpol' [ 218.131434][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 218.151287][ T5868] usb 5-1: USB disconnect, device number 19 [ 218.246775][ T5912] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 218.399017][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.410061][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.420409][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.433380][ T5912] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.442711][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.452781][ T5912] usb 4-1: config 0 descriptor?? [ 218.863459][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.871197][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.878713][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.886111][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.893577][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.901219][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.908834][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.916240][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.924001][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.931960][ T5912] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 218.946922][ T5868] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 218.948593][ T5912] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 219.068047][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.752'. [ 219.081864][ T5912] usb 4-1: USB disconnect, device number 47 [ 219.118736][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 219.130073][ T5868] usb 5-1: not running at top speed; connect to a high speed hub [ 219.140110][ T5868] usb 5-1: config 6 has an invalid interface number: 150 but max is 0 [ 219.148471][ T5868] usb 5-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 219.158444][ T5868] usb 5-1: config 6 has no interface number 0 [ 219.164529][ T5868] usb 5-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 219.175594][ T5868] usb 5-1: config 6 interface 150 has no altsetting 0 [ 219.184573][ T5868] usb 5-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76 [ 219.193756][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.201868][ T5868] usb 5-1: Product: А [ 219.205947][ T5868] usb 5-1: Manufacturer: 育ϯ쿎鷗↓蝞ߞ嵵䠢狆쿶⎖ꆸ期맀Í䊦Ƹ쀚ݶ⟯蠟ᙨ┋䪑拚郴ꍿ꾜貔퀜굏㴐禃᧸꺂嵭ꑀ辗뭅騦䫥왶⦁먮곫戚⠲죞躳ᔡ貵뒞紙蠇秄ᠥ䪐腜ޤ앖섰늰닥胲᫛︡饘卣勘飚碬தꈃറ䢡쪝뤣땓➥㤲 [ 219.234004][ T5868] usb 5-1: SerialNumber: syz [ 219.458267][ T5868] usb 5-1: USB disconnect, device number 20 [ 219.866830][ T982] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 219.994699][ T8524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'. [ 220.004468][ T8524] netlink: 3 bytes leftover after parsing attributes in process `syz.4.759'. [ 220.027604][ T8522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.043011][ T8522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.082798][ T5912] usb 1-1: USB disconnect, device number 72 [ 220.366878][ T5868] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 220.466780][ T5912] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 220.519724][ T5868] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 220.528149][ T5868] usb 5-1: config 0 has no interface number 0 [ 220.534286][ T5868] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 220.545535][ T5868] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 220.555660][ T5868] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 220.565468][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.575823][ T5868] usb 5-1: config 0 descriptor?? [ 220.589806][ T5868] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input28 [ 220.634774][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 220.646876][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.655063][ T5912] usb 1-1: Product: syz [ 220.659809][ T5912] usb 1-1: Manufacturer: syz [ 220.664425][ T5912] usb 1-1: SerialNumber: syz [ 220.783717][ T24] usb 5-1: USB disconnect, device number 21 [ 221.531376][ T8541] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 221.540432][ T8541] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 221.895132][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 221.908595][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 221.918889][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.930815][ T5912] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 222.418233][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 222.624288][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.640859][ T982] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 222.649740][ T982] usb 4-1: can't read configurations, error -71 [ 222.728056][ T5868] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 222.888562][ T5868] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 222.899705][ T5868] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.909552][ T5868] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.919456][ T5868] usb 5-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.933080][ T5868] usb 5-1: config 1 interface 0 has no altsetting 0 [ 222.942398][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.951891][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.959995][ T5868] usb 5-1: Product: syz [ 222.964170][ T5868] usb 5-1: Manufacturer: и [ 222.968736][ T5868] usb 5-1: SerialNumber: syz [ 222.996994][ T982] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 223.126816][ T982] usb 4-1: device descriptor read/64, error -71 [ 223.237311][ T982] usb usb4-port1: attempt power cycle [ 223.274684][ T5912] usb 1-1: USB disconnect, device number 73 [ 223.315744][ T30] audit: type=1326 audit(1759305871.433:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8554 comm="syz.0.769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8eec9 code=0x0 [ 223.385687][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.394559][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.408705][ T5868] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 223.421295][ T5868] usb 5-1: USB disconnect, device number 22 [ 223.586826][ T982] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 223.618001][ T982] usb 4-1: device descriptor read/8, error -71 [ 223.867352][ T982] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 223.887495][ T982] usb 4-1: device descriptor read/8, error -71 [ 223.960640][ T8560] netlink: 'syz.4.771': attribute type 16 has an invalid length. [ 223.971250][ T8560] netlink: 48 bytes leftover after parsing attributes in process `syz.4.771'. [ 223.982651][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.993945][ T8560] vxfs: unable to read disk superblock at 1 [ 224.001512][ T982] usb usb4-port1: unable to enumerate USB device [ 224.001522][ T8560] vxfs: unable to read disk superblock at 8 [ 224.014029][ T8560] vxfs: can't find superblock. [ 224.022415][ T5186] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 224.183923][ T8562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.266584][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 224.266787][ T982] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 224.276960][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 224.298840][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 224.309232][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 224.319665][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 224.328857][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 224.440244][ T982] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.451266][ T982] usb 5-1: config 1 interface 0 has no altsetting 0 [ 224.460753][ T982] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 224.469931][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.478063][ T982] usb 5-1: Product: syz [ 224.482220][ T982] usb 5-1: Manufacturer: syz [ 224.486885][ T982] usb 5-1: SerialNumber: syz [ 224.703623][ T982] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input29 [ 224.733075][ T982] usb 5-1: USB disconnect, device number 23 [ 224.739628][ T5221] pxrc 5-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 225.036868][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 225.186770][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 225.193165][ T24] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 225.202151][ T24] usb 1-1: config 0 has no interface number 0 [ 225.216776][ T24] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 225.237227][ T24] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 225.250113][ T24] usb 1-1: config 0 interface 126 has no altsetting 0 [ 225.262687][ T24] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 225.272526][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.281130][ T24] usb 1-1: Product: syz [ 225.285545][ T24] usb 1-1: Manufacturer: syz [ 225.290248][ T24] usb 1-1: SerialNumber: syz [ 225.318529][ T24] usb 1-1: config 0 descriptor?? [ 225.325714][ T8570] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 225.334991][ T8570] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 225.576824][ T5952] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 225.719067][ T5952] usb 5-1: device descriptor read/64, error -71 [ 225.744807][ T24] ir_usb 1-1:0.126: IR Dongle converter detected [ 225.755320][ T24] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 225.955930][ T982] usb 1-1: USB disconnect, device number 74 [ 225.968116][ T5952] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 225.973305][ T982] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 225.984825][ T982] ir_usb 1-1:0.126: device disconnected [ 226.106792][ T5952] usb 5-1: device descriptor read/64, error -71 [ 226.217054][ T5952] usb usb5-port1: attempt power cycle [ 226.556911][ T5952] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 226.578271][ T5952] usb 5-1: device descriptor read/8, error -71 [ 226.826814][ T5952] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 226.847415][ T5952] usb 5-1: device descriptor read/8, error -71 [ 226.877438][ T982] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 226.927225][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 226.967208][ T5952] usb usb5-port1: unable to enumerate USB device [ 227.028713][ T982] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 227.036902][ T982] usb 1-1: config 1 has no interface number 0 [ 227.043143][ T982] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 227.054789][ T982] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 227.065053][ T982] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.078692][ T982] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 227.087860][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.095856][ T982] usb 1-1: Product: syz [ 227.100280][ T982] usb 1-1: Manufacturer: syz [ 227.104978][ T982] usb 1-1: SerialNumber: syz [ 227.109220][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.119621][ T8599] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.133091][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 227.142020][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 227.150902][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.160513][ T24] usb 4-1: config 1 has no interface number 1 [ 227.166627][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 227.182449][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.191583][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.199720][ T24] usb 4-1: Product: syz [ 227.203893][ T24] usb 4-1: Manufacturer: syz [ 227.208531][ T24] usb 4-1: SerialNumber: syz [ 227.332701][ T8599] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.419382][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.428963][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.452182][ T24] usb 4-1: found format II with max.bitrate = 8, frame size=9 [ 227.461507][ T24] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 227.490638][ T24] usb 4-1: USB disconnect, device number 52 [ 227.546468][ T6872] udevd[6872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.582518][ T982] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 227.602409][ T8607] __nla_validate_parse: 61 callbacks suppressed [ 227.602422][ T8607] netlink: 37 bytes leftover after parsing attributes in process `syz.2.789'. [ 227.753793][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.762785][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.772635][ T982] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 227.780285][ T982] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 227.788150][ T982] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 227.794782][ T982] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 227.808416][ T982] usb 1-1: USB disconnect, device number 75 [ 227.819625][ T982] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 227.878346][ T982] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 228.195058][ T8618] netlink: 'syz.2.793': attribute type 33 has an invalid length. [ 228.203725][ T8618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.793'. [ 228.217056][ T2962] bridge0: port 3(dummy0) entered disabled state [ 228.258102][ T8623] loop5: detected capacity change from 0 to 7 [ 228.281559][ T8623] Dev loop5: unable to read RDB block 7 [ 228.287457][ T8623] loop5: unable to read partition table [ 228.293325][ T8623] loop5: partition table beyond EOD, truncated [ 228.306942][ T8623] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 228.315531][ T8624] No source specified [ 229.057354][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 229.217895][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 229.228742][ T24] usb 1-1: config 4 has an invalid interface number: 140 but max is 0 [ 229.243257][ T24] usb 1-1: config 4 has no interface number 0 [ 229.252103][ T24] usb 1-1: config 4 interface 140 has no altsetting 0 [ 229.261784][ T24] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 229.280684][ T8663] netlink: 'syz.3.808': attribute type 8 has an invalid length. [ 229.281626][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.290714][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.3.808'. [ 229.312798][ T24] usb 1-1: Product: syz [ 229.324324][ T24] usb 1-1: Manufacturer: syz [ 229.330733][ T24] usb 1-1: SerialNumber: syz [ 229.351899][ T24] ums-cypress 1-1:4.140: USB Mass Storage device detected [ 229.549551][ T24] usb 1-1: USB disconnect, device number 76 [ 229.557286][ T982] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 229.706856][ T982] usb 5-1: device descriptor read/64, error -71 [ 229.956888][ T982] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 230.086816][ T982] usb 5-1: device descriptor read/64, error -71 [ 230.203992][ T982] usb usb5-port1: attempt power cycle [ 230.429648][ T8712] syz.0.821: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.447420][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.0.821 Not tainted syzkaller #0 PREEMPT(full) [ 230.447448][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.447462][ T8712] Call Trace: [ 230.447470][ T8712] [ 230.447479][ T8712] dump_stack_lvl+0x189/0x250 [ 230.447534][ T8712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.447566][ T8712] ? __pfx__printk+0x10/0x10 [ 230.447595][ T8712] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 230.447625][ T8712] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 230.447657][ T8712] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 230.447691][ T8712] warn_alloc+0x214/0x310 [ 230.447716][ T8712] ? stack_depot_save_flags+0x40/0x860 [ 230.447741][ T8712] ? __pfx_warn_alloc+0x10/0x10 [ 230.447762][ T8712] ? kasan_save_track+0x3e/0x80 [ 230.447790][ T8712] ? __kasan_kmalloc+0x93/0xb0 [ 230.447810][ T8712] ? xsk_setsockopt+0x4dc/0x8d0 [ 230.447828][ T8712] ? do_sock_setsockopt+0x17c/0x1b0 [ 230.447850][ T8712] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 230.447873][ T8712] ? do_syscall_64+0xfa/0xfa0 [ 230.447896][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.447927][ T8712] __vmalloc_node_range_noprof+0x125/0x12d0 [ 230.447987][ T8712] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.448021][ T8712] ? __kasan_kmalloc+0x93/0xb0 [ 230.448045][ T8712] vmalloc_user_noprof+0xad/0xf0 [ 230.448076][ T8712] ? xskq_create+0xbf/0x170 [ 230.448098][ T8712] xskq_create+0xbf/0x170 [ 230.448123][ T8712] xsk_init_queue+0xb0/0x110 [ 230.448146][ T8712] xsk_setsockopt+0x4dc/0x8d0 [ 230.448168][ T8712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.448190][ T8712] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.448215][ T8712] ? aa_sock_opt_perm+0xff/0x1b0 [ 230.448241][ T8712] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 230.448260][ T8712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.448281][ T8712] do_sock_setsockopt+0x17c/0x1b0 [ 230.448310][ T8712] __x64_sys_setsockopt+0x13f/0x1b0 [ 230.448340][ T8712] do_syscall_64+0xfa/0xfa0 [ 230.448363][ T8712] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.448387][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.448406][ T8712] ? clear_bhb_loop+0x60/0xb0 [ 230.448431][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.448451][ T8712] RIP: 0033:0x7f15b8b8eec9 [ 230.448476][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.448494][ T8712] RSP: 002b:00007f15b99cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.448522][ T8712] RAX: ffffffffffffffda RBX: 00007f15b8de5fa0 RCX: 00007f15b8b8eec9 [ 230.448537][ T8712] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 230.448550][ T8712] RBP: 00007f15b8c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 230.448563][ T8712] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 230.448577][ T8712] R13: 00007f15b8de6038 R14: 00007f15b8de5fa0 R15: 00007ffff53af308 [ 230.448611][ T8712] [ 230.448623][ T8712] Mem-Info: [ 230.557008][ T982] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 230.563354][ T8714] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 230.574603][ T8712] active_anon:22435 inactive_anon:1 isolated_anon:0 [ 230.574603][ T8712] active_file:6387 inactive_file:49298 isolated_file:0 [ 230.574603][ T8712] unevictable:17163 dirty:56 writeback:0 [ 230.574603][ T8712] slab_reclaimable:10790 slab_unreclaimable:95266 [ 230.574603][ T8712] mapped:30198 shmem:17769 pagetables:1408 [ 230.574603][ T8712] sec_pagetables:0 bounce:0 [ 230.574603][ T8712] kernel_misc_reclaimable:0 [ 230.574603][ T8712] free:1281592 free_pcp:14441 free_cma:0 [ 230.612005][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 230.630799][ T982] usb 5-1: device descriptor read/8, error -71 [ 230.730597][ T8715] syzkaller0: entered allmulticast mode [ 230.835689][ T8712] Node 0 active_anon:89840kB inactive_anon:4kB active_file:25548kB inactive_file:196992kB unevictable:67116kB isolated(anon):0kB isolated(file):0kB mapped:120892kB dirty:220kB writeback:0kB shmem:69540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12180kB pagetables:5404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.869795][ T8712] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.906243][ T8712] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.937407][ T8712] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 230.943210][ T8712] Node 0 DMA32 free:1219136kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89992kB inactive_anon:4kB active_file:25548kB inactive_file:196992kB unevictable:67116kB writepending:224kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:41724kB local_pcp:20820kB free_cma:0kB [ 230.976825][ T982] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 230.985952][ T8712] lowmem_reserve[]: 0 0 0 0 0 [ 230.991323][ T8712] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.998213][ T982] usb 5-1: device descriptor read/8, error -71 [ 231.027649][ T8712] lowmem_reserve[]: 0 0 0 0 0 [ 231.032485][ T8712] Node 1 Normal free:3891876kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17504kB local_pcp:7104kB free_cma:0kB [ 231.056937][ T5868] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 231.065173][ T8712] lowmem_reserve[]: 0 0 0 0 0 [ 231.077945][ T8712] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 231.096457][ T8712] Node 0 DMA32: 221*4kB (ME) 169*8kB (UM) 175*16kB (UM) 286*32kB (UME) 49*64kB (UME) 43*128kB (UME) 43*256kB (ME) 15*512kB (UME) 12*1024kB (ME) 3*2048kB (UME) 283*4096kB (UM) = 1219116kB [ 231.117284][ T8712] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 231.128996][ T8712] Node 1 Normal: 205*4kB (UME) 52*8kB (UME) 33*16kB (UME) 120*32kB (UME) 35*64kB (UME) 10*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891876kB [ 231.147417][ T8712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.158091][ T8712] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.158314][ T982] usb usb5-port1: unable to enumerate USB device [ 231.167443][ T8712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.167464][ T8712] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.167479][ T8712] 89848 total pagecache pages [ 231.167500][ T8712] 1 pages in swap cache [ 231.167508][ T8712] Free swap = 124992kB [ 231.167517][ T8712] Total swap = 124996kB [ 231.167527][ T8712] 2097051 pages RAM [ 231.167535][ T8712] 0 pages HighMem/MovableOnly [ 231.167543][ T8712] 428026 pages reserved [ 231.167551][ T8712] 0 pages cma reserved [ 231.169023][ T8723] syzkaller0 (unregistering): left allmulticast mode [ 231.216869][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 231.241150][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 231.250202][ T5868] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 231.260012][ T5868] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 231.269832][ T5868] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 231.280864][ T5868] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 231.291250][ T5868] usb 4-1: config 1 interface 0 has no altsetting 0 [ 231.298085][ T5868] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 231.307213][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.321342][ T5868] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 231.571022][ T5868] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 231.593488][ T5868] usb 4-1: USB disconnect, device number 53 [ 231.766829][ T5871] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 231.889385][ T8741] netlink: 'syz.2.829': attribute type 21 has an invalid length. [ 231.897844][ T8741] netlink: 128 bytes leftover after parsing attributes in process `syz.2.829'. [ 231.926843][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 231.934579][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.949971][ T5871] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 231.961772][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.970338][ T5871] usb 1-1: Product: syz [ 231.974518][ T5871] usb 1-1: Manufacturer: syz [ 231.979755][ T5871] usb 1-1: SerialNumber: syz [ 231.987667][ T5871] usb 1-1: config 0 descriptor?? [ 232.071216][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'. [ 232.213867][ T8739] netlink: 288 bytes leftover after parsing attributes in process `syz.0.828'. [ 232.250520][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.262079][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.346418][ T8762] netlink: 'syz.3.833': attribute type 21 has an invalid length. [ 232.354441][ T8762] netlink: 388 bytes leftover after parsing attributes in process `syz.3.833'. [ 232.636800][ T5952] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 232.766801][ T5952] usb 5-1: device descriptor read/64, error -71 [ 232.900724][ T8768] IPVS: ip_vs_add_dest(): server weight less than zero [ 233.016743][ T5952] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 233.130679][ T8774] overlayfs: upper fs does not support tmpfile. [ 233.157520][ T5952] usb 5-1: device descriptor read/64, error -71 [ 233.175087][ T8777] befs: (nbd3): No write support. Marking filesystem read-only [ 233.279241][ T5952] usb usb5-port1: attempt power cycle [ 233.392426][ T8781] 9pnet_fd: Insufficient options for proto=fd [ 233.457917][ T8783] [ 233.460254][ T8783] ====================================================== [ 233.467260][ T8783] WARNING: possible circular locking dependency detected [ 233.474285][ T8783] syzkaller #0 Not tainted [ 233.478686][ T8783] ------------------------------------------------------ [ 233.485695][ T8783] syz.3.841/8783 is trying to acquire lock: [ 233.491570][ T8783] ffffffff8e624708 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 233.501153][ T8783] [ 233.501153][ T8783] but task is already holding lock: [ 233.508509][ T8783] ffff8881433f4558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 233.518775][ T8783] [ 233.518775][ T8783] which lock already depends on the new lock. [ 233.518775][ T8783] [ 233.529157][ T8783] [ 233.529157][ T8783] the existing dependency chain (in reverse order) is: [ 233.538150][ T8783] [ 233.538150][ T8783] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 233.546737][ T8783] lock_acquire+0x120/0x360 [ 233.551762][ T8783] blk_alloc_queue+0x538/0x620 [ 233.557068][ T8783] __blk_mq_alloc_disk+0x15c/0x340 [ 233.562686][ T8783] nbd_dev_add+0x46c/0xae0 [ 233.567617][ T8783] nbd_init+0x168/0x1f0 [ 233.572280][ T8783] do_one_initcall+0x236/0x820 [ 233.577554][ T8783] do_initcall_level+0x104/0x190 [ 233.583095][ T8783] do_initcalls+0x59/0xa0 [ 233.587932][ T8783] kernel_init_freeable+0x334/0x4b0 [ 233.593634][ T8783] kernel_init+0x1d/0x1d0 [ 233.598472][ T8783] ret_from_fork+0x4bc/0x870 [ 233.603576][ T8783] ret_from_fork_asm+0x1a/0x30 [ 233.608843][ T8783] [ 233.608843][ T8783] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 233.616027][ T8783] lock_acquire+0x120/0x360 [ 233.621040][ T8783] fs_reclaim_acquire+0x72/0x100 [ 233.626483][ T8783] prepare_alloc_pages+0x153/0x610 [ 233.626758][ T5952] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 233.632095][ T8783] __alloc_frozen_pages_noprof+0x123/0x370 [ 233.632118][ T8783] __alloc_pages_noprof+0xa/0x30 [ 233.651378][ T8783] pcpu_populate_chunk+0x182/0xb30 [ 233.657054][ T8783] pcpu_alloc_noprof+0xcbf/0x1720 [ 233.657149][ T5952] usb 5-1: device descriptor read/8, error -71 [ 233.662598][ T8783] init_srcu_struct_fields+0x3ce/0xa20 [ 233.662622][ T8783] kvm_dev_ioctl+0x619/0x1570 [ 233.679917][ T8783] __se_sys_ioctl+0xfc/0x170 [ 233.685118][ T8783] do_syscall_64+0xfa/0xfa0 [ 233.690129][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.696529][ T8783] [ 233.696529][ T8783] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 233.704241][ T8783] validate_chain+0xb9b/0x2140 [ 233.709516][ T8783] __lock_acquire+0xab9/0xd20 [ 233.714695][ T8783] lock_acquire+0x120/0x360 [ 233.719697][ T8783] __mutex_lock+0x187/0x1350 [ 233.724790][ T8783] pcpu_alloc_noprof+0x286/0x1720 [ 233.730312][ T8783] sbitmap_init_node+0x1e1/0x640 [ 233.735752][ T8783] sbitmap_queue_init_node+0x3e/0x4d0 [ 233.741645][ T8783] blk_mq_init_tags+0x15c/0x2d0 [ 233.747005][ T8783] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 233.753005][ T8783] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 233.759326][ T8783] nbd_start_device+0x17f/0xb10 [ 233.764685][ T8783] nbd_genl_connect+0x135b/0x18f0 [ 233.770216][ T8783] genl_family_rcv_msg_doit+0x215/0x300 [ 233.776272][ T8783] genl_rcv_msg+0x60e/0x790 [ 233.781291][ T8783] netlink_rcv_skb+0x208/0x470 [ 233.786558][ T8783] genl_rcv+0x28/0x40 [ 233.791086][ T8783] netlink_unicast+0x82f/0x9e0 [ 233.796353][ T8783] netlink_sendmsg+0x805/0xb30 [ 233.801620][ T8783] __sock_sendmsg+0x21c/0x270 [ 233.806808][ T8783] ____sys_sendmsg+0x505/0x830 [ 233.812185][ T8783] ___sys_sendmsg+0x21f/0x2a0 [ 233.817453][ T8783] __x64_sys_sendmsg+0x19b/0x260 [ 233.822896][ T8783] do_syscall_64+0xfa/0xfa0 [ 233.827909][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.834399][ T8783] [ 233.834399][ T8783] other info that might help us debug this: [ 233.834399][ T8783] [ 233.844613][ T8783] Chain exists of: [ 233.844613][ T8783] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 233.844613][ T8783] [ 233.858249][ T8783] Possible unsafe locking scenario: [ 233.858249][ T8783] [ 233.865688][ T8783] CPU0 CPU1 [ 233.871036][ T8783] ---- ---- [ 233.876384][ T8783] lock(&q->q_usage_counter(io)#49); [ 233.881760][ T8783] lock(fs_reclaim); [ 233.888253][ T8783] lock(&q->q_usage_counter(io)#49); [ 233.896222][ T8783] lock(pcpu_alloc_mutex); [ 233.900709][ T8783] [ 233.900709][ T8783] *** DEADLOCK *** [ 233.900709][ T8783] [ 233.908837][ T8783] 6 locks held by syz.3.841/8783: [ 233.913848][ T8783] #0: ffffffff8f9c7350 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 233.922035][ T8783] #1: ffffffff8f9c7168 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 233.931001][ T8783] #2: ffff888025e3d9c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 233.942405][ T8783] #3: ffff888025e3d8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 233.953365][ T8783] #4: ffff8881433f4558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 233.964106][ T8783] #5: ffff8881433f4590 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 233.975160][ T8783] [ 233.975160][ T8783] stack backtrace: [ 233.981031][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.3.841 Not tainted syzkaller #0 PREEMPT(full) [ 233.981057][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.981068][ T8783] Call Trace: [ 233.981075][ T8783] [ 233.981082][ T8783] dump_stack_lvl+0x189/0x250 [ 233.981109][ T8783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.981134][ T8783] ? __pfx__printk+0x10/0x10 [ 233.981161][ T8783] ? print_lock_name+0xde/0x100 [ 233.981183][ T8783] print_circular_bug+0x2ee/0x310 [ 233.981207][ T8783] check_noncircular+0x134/0x160 [ 233.981232][ T8783] validate_chain+0xb9b/0x2140 [ 233.981261][ T8783] __lock_acquire+0xab9/0xd20 [ 233.981281][ T8783] ? pcpu_alloc_noprof+0x286/0x1720 [ 233.981297][ T8783] lock_acquire+0x120/0x360 [ 233.981312][ T8783] ? pcpu_alloc_noprof+0x286/0x1720 [ 233.981332][ T8783] __mutex_lock+0x187/0x1350 [ 233.981353][ T8783] ? pcpu_alloc_noprof+0x286/0x1720 [ 233.981370][ T8783] ? kasan_save_track+0x4f/0x80 [ 233.981393][ T8783] ? kasan_save_track+0x3e/0x80 [ 233.981415][ T8783] ? __kasan_kmalloc+0x93/0xb0 [ 233.981429][ T8783] ? blk_mq_init_tags+0x83/0x2d0 [ 233.981444][ T8783] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 233.981464][ T8783] ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 233.981487][ T8783] ? pcpu_alloc_noprof+0x286/0x1720 [ 233.981501][ T8783] ? nbd_genl_connect+0x135b/0x18f0 [ 233.981524][ T8783] ? genl_family_rcv_msg_doit+0x215/0x300 [ 233.981548][ T8783] ? genl_rcv_msg+0x60e/0x790 [ 233.981570][ T8783] ? __pfx___mutex_lock+0x10/0x10 [ 233.981589][ T8783] ? ____sys_sendmsg+0x505/0x830 [ 233.981608][ T8783] ? do_syscall_64+0xfa/0xfa0 [ 233.981627][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.981648][ T8783] pcpu_alloc_noprof+0x286/0x1720 [ 233.981669][ T8783] sbitmap_init_node+0x1e1/0x640 [ 233.981690][ T8783] sbitmap_queue_init_node+0x3e/0x4d0 [ 233.981712][ T8783] blk_mq_init_tags+0x15c/0x2d0 [ 233.981728][ T8783] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 233.981751][ T8783] ? blk_mq_update_nr_hw_queues+0x928/0x1ab0 [ 233.981773][ T8783] ? kfree+0x19a/0x6d0 [ 233.981793][ T8783] ? blk_mq_update_nr_hw_queues+0x8d0/0x1ab0 [ 233.981818][ T8783] blk_mq_update_nr_hw_queues+0xa26/0x1ab0 [ 233.981847][ T8783] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 233.981876][ T8783] ? sysfs_add_file_mode_ns+0x259/0x300 [ 233.981901][ T8783] nbd_start_device+0x17f/0xb10 [ 233.981927][ T8783] ? device_create_file+0xf4/0x1c0 [ 233.981944][ T8783] nbd_genl_connect+0x135b/0x18f0 [ 233.981970][ T8783] ? __pfx_nbd_genl_connect+0x10/0x10 [ 233.981996][ T8783] ? rcu_is_watching+0x15/0xb0 [ 233.982018][ T8783] ? __nla_parse+0x40/0x60 [ 233.982037][ T8783] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 233.982068][ T8783] genl_family_rcv_msg_doit+0x215/0x300 [ 233.982093][ T8783] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.982121][ T8783] ? stack_trace_save+0x9c/0xe0 [ 233.982146][ T8783] genl_rcv_msg+0x60e/0x790 [ 233.982171][ T8783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.982192][ T8783] ? __pfx_nbd_genl_connect+0x10/0x10 [ 233.982219][ T8783] netlink_rcv_skb+0x208/0x470 [ 233.982236][ T8783] ? __lock_acquire+0xab9/0xd20 [ 233.982254][ T8783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.982277][ T8783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.982299][ T8783] ? down_read+0x1ad/0x2e0 [ 233.982321][ T8783] genl_rcv+0x28/0x40 [ 233.982342][ T8783] netlink_unicast+0x82f/0x9e0 [ 233.982359][ T8783] ? __pfx_netlink_unicast+0x10/0x10 [ 233.982375][ T8783] ? netlink_sendmsg+0x642/0xb30 [ 233.982392][ T8783] ? skb_put+0x11b/0x210 [ 233.982411][ T8783] netlink_sendmsg+0x805/0xb30 [ 233.982432][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.982451][ T8783] ? aa_sock_msg_perm+0xf1/0x1d0 [ 233.982471][ T8783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.982488][ T8783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.982506][ T8783] __sock_sendmsg+0x21c/0x270 [ 233.982536][ T8783] ____sys_sendmsg+0x505/0x830 [ 233.982557][ T8783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.982580][ T8783] ? import_iovec+0x74/0xa0 [ 233.982602][ T8783] ___sys_sendmsg+0x21f/0x2a0 [ 233.982623][ T8783] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.982654][ T8783] ? __fget_files+0x2a/0x420 [ 233.982673][ T8783] ? __fget_files+0x3a0/0x420 [ 233.982695][ T8783] __x64_sys_sendmsg+0x19b/0x260 [ 233.982716][ T8783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.982742][ T8783] ? do_syscall_64+0xbe/0xfa0 [ 233.982762][ T8783] do_syscall_64+0xfa/0xfa0 [ 233.982780][ T8783] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.982798][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.982814][ T8783] ? clear_bhb_loop+0x60/0xb0 [ 233.982832][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.982847][ T8783] RIP: 0033:0x7f840dd8eec9 [ 233.982862][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.982877][ T8783] RSP: 002b:00007f840ecd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.982894][ T8783] RAX: ffffffffffffffda RBX: 00007f840dfe5fa0 RCX: 00007f840dd8eec9 [ 233.982907][ T8783] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 233.982918][ T8783] RBP: 00007f840de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.982929][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.982939][ T8783] R13: 00007f840dfe6038 R14: 00007f840dfe5fa0 R15: 00007ffef4f89238 [ 233.982957][ T8783] [ 233.983182][ T5952] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 234.113883][ T5186] block nbd0: Receive control failed (result -32) [ 234.116180][ T52] block nbd0: Receive control failed (result -32) [ 234.491156][ T982] usb 1-1: USB disconnect, device number 77 [ 234.531396][ T5952] usb 5-1: device descriptor read/8, error -71 [ 234.549340][ T8783] nbd0: detected capacity change from 0 to 127 [ 234.561106][ T5864] block nbd0: Dead connection, failed to find a fallback [ 234.568849][ T5864] block nbd0: shutting down sockets [ 234.574054][ T5864] blk_print_req_error: 25 callbacks suppressed [ 234.574070][ T5864] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.589641][ T5864] buffer_io_error: 25 callbacks suppressed [ 234.589824][ T5864] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.604093][ T5864] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.613218][ T5864] Buffer I/O error on dev nbd0, logical block 1, async page read [ 234.621194][ T5864] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.630269][ T5864] Buffer I/O error on dev nbd0, logical block 2, async page read [ 234.638254][ T5864] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.647370][ T5864] Buffer I/O error on dev nbd0, logical block 3, async page read [ 234.655203][ T5864] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.664653][ T5864] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.664784][ T5952] usb usb5-port1: unable to enumerate USB device [ 234.673034][ T5864] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.688791][ T5864] Buffer I/O error on dev nbd0, logical block 1, async page read [ 234.697079][ T5864] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.706123][ T5864] Buffer I/O error on dev nbd0, logical block 2, async page read [ 234.714269][ T5864] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.723471][ T5864] Buffer I/O error on dev nbd0, logical block 3, async page read [ 234.731534][ T5864] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.740597][ T5864] Buffer I/O error on dev nbd0, logical block 0, async page read [ 234.748446][ T5864] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.757495][ T5864] Buffer I/O error on dev nbd0, logical block 1, async page read [ 234.766215][ T5864] ldm_validate_partition_table(): Disk read failed. [ 234.773614][ T5864] Dev nbd0: unable to read RDB block 0 [ 234.779945][ T5864] nbd0: unable to read partition table [ 234.789363][ T5864] ldm_validate_partition_table(): Disk read failed. [ 234.796930][ T5864] Dev nbd0: unable to read RDB block 0 [ 234.803992][ T5864] nbd0: unable to read partition table